Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/ZBchq6XY20TTbsyHdd1bA4NXQDI.roa
File: ZBchq6XY20TTbsyHdd1bA4NXQDI.roa (raw, json)
Hash identifier: cXsbXY9mXAQImf4zNq8oJbYuL59z2XDzDCo4Q8qeQoc=
Subject key identifier: 64:17:21:AB:A5:D8:DB:44:D3:6E:CC:87:75:DD:5B:03:83:57:40:32
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 01954DCAA098CAAAD1CDD519976DF8238D78
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/ZBchq6XY20TTbsyHdd1bA4NXQDI.roa
Signing time: Fri 28 Feb 2025 18:21:19 +0000
ROA not before: Fri 28 Feb 2025 18:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6424
IP address blocks: 103.243.124.0/22 maxlen: 24
146.19.95.0/24 maxlen: 24
146.19.249.0/24 maxlen: 24
185.112.251.0/24 maxlen: 24
185.162.183.0/24 maxlen: 24
185.166.144.0/24 maxlen: 24
188.93.192.0/21 maxlen: 24
188.93.196.0/24 maxlen: 24
188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
193.107.13.0/24 maxlen: 24
193.109.184.0/21 maxlen: 24
193.109.184.0/24 maxlen: 24
193.163.151.0/24 maxlen: 24
212.52.23.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:a::/48 maxlen: 48
2001:b18:b::/48 maxlen: 48
2001:b18:1000::/48 maxlen: 48
2001:b18:1001::/48 maxlen: 48
2001:b18:1002::/48 maxlen: 48
2001:b18:1008::/48 maxlen: 48
2001:b18:1012::/48 maxlen: 48
2001:b18:1016::/48 maxlen: 48
2001:b18:1018::/48 maxlen: 48
2001:b18:1020::/48 maxlen: 48
2001:b18:1031::/48 maxlen: 48
2a0b:e740::/29 maxlen: 29
2a0d:82c0::/29 maxlen: 48
2a0d:82c0::/32 maxlen: 32
2a0d:82c7:d::/48 maxlen: 48
2a0e:5f00::/29 maxlen: 48
2a0e:5f00::/32 maxlen: 32
2a0f:7700::/29 maxlen: 29
2a0f:8900::/29 maxlen: 29
2a0f:d300::/29 maxlen: 29
2a10:ee40::/29 maxlen: 29
2a11:c00::/29 maxlen: 29
2a12:c1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:ca:a0:98:ca:aa:d1:cd:d5:19:97:6d:f8:23:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Feb 28 18:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=641721aba5d8db44d36ecc8775dd5b0383574032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:4d:88:d9:b6:1a:df:fa:e1:d5:5f:07:96:
c1:29:c4:2d:78:7a:50:40:3f:34:41:42:2d:ce:f9:
ff:33:cf:2c:86:49:10:16:d9:bf:78:50:6e:92:3c:
68:28:f3:ce:96:5c:32:09:60:99:9e:66:f7:2d:7e:
b0:87:00:98:ea:22:e1:a7:af:75:e9:f8:82:31:40:
22:98:a6:0b:4a:f2:db:9d:aa:03:97:af:77:88:e6:
15:d4:45:ec:78:48:3a:55:94:b2:c0:f1:94:7f:48:
d9:ed:a1:60:22:7d:12:93:c5:18:74:4c:5c:17:71:
05:f1:8d:f3:aa:cf:44:5b:36:48:83:a4:e9:c8:74:
76:2c:ee:2f:f5:57:4b:3c:3d:b6:94:3a:95:5a:10:
0e:b0:f9:5a:e8:0c:f6:e6:d3:0e:4f:3f:c3:dd:0c:
3e:14:22:ff:2f:23:2e:ba:cb:c3:d7:37:f7:97:17:
3a:76:eb:39:1d:57:04:c1:71:85:30:e2:86:f3:4a:
32:ce:52:c9:c7:91:2f:a4:aa:a8:fb:5c:ae:c5:3c:
6e:04:00:af:35:09:9e:4f:e9:cd:56:76:7b:b8:5b:
57:c7:4b:80:cf:c3:08:e8:fc:81:96:d1:f6:4c:2d:
54:ee:76:2b:2d:e2:f0:88:33:c6:48:e8:f9:e4:83:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:21:AB:A5:D8:DB:44:D3:6E:CC:87:75:DD:5B:03:83:57:40:32
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/ZBchq6XY20TTbsyHdd1bA4NXQDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.124.0/22
146.19.95.0/24
146.19.249.0/24
185.112.251.0/24
185.162.183.0/24
185.166.144.0/24
188.93.192.0/21
193.107.13.0/24
193.109.184.0/21
193.163.151.0/24
212.52.23.0/24
IPv6:
2001:b18::/32
2a0b:e740::/29
2a0d:82c0::/29
2a0e:5f00::/29
2a0f:7700::/29
2a0f:8900::/29
2a0f:d300::/29
2a10:ee40::/29
2a11:c00::/29
2a12:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:03:c0:d9:d3:02:65:b7:01:4b:e9:31:f7:18:95:40:b7:e0:
70:3a:48:60:74:6c:9b:f8:5b:59:10:15:5b:06:0c:df:7c:3b:
51:a1:b1:32:73:8e:6a:6d:2c:14:e0:26:68:82:3c:2b:a3:ad:
c8:67:8f:2f:54:a9:49:02:03:03:94:bb:45:d3:b5:be:12:9c:
5b:78:dd:60:ef:a7:4b:8b:46:e8:c5:21:c9:26:ea:2a:36:af:
6b:60:73:90:20:52:0b:ac:c0:22:68:3f:b0:61:e6:e4:6c:af:
a7:a6:95:47:8a:42:0a:ed:5d:9c:a3:7c:ee:ac:4a:44:7f:6f:
6d:3b:ae:a1:ca:90:9f:81:b8:53:a5:38:da:01:01:38:28:65:
4b:e7:0f:b0:d3:e0:35:9a:ee:7f:26:2e:0c:18:e3:d7:92:2c:
9c:34:a3:2f:9d:7a:6c:f2:8f:82:46:ab:70:5d:3e:b3:3d:06:
52:e0:f9:3b:1a:f3:26:7f:42:33:a1:b3:39:1d:d6:9c:c1:58:
c8:69:56:18:4f:37:db:ca:05:9d:5b:8f:07:30:9c:61:58:2e:
61:b5:7c:2b:65:ab:bb:c4:93:5a:a2:71:35:31:77:08:a0:1b:
88:58:9c:9a:7d:5f:ae:b1:05:3f:1b:e2:13:3a:03:87:56:2e:
88:71:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:03 2025 by rpki-client