Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/zdd_itkr61DwlSbiF7xORGma-Mg.roa
File: zdd_itkr61DwlSbiF7xORGma-Mg.roa (raw, json)
Hash identifier: s7+y8n33Kdf5OFXebrrUAhH6tASSitV8ofo7STn/T1o=
Subject key identifier: CD:D7:7F:8A:D9:2B:EB:50:F0:95:26:E2:17:BC:4E:44:69:9A:F8:C8
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 0194228D08F7B6FCC0CED3E8D13B30B12176
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/zdd_itkr61DwlSbiF7xORGma-Mg.roa
Signing time: Wed 01 Jan 2025 15:47:35 +0000
ROA not before: Wed 01 Jan 2025 15:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196849
IP address blocks: 91.206.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:08:f7:b6:fc:c0:ce:d3:e8:d1:3b:30:b1:21:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Jan 1 15:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdd77f8ad92beb50f09526e217bc4e44699af8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:70:70:7c:47:58:50:73:13:ca:22:a3:af:
6c:fe:4d:e6:5f:e5:16:02:fe:10:77:70:59:c5:fa:
85:5e:fe:1d:7f:e3:c4:f3:be:7f:c0:67:85:98:08:
2b:42:2d:4b:55:f6:8c:dd:41:b0:7a:4c:d1:46:c1:
2f:e2:80:81:51:13:6a:b3:1b:14:78:79:fc:ba:8a:
8a:00:ee:7f:de:ee:b9:5c:be:b3:05:2f:09:d9:f7:
2f:dc:9e:eb:ff:b4:86:24:24:94:fb:cf:f1:65:31:
56:94:c5:cc:39:96:cc:9d:83:15:07:0b:73:bb:9d:
8f:39:4b:c2:7a:ad:bd:57:fa:7f:06:06:9d:00:65:
d6:0b:38:b7:94:93:77:20:50:f6:c9:ae:07:c6:6b:
24:e9:44:10:f0:14:17:87:29:54:8d:8b:1d:65:d4:
d7:bb:ae:95:47:45:d6:33:42:0e:a6:de:5d:db:ef:
d1:7b:75:5b:db:6b:e7:0e:22:24:0a:b6:c2:7f:36:
8a:9d:0c:97:32:31:3d:dc:65:20:e6:49:70:2c:f3:
fd:3d:4c:57:a0:a0:f4:d1:45:94:85:d9:7b:8a:ae:
c1:57:81:fc:76:1a:8b:6d:1a:de:24:c8:e0:38:73:
9c:2f:cd:84:1a:37:fd:a2:51:7a:91:cc:e4:a1:41:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:7F:8A:D9:2B:EB:50:F0:95:26:E2:17:BC:4E:44:69:9A:F8:C8
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/zdd_itkr61DwlSbiF7xORGma-Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7a:e9:6e:23:86:56:b6:20:89:ce:76:e6:dc:a8:7e:eb:bc:
b5:6f:59:13:4a:3c:88:fd:c4:81:f0:5e:13:6f:0f:3c:ff:2f:
a1:cd:93:01:36:d3:1f:d9:27:c1:75:1d:54:d1:39:5a:b9:16:
d4:f0:c6:7e:60:1f:9d:af:bb:14:b5:b5:d6:32:db:d1:0e:7f:
95:e7:6e:ed:b9:92:7b:43:a8:b3:4f:43:ab:fe:99:30:60:3e:
9a:8d:e1:c2:ca:d5:ea:00:58:35:f3:a9:ab:63:78:81:24:96:
f4:bd:18:35:ea:4a:82:97:a7:13:7f:68:a4:3a:b7:8f:84:d7:
77:da:03:b8:49:08:d1:6d:2f:4f:c9:30:88:33:d2:e4:ec:fb:
c9:2a:75:ee:bf:86:e2:37:82:db:16:26:40:74:ef:17:90:f1:
f8:ed:18:b5:62:8b:fd:be:e7:8f:fd:1b:fd:75:26:79:05:05:
e7:b4:3c:98:d7:df:36:1a:00:22:31:0c:e9:43:df:4d:13:25:
2e:6d:15:28:6a:89:c1:2b:c5:a8:8f:c4:1e:64:3b:ec:4d:41:
5a:dc:5a:6c:95:5b:d4:b7:34:c5:64:ce:7f:eb:9b:5d:04:f0:
61:9f:cc:38:45:90:ac:b6:4f:cc:20:bb:20:da:e2:70:71:d4:
54:ba:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:55 2025 by rpki-client