Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z_vs-Pv50nyEYa20YdXyyny1jOQ.roa
File: z_vs-Pv50nyEYa20YdXyyny1jOQ.roa (raw, json)
Hash identifier: oyF5qZcw0v3lMBGZguWpAR05PeU1Oq34z6Y0XwFNaHk=
Subject key identifier: CF:FB:EC:F8:FB:F9:D2:7C:84:61:AD:B4:61:D5:F2:CA:7C:B5:8C:E4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01955CAD0ED9E708FA95E828308128A8B56F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z_vs-Pv50nyEYa20YdXyyny1jOQ.roa
Signing time: Mon 03 Mar 2025 15:43:20 +0000
ROA not before: Mon 03 Mar 2025 15:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:ad:0e:d9:e7:08:fa:95:e8:28:30:81:28:a8:b5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 3 15:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cffbecf8fbf9d27c8461adb461d5f2ca7cb58ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:f0:48:35:ae:85:5b:80:99:e1:8c:d4:16:
d2:5f:d5:ca:d7:ec:f6:e0:77:6e:d8:05:8d:71:b6:
1d:16:aa:bc:6c:a8:3e:5d:c4:af:48:b1:e9:67:59:
6b:2b:d5:ad:f4:52:7c:4f:d0:ac:77:90:5a:e8:2d:
bf:51:19:ae:4d:83:03:20:25:15:a5:6c:f7:80:0a:
9d:9b:42:3b:c8:19:c1:a0:5b:d6:e6:56:90:8a:b9:
18:7c:07:fe:2b:29:3b:a1:34:2f:ec:ee:70:b7:5a:
22:10:6f:c6:31:9a:c0:81:7d:3e:a8:82:17:e9:47:
bc:35:e9:95:d6:e9:86:88:ca:3c:09:1c:15:2e:8f:
a4:cb:77:3f:54:46:51:1f:b9:63:3c:56:cd:8c:4b:
2e:2d:25:04:76:f6:55:47:18:fe:50:03:4a:19:7a:
b7:58:54:e8:10:ab:52:cf:94:19:42:e4:0a:66:01:
63:a6:cc:86:f4:a7:15:9c:a0:eb:1e:3a:80:45:8a:
a0:2f:08:b6:12:c0:b4:c4:cf:d3:88:a4:60:e2:bf:
2a:e2:05:ea:cc:ea:e6:1a:78:84:bf:75:df:44:99:
7a:b8:cb:41:68:6e:74:01:90:04:01:93:a3:f9:ca:
a4:6b:10:a9:74:72:91:f4:65:a0:45:d2:9b:47:e2:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:EC:F8:FB:F9:D2:7C:84:61:AD:B4:61:D5:F2:CA:7C:B5:8C:E4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/z_vs-Pv50nyEYa20YdXyyny1jOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.51.255
185.254.28.0/23
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ac:24:e5:e7:68:67:24:ea:70:a6:06:ad:93:eb:05:59:96:
b5:0c:f9:79:32:05:bd:40:18:68:c1:16:9e:56:cc:8a:9a:b2:
1c:d5:d7:f2:a8:e6:d8:c0:b4:fc:bf:8c:c9:a0:34:a9:da:af:
ab:5a:d9:06:8b:ee:73:23:76:0f:12:af:4d:7e:0b:22:95:3f:
77:a1:7e:ae:0a:7b:e2:18:e2:69:f0:96:bd:e5:8f:e0:b2:25:
d3:9c:fd:77:55:c4:e4:91:b5:54:5c:02:65:55:68:92:a5:f4:
5b:72:57:3d:18:02:4d:6a:39:0b:15:a8:1c:c5:f6:99:85:5f:
c3:d0:29:d2:eb:ce:03:ce:47:e1:3a:d9:88:98:45:c6:9d:95:
c9:5c:ac:5b:07:31:22:8b:ec:c1:6d:87:ed:1d:98:44:09:9a:
94:37:3c:35:0c:7d:f0:05:e2:f2:1f:06:1e:ea:da:47:c1:90:
92:5b:be:7c:49:86:1b:62:bd:f4:75:72:7b:1d:9f:12:fd:f7:
33:ca:19:68:07:e5:d0:f3:92:04:e6:15:55:ad:93:af:1b:88:
b1:c7:45:47:89:23:1d:f2:6c:b9:02:5d:f8:e5:b0:14:cc:5b:
6b:23:10:b4:6e:0e:9d:d2:5d:00:fd:be:d5:48:6d:c5:9a:db:
d3:35:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:09 2025 by rpki-client