Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa
File: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (raw, json)
Hash identifier: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=
Subject key identifier: CC:F9:91:B4:7A:D6:00:71:CC:8D:36:D9:A9:0C:5B:FE:4D:50:10:4D
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0194236A0831C15C9EAE1D47C250F7A27283
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213273
IP address blocks: 81.163.192.0/23 maxlen: 23
81.163.194.0/24 maxlen: 24
2a13:1a81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:08:31:c1:5c:9e:ae:1d:47:c2:50:f7:a2:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf991b47ad60071cc8d36d9a90c5bfe4d50104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:66:ff:80:55:86:0c:1b:b0:5f:50:c3:c5:
e0:63:87:fa:f2:64:10:e2:7b:2f:08:26:8c:d9:9a:
ba:be:71:81:bc:25:e5:9b:a7:39:c7:0d:35:44:a5:
80:b1:55:1e:ef:d9:e6:79:87:3b:6e:20:e9:6d:a8:
ed:94:af:86:9d:56:35:9c:12:60:ba:4c:09:05:84:
8d:96:50:1a:78:16:17:b8:a9:d8:ea:9b:c1:e5:80:
8c:40:e7:9c:84:9d:36:e1:0b:1c:f8:3f:09:6c:a3:
dc:65:9e:e7:c1:84:03:0c:d5:09:ff:bb:2e:97:2f:
39:2a:b1:3c:1c:48:ba:43:8a:3e:32:31:fe:c6:98:
15:6e:e7:90:ea:78:01:34:3e:41:4b:78:df:02:8e:
44:22:48:e9:bc:03:ca:a0:fb:1c:bc:3f:73:ef:83:
2d:c6:f3:9d:b6:3d:b4:b1:b4:fe:01:f1:48:af:61:
b7:26:7d:db:a1:d1:89:4b:ec:7b:12:e5:51:ae:44:
b8:f7:1a:be:56:3f:f2:ed:f8:ff:7a:1d:5b:4f:0d:
a3:5e:4a:ea:92:b8:8d:04:48:99:83:ae:9a:1b:3a:
65:10:48:57:60:0f:f7:89:f9:55:da:42:fd:98:97:
88:c1:7e:63:a7:19:20:b8:f5:c6:b5:05:da:57:d9:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:91:B4:7A:D6:00:71:CC:8D:36:D9:A9:0C:5B:FE:4D:50:10:4D
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.192.0-81.163.194.255
IPv6:
2a13:1a81::/32
Signature Algorithm: sha256WithRSAEncryption
27:20:d5:b4:18:15:b0:44:72:60:41:5b:f5:c4:9c:06:d5:f4:
e4:d4:95:97:de:19:9f:12:23:02:76:9d:20:b4:23:df:5d:ab:
e5:96:7b:c4:b9:9f:25:19:a2:6f:f9:d0:18:b5:b9:95:6f:af:
d0:fe:ad:66:bb:14:6c:83:25:9f:cb:84:2f:f5:58:c6:9e:de:
38:f9:fe:98:55:3a:97:62:4e:5a:13:e5:5b:5d:82:2b:8d:5a:
6f:17:3f:53:af:0f:ea:7f:3e:20:df:89:64:16:c5:ef:ac:ca:
15:60:e8:6b:98:cd:db:97:80:e7:ab:d3:8c:5c:df:9c:2b:05:
5b:b7:13:a2:f6:22:e1:00:3b:e3:0f:58:2a:94:e5:97:fb:24:
fc:08:59:e9:89:cf:a8:a3:59:4e:05:6e:2e:12:65:e3:6f:b9:
4b:43:ef:5f:2d:74:f2:de:78:eb:31:aa:a6:19:40:e3:f5:cd:
23:ec:dd:6c:66:b9:66:5d:7e:97:4c:fc:1c:fb:7b:03:41:c4:
85:b6:d3:d8:a7:e5:05:ba:57:c0:4e:d8:42:36:40:de:da:2d:
d1:2b:c3:eb:b6:e8:ca:7c:d2:e5:7b:bc:44:de:3f:b1:9a:59:
18:aa:2e:86:4b:80:f9:ab:f8:d8:f9:e9:28:b3:81:74:cf:03:
7c:c9:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:52:09 2025 by rpki-client