Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZRuKQOVYOMYOv1_UA62Ccf_IM4U.roa
File: ZRuKQOVYOMYOv1_UA62Ccf_IM4U.roa (raw, json)
Hash identifier: NoaoxobeCEsccRCYDDxR95MpUFTLpPJS1WoJ9DWW5YQ=
Subject key identifier: 65:1B:8A:40:E5:58:38:C6:0E:BF:5F:D4:03:AD:82:71:FF:C8:33:85
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C7E1F66C160EEF1C3EDDC52A4467
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZRuKQOVYOMYOv1_UA62Ccf_IM4U.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30934
IP address blocks: 195.65.103.0/24 maxlen: 24
212.243.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c7:e1:f6:6c:16:0e:ef:1c:3e:dd:c5:2a:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=651b8a40e55838c60ebf5fd403ad8271ffc83385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:9f:89:a7:79:6c:3d:c1:cc:8f:ae:0b:85:
bc:ba:36:1a:48:fa:6a:46:2d:10:b5:02:94:db:3c:
57:48:f5:5c:0e:21:98:b9:1c:27:fe:74:a6:4f:13:
d9:c6:a5:56:65:be:69:a0:96:03:5d:c7:ef:86:7e:
53:35:2d:20:49:d6:ba:f0:33:a4:2c:72:90:2f:ab:
ee:2a:60:db:26:bf:42:20:46:3e:d1:cd:f4:dd:f8:
96:7f:99:61:a1:ae:9c:f2:15:34:81:5b:a1:71:54:
c5:9f:ee:65:a5:6a:dc:dc:63:a4:75:ed:24:e5:9b:
a4:ec:a4:f9:cd:a2:ef:f1:c6:12:30:57:5a:17:96:
83:8f:77:ac:5f:b0:e4:cc:89:02:e7:70:19:64:70:
25:ef:03:13:c2:72:29:e4:f0:e6:b3:3e:f7:b5:04:
be:d7:17:32:a0:46:5f:37:15:d1:e3:22:8f:16:fd:
fe:ea:ac:e3:87:ca:dc:ba:33:ac:d6:dd:00:7a:52:
94:97:c7:74:10:34:ae:f7:d7:14:8b:39:fa:28:72:
99:41:4d:1c:7b:8c:23:b3:de:31:59:14:e7:ad:df:
3d:a4:ce:c5:3d:4b:81:5b:7b:04:fa:ab:09:7f:3c:
35:3e:b3:4a:31:ef:63:d1:a0:9d:82:12:45:df:56:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:8A:40:E5:58:38:C6:0E:BF:5F:D4:03:AD:82:71:FF:C8:33:85
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZRuKQOVYOMYOv1_UA62Ccf_IM4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.103.0/24
212.243.12.0/24
Signature Algorithm: sha256WithRSAEncryption
04:02:48:da:c6:22:c8:c5:6f:64:37:32:48:60:d4:03:d8:81:
d8:83:3e:32:70:2a:7a:d6:8e:cc:0f:b8:ac:e2:cb:92:11:fa:
5e:41:7c:41:91:8e:84:80:9d:fc:b1:9c:79:e3:ee:78:b9:ab:
a7:e8:1c:36:17:32:6c:7c:cd:f2:5c:2f:d1:1f:71:41:5f:e2:
73:fd:55:70:fd:2c:04:ab:f8:0c:40:4f:da:7b:d4:be:39:e2:
a4:a4:bc:f2:74:44:50:a4:04:2f:cf:c7:03:80:a3:4c:8a:70:
44:a3:22:71:93:2b:b4:26:7c:05:2f:52:d4:8c:b2:d6:8d:b4:
9d:e5:9c:b1:ef:ff:bb:33:65:9c:41:ef:21:37:49:5e:47:4a:
5d:d1:b3:8c:74:b9:77:6d:cd:3a:94:c8:d8:e4:da:1f:1f:dc:
23:19:83:63:40:38:7d:db:5a:f3:54:03:2d:d2:26:b7:f3:c8:
6b:8a:5a:39:96:bd:c1:2e:7c:94:e2:29:7f:b9:7d:25:09:32:
08:b9:44:64:a5:09:51:e9:6b:76:30:e4:5b:d9:8b:cc:d7:ef:
7c:ba:cb:95:2b:f7:c1:e7:43:ab:3d:65:3c:42:39:db:37:c1:
0e:2d:ce:26:3f:ff:d8:f8:fa:59:a0:b8:c4:4e:3b:27:eb:f1:
3c:3c:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:12 2025 by rpki-client