Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/ZxlhkpSeT22co3ElobaCavDtI1I.roa
File: ZxlhkpSeT22co3ElobaCavDtI1I.roa (raw, json)
Hash identifier: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=
Subject key identifier: 67:19:61:92:94:9E:4F:6D:9C:A3:71:25:A1:B6:82:6A:F0:ED:23:52
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019427481019D9431DE5BC0560920079BCFA
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/ZxlhkpSeT22co3ElobaCavDtI1I.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204609
IP address blocks: 185.231.88.0/22 maxlen: 24
185.231.88.0/23 maxlen: 23
185.231.90.0/24 maxlen: 24
185.231.91.0/24 maxlen: 24
2a0d:a680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:10:19:d9:43:1d:e5:bc:05:60:92:00:79:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67196192949e4f6d9ca37125a1b6826af0ed2352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:d1:90:bb:47:2e:67:99:e6:95:09:5b:e0:
83:ef:a7:5d:8d:85:44:c9:af:80:0f:f2:73:e6:6d:
6d:3e:ff:01:9f:97:9a:1f:4c:c8:b9:e2:71:69:8d:
a3:24:42:13:04:7a:03:a9:0c:5a:ee:f7:f5:24:b1:
5f:64:9e:2a:0c:5c:d0:e4:78:75:97:a3:d5:d6:ab:
1c:e3:0d:53:78:a5:bf:2d:2f:59:b0:a5:35:4b:24:
f3:ef:86:c4:7b:67:bf:1b:6b:dc:d1:ee:f3:da:e5:
b1:79:3e:b5:a7:70:e6:85:7e:db:70:5a:25:38:84:
05:f7:7b:25:28:6a:d2:35:dd:fe:57:82:d2:f1:48:
fc:ee:9e:22:b1:cc:40:86:7c:80:0f:5e:a4:cd:39:
f9:1f:9d:5e:70:db:ba:a1:2e:12:61:2f:76:f4:60:
02:80:ec:6d:b6:71:0f:2e:61:32:80:2a:64:70:18:
0a:39:bc:d3:38:8d:89:3a:01:31:97:fd:5b:c1:73:
05:ad:00:17:af:03:be:0e:5e:f3:6f:08:68:e6:6f:
2a:a5:da:47:b4:9d:63:6e:14:96:bf:1c:db:ff:9e:
03:e9:9e:cd:8b:51:e5:38:2a:8a:ce:59:dc:71:05:
1b:53:b9:41:92:23:1f:f0:81:14:2d:fa:ed:03:05:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:61:92:94:9E:4F:6D:9C:A3:71:25:A1:B6:82:6A:F0:ED:23:52
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/ZxlhkpSeT22co3ElobaCavDtI1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.88.0/22
IPv6:
2a0d:a680::/32
Signature Algorithm: sha256WithRSAEncryption
57:9b:c9:1a:df:1d:38:dc:ba:79:c7:9c:fa:f5:08:c9:3c:96:
3f:38:81:79:b4:ef:51:c4:63:39:07:d4:97:3f:28:39:96:f4:
e5:8a:92:ea:1d:58:f5:58:09:fd:0c:18:60:59:26:26:57:87:
78:f4:d5:16:2f:9a:a8:6d:31:3b:e8:54:6b:51:5e:bf:42:14:
82:da:40:12:c4:c6:57:b5:5a:d2:1b:9c:a9:f5:ef:38:55:6c:
b9:bb:9e:e9:f1:89:20:d1:42:a0:56:0b:a4:e7:10:ee:4c:d4:
2f:c9:82:a9:6e:76:b2:ca:37:63:de:82:48:94:e5:54:06:b0:
ce:a8:f4:17:14:29:37:c0:f4:44:22:89:a4:aa:6a:41:05:1e:
2f:c9:4f:e5:93:88:ec:41:8f:6b:11:ce:b6:06:e1:df:7b:ab:
6f:89:db:ba:37:10:e7:04:a9:0a:44:9d:53:66:f5:8b:45:be:
1a:de:ff:c5:bb:40:de:2a:14:96:fe:37:7e:88:18:c2:15:4b:
46:e0:71:f6:05:26:4a:34:4d:3f:8d:e2:8e:96:1a:c2:a9:b1:
60:ad:90:3c:c9:db:d2:44:f8:d7:e7:94:9f:7c:ea:31:fa:91:
b9:eb:7f:df:ee:63:f9:dd:bb:76:fa:7f:cd:bc:99:90:7c:89:
c4:84:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:23:56 2025 by rpki-client