Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zsat_Kz6NAhfzEasx4a9lQm7pnc.roa
File: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (raw, json)
Hash identifier: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=
Subject key identifier: CE:C6:AD:FC:AC:FA:34:08:5F:CC:46:AC:C7:86:BD:95:09:BB:A6:77
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A4A7962F19C95B539B293C2A30ACC
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zsat_Kz6NAhfzEasx4a9lQm7pnc.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.209.0/24 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4a:79:62:f1:9c:95:b5:39:b2:93:c2:a3:0a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec6adfcacfa34085fcc46acc786bd9509bba677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:ce:53:12:f7:12:7d:40:71:7f:4f:fa:28:
db:31:59:de:e7:cc:99:4c:8e:52:cc:bb:cf:ec:f0:
24:24:77:18:36:a3:60:5f:d7:11:52:da:d4:7b:7d:
6b:a7:01:05:24:8a:2e:15:a1:79:84:57:e3:a6:bb:
cb:60:75:de:87:75:50:86:70:1f:85:92:61:30:e8:
4f:9d:1d:cb:c0:51:e9:9d:23:79:c7:87:1f:c9:1b:
50:c5:19:cf:10:4e:1f:4b:5a:b6:89:fb:f5:88:d5:
6b:27:a3:a1:d5:eb:11:80:65:80:5c:3f:6c:49:c1:
43:3b:55:48:04:fe:7c:7d:29:78:7b:71:e2:bd:e6:
d2:91:f3:af:1e:1a:c8:9c:9a:5a:da:9b:b5:29:5b:
9f:2f:2e:e6:9f:94:97:47:63:2d:fc:32:24:23:3f:
10:b3:a8:72:bb:37:2b:64:c6:47:70:c3:3b:08:c1:
2c:3c:40:98:35:ee:3d:f5:be:6a:d1:c4:88:d9:b3:
a2:34:a4:16:0b:a2:8b:3a:b9:7c:45:bd:45:98:91:
38:36:35:18:9b:c0:f0:13:cd:9f:41:f1:1e:2f:6b:
d3:eb:86:16:36:e7:2e:97:5c:12:2e:41:7a:21:46:
b7:ae:48:cf:07:d2:f6:8e:70:e6:27:19:1e:4b:d4:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:AD:FC:AC:FA:34:08:5F:CC:46:AC:C7:86:BD:95:09:BB:A6:77
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zsat_Kz6NAhfzEasx4a9lQm7pnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.209.0/24
45.86.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:09:b9:2e:f4:6d:58:ba:12:88:35:07:20:e8:db:76:22:98:
3d:8c:15:84:fe:fb:d3:ad:b4:e2:33:d0:d1:93:55:8b:47:0b:
9c:f5:4f:06:44:77:ca:0a:a8:c6:06:7a:d9:67:71:52:a0:0b:
ea:24:10:ba:81:b9:15:45:8c:90:7f:fe:1a:d6:fb:0f:c0:e6:
74:81:a3:62:3b:3d:92:d2:99:58:91:51:06:16:0c:3d:9a:b4:
f1:71:26:ab:2f:00:63:ed:92:31:d3:96:6a:6b:e9:2a:35:bc:
48:12:46:8f:22:6c:74:66:e7:63:6e:8f:4b:b5:66:08:b6:1a:
57:90:08:e8:c2:94:f8:bc:0a:60:8a:68:ab:f0:2f:3c:75:f6:
97:d2:9f:a9:6b:93:24:2c:dc:5e:db:23:9c:ad:4f:76:0f:52:
75:76:5e:f3:86:79:cc:8f:58:6b:1b:f1:a3:0f:41:d7:ea:68:
c0:56:c4:a9:2c:18:88:01:3e:53:22:12:38:a4:72:46:97:b4:
f8:3e:3a:dc:ff:72:a7:31:33:a7:93:13:b5:fb:86:68:e7:94:
ef:c9:a4:83:64:e6:8b:17:d1:01:6a:53:01:aa:36:43:68:ca:
60:b0:78:46:b5:5a:79:68:7f:b0:12:44:66:ab:b6:38:5a:82:
6b:d6:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:14 2025 by rpki-client