Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/ZIEntIvRdoyNG_9f7umqM8GaOP0.roa
File: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (raw, json)
Hash identifier: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=
Subject key identifier: 64:81:27:B4:8B:D1:76:8C:8D:1B:FF:5F:EE:E9:AA:33:C1:9A:38:FD
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0194228E03FAFD725F072E4618814C3DDC31
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/ZIEntIvRdoyNG_9f7umqM8GaOP0.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60111
IP address blocks: 185.183.40.0/22 maxlen: 22
2a0b:380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:03:fa:fd:72:5f:07:2e:46:18:81:4c:3d:dc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=648127b48bd1768c8d1bff5feee9aa33c19a38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:a6:d5:7e:4e:50:e4:24:76:58:9e:81:a4:
21:24:bc:52:13:02:66:15:0b:49:cc:68:e3:98:d3:
03:fd:b0:19:b0:c7:e2:1c:97:53:ee:e1:d0:e8:d2:
63:fd:00:9a:5e:1b:2a:28:94:91:f8:68:67:c1:ac:
9e:07:5b:da:96:9d:16:a2:05:ee:b7:86:3c:7b:33:
21:b0:3b:9e:20:ac:f6:5d:3a:96:24:d6:24:4e:d9:
4e:f2:ab:cf:ad:70:80:98:b2:8e:d6:70:1c:c5:59:
6d:4a:a7:f8:ee:2c:84:c0:95:ba:c9:25:31:11:5a:
62:35:f9:bb:77:16:83:ac:8b:7f:6e:27:32:d3:a7:
42:a3:42:bd:6f:42:71:3a:fb:4d:54:4f:e2:c9:78:
23:d9:02:55:52:bf:81:6e:7d:27:60:4c:8f:ee:55:
fc:d2:1b:de:05:d4:33:81:6d:68:7a:1d:ae:77:fd:
1c:09:f3:10:e0:62:f6:8e:ba:95:29:de:ab:97:e7:
8c:d7:33:a1:5b:af:30:e8:f1:00:59:01:dd:68:d3:
e8:d4:cd:fe:74:cf:51:6b:63:0e:d5:0b:90:99:05:
67:f6:13:8f:7e:0f:be:c2:ae:3c:c0:56:3a:26:09:
71:ee:b2:89:ab:85:66:45:02:01:c2:87:c6:7a:79:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:27:B4:8B:D1:76:8C:8D:1B:FF:5F:EE:E9:AA:33:C1:9A:38:FD
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/ZIEntIvRdoyNG_9f7umqM8GaOP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.40.0/22
IPv6:
2a0b:380::/29
Signature Algorithm: sha256WithRSAEncryption
84:16:a1:31:4e:55:96:e7:4a:be:bd:55:23:71:2d:f1:51:7a:
57:9f:cd:36:71:8e:37:50:97:63:1c:d5:0e:f4:b1:1a:ca:dc:
77:19:3c:18:77:ac:1b:ab:94:30:a7:f2:be:4c:dc:13:37:d2:
51:ff:65:89:5c:f4:37:b6:be:51:1c:20:0d:fc:c6:e4:84:2f:
95:39:3b:0e:6d:26:b5:de:5c:b6:c9:e8:dc:e5:ee:76:aa:7d:
35:5a:a4:a4:b2:7f:00:6a:fb:53:9b:c9:6b:93:d5:4b:6e:b0:
37:43:dc:8a:92:41:fe:24:50:1f:ce:de:03:51:d3:77:bd:a1:
2a:16:68:f0:23:fe:1e:f6:bc:ac:29:55:e3:5c:60:50:d5:2e:
4d:c9:ec:a7:8f:e2:1a:64:9f:d3:5f:35:18:a7:c8:b3:e5:96:
2b:2f:56:40:c9:96:86:a1:45:ba:de:1f:48:f8:fe:f4:90:2f:
1f:70:a9:2a:50:c5:d0:4b:9a:c6:24:3d:5c:f2:2f:bd:b3:b3:
56:92:3b:80:d9:4f:fd:fa:64:3e:2c:aa:bf:d0:03:ff:68:00:
cb:0b:a5:6f:fc:4d:e5:bf:8e:18:60:1e:8b:e2:68:43:26:aa:
f8:fe:37:fa:3d:e8:42:b7:8d:bf:2c:28:74:92:1c:61:ef:64:
ad:e8:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:25 2025 by rpki-client