Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa
File: ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa (raw, json)
Hash identifier: 7IrCQhHl7e+sxv1qd9FACB7rpVFTzzOf7CaAsOq9lEE=
Subject key identifier: 66:45:C7:5C:00:8F:54:11:32:69:25:80:23:86:39:4E:24:34:B9:78
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019422FB5E6CBC10F545853C6CF55B9B6F70
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12963
IP address blocks: 91.218.72.0/24 maxlen: 24
91.218.73.0/24 maxlen: 24
91.218.74.0/24 maxlen: 24
91.218.75.0/24 maxlen: 24
94.247.224.0/21 maxlen: 21
94.247.224.0/23 maxlen: 23
176.97.0.0/23 maxlen: 23
176.97.2.0/24 maxlen: 24
176.97.3.0/24 maxlen: 24
176.97.4.0/22 maxlen: 22
185.192.216.0/22 maxlen: 22
194.183.160.0/19 maxlen: 19
213.160.128.0/19 maxlen: 19
2a00:9880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5e:6c:bc:10:f5:45:85:3c:6c:f5:5b:9b:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6645c75c008f5411326925802386394e2434b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:5d:c0:ee:f2:2c:95:02:42:02:28:da:0b:
d5:9c:43:a0:2f:6b:f6:60:c6:7a:cf:2b:0a:12:80:
42:19:73:26:58:f5:3c:b0:cb:97:d1:38:65:5c:cb:
89:f7:94:b0:a0:35:94:96:af:5b:d7:20:89:33:f2:
e3:ec:20:e7:9f:3f:50:70:c4:07:0e:a7:8c:1e:b1:
8f:28:24:64:27:37:c7:f1:07:b9:80:a0:11:04:85:
2e:77:6d:81:45:1d:c3:92:19:4a:37:5d:a0:43:b7:
e2:12:71:93:9f:01:81:63:d6:ab:f7:97:45:e6:84:
cb:f4:07:14:08:19:fa:67:fe:d4:cc:74:69:22:96:
a3:39:6c:ba:d4:2d:b6:ed:20:0f:35:b4:bb:9e:50:
b5:64:22:ab:5f:3a:5d:18:a8:a2:4a:5c:40:d0:4e:
ef:14:64:d0:16:ab:7c:ab:77:13:be:32:f4:70:ba:
f6:e8:b4:9b:ca:95:ab:3c:86:85:30:d5:b8:56:1b:
12:8c:ae:c9:0e:2c:c8:10:cb:a1:9a:0a:6a:d0:37:
b1:16:09:6a:56:bc:79:57:b4:c1:b1:4c:3f:3a:e4:
73:a9:af:7f:8d:00:f9:d8:af:32:bf:b3:30:4c:10:
7c:53:e5:74:4a:f3:9f:a6:99:23:b8:bf:6b:45:1e:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:C7:5C:00:8F:54:11:32:69:25:80:23:86:39:4E:24:34:B9:78
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.72.0/22
94.247.224.0/21
176.97.0.0/21
185.192.216.0/22
194.183.160.0/19
213.160.128.0/19
IPv6:
2a00:9880::/32
Signature Algorithm: sha256WithRSAEncryption
06:05:f8:f9:25:16:ae:71:f5:7e:da:51:04:64:fa:fe:2c:60:
5b:29:d4:3f:3a:45:7c:4f:c6:47:64:cc:a8:ab:78:03:34:76:
9a:d4:9a:e0:6a:58:6a:cd:0c:4d:08:48:0e:8e:9e:d1:a3:40:
84:13:c4:2e:08:e9:56:4f:d1:b2:e4:64:fc:ed:27:9b:8d:c4:
6b:4e:e6:e8:c9:2f:03:97:09:23:d9:d9:27:28:a8:c7:59:d8:
3b:5d:16:25:53:b6:34:ab:b5:0d:38:e2:99:c3:27:aa:c8:1a:
e3:65:10:60:0d:3b:79:c4:c9:99:7b:b5:23:9d:a3:a5:25:b1:
54:e0:59:d7:40:bd:f5:73:e8:cd:a8:99:d2:df:1d:e5:8e:39:
f8:49:8f:1a:51:8b:8b:ed:84:de:01:c6:34:06:8c:66:e6:85:
75:2d:9c:20:cd:d0:85:64:bd:62:44:0d:aa:3a:d1:2f:61:9b:
94:79:56:f6:72:26:39:90:95:6d:14:6f:82:02:89:88:35:65:
96:7d:7e:a4:c4:fd:8c:f9:1e:cf:9c:76:34:71:c4:8a:c1:e5:
96:3b:ce:67:37:52:b9:ce:29:9e:7d:ee:bb:f4:7d:a7:59:3f:
f5:63:84:23:1b:b9:12:3f:0e:45:72:21:25:62:e0:47:b4:91:
aa:85:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:03 2025 by rpki-client