Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Zzi0jA8hu6nCAC6_hDiqlV5STLk.roa
File: Zzi0jA8hu6nCAC6_hDiqlV5STLk.roa (raw, json)
Hash identifier: vwHnuJEp89GYDDVB3RgpDQkjSqsxVfx1A23D/ez288I=
Subject key identifier: 67:38:B4:8C:0F:21:BB:A9:C2:00:2E:BF:84:38:AA:95:5E:52:4C:B9
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0196430432826DC17B1A657A649F10B52E56
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Zzi0jA8hu6nCAC6_hDiqlV5STLk.roa
Signing time: Thu 17 Apr 2025 09:11:10 +0000
ROA not before: Thu 17 Apr 2025 09:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13886
IP address blocks: 45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
204.52.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:04:32:82:6d:c1:7b:1a:65:7a:64:9f:10:b5:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 17 09:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6738b48c0f21bba9c2002ebf8438aa955e524cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:44:c1:88:c5:98:09:53:0a:d3:cb:e4:92:
7c:5f:bb:46:b6:ac:83:ea:82:1d:7f:25:e4:a6:a4:
61:b5:02:32:8a:ac:cf:2f:17:c3:d1:68:08:12:33:
39:8f:c8:29:64:5f:5d:d6:ac:87:d3:2e:24:53:0d:
2f:38:db:a8:08:0d:23:a8:a6:59:bc:be:53:ac:b9:
1c:95:d2:36:04:ff:4f:08:a7:40:c4:65:74:95:9d:
38:f3:2d:26:2b:d7:11:7d:ff:85:df:85:4c:5e:10:
54:14:aa:09:66:4b:73:c1:4c:59:60:ab:1a:e7:f7:
8f:7e:6d:24:5c:ae:9e:05:43:0c:aa:92:6a:e6:b1:
ea:04:dc:c9:c7:ca:f1:43:73:d1:75:8a:9b:dc:6b:
72:8d:9b:db:bf:95:b6:41:d6:fc:8d:15:64:2e:fc:
5c:62:aa:00:97:0f:9c:ce:ec:b2:4b:c0:a7:c3:85:
7d:aa:f7:65:92:6c:03:6b:7a:9c:e7:bb:9a:b7:3f:
49:00:95:df:8d:1c:c6:a6:cf:46:90:06:c4:82:15:
b9:0f:79:73:13:07:8b:2c:5b:40:47:1f:f4:ca:a5:
29:c0:68:fc:13:30:b8:e7:34:b5:19:03:3e:29:a6:
bb:87:24:43:00:e0:49:e7:9a:58:dc:8e:ce:db:ac:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:B4:8C:0F:21:BB:A9:C2:00:2E:BF:84:38:AA:95:5E:52:4C:B9
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Zzi0jA8hu6nCAC6_hDiqlV5STLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
64.137.51.0/24
104.238.29.0/24
104.239.15.0/24
204.52.112.0/24
Signature Algorithm: sha256WithRSAEncryption
98:05:98:e3:10:04:ef:3b:f2:08:35:1a:4c:a7:98:b6:5c:78:
dd:71:71:22:58:83:45:70:46:57:8e:de:17:7d:d6:09:2b:ea:
8a:cd:31:84:3b:c0:2d:53:6c:c7:b0:f5:bf:9a:00:7f:18:f6:
b9:0f:d2:ee:29:48:b6:04:93:86:f9:21:05:0f:2c:62:2f:9b:
c5:04:94:9e:3a:01:b4:75:6d:bb:52:36:4d:05:38:29:9b:59:
77:80:5d:6c:97:bc:ed:c5:f2:de:bf:6d:d9:cf:1d:6d:df:c6:
a3:c1:da:f7:9e:b7:2d:4c:66:11:d9:82:d0:c9:d4:95:f1:41:
a5:aa:69:ff:fd:bc:f1:d0:e2:cb:be:6a:7c:01:4c:39:7a:bc:
b5:af:2e:9a:c1:3f:5e:1a:b8:01:a0:00:71:7e:8a:3b:08:06:
d1:22:fa:33:ec:18:f3:1a:d8:d0:a0:57:61:e1:1b:83:14:79:
ee:29:66:ae:1e:73:94:cf:9e:86:47:1e:0d:e9:8d:e6:ab:5c:
e0:0c:a8:f2:f8:99:d4:d2:dd:b0:aa:b4:21:c8:4d:cc:a6:06:
79:b8:2c:d0:90:11:f0:e4:46:79:f6:2c:48:a2:54:90:8b:82:
68:44:64:dc:33:e6:e6:80:2a:59:19:17:44:1b:f0:37:b9:c1:
c0:85:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:00 2025 by rpki-client