Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/z4GL3R9iwn241BwmecTavitjvmk.roa
File: z4GL3R9iwn241BwmecTavitjvmk.roa (raw, json)
Hash identifier: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=
Subject key identifier: CF:81:8B:DD:1F:62:C2:7D:B8:D4:1C:26:79:C4:DA:BE:2B:63:BE:69
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019422FB7DE1D24A2886C340E1E030913D2F
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/z4GL3R9iwn241BwmecTavitjvmk.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62334
IP address blocks: 185.155.73.0/24 maxlen: 24
185.185.16.0/22 maxlen: 22
185.185.16.0/23 maxlen: 23
185.185.16.0/24 maxlen: 24
185.185.17.0/24 maxlen: 24
185.185.18.0/23 maxlen: 23
185.185.18.0/24 maxlen: 24
185.185.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7d:e1:d2:4a:28:86:c3:40:e1:e0:30:91:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf818bdd1f62c27db8d41c2679c4dabe2b63be69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:76:89:0b:8f:a4:70:4d:a9:b1:54:9c:95:
a1:17:d2:66:84:5a:73:f0:a1:99:ab:fd:f2:88:8d:
60:f6:ce:35:b2:d7:15:18:c5:a9:f5:f3:4f:9b:15:
7b:92:44:ba:e8:ed:a6:94:7d:29:e3:1d:96:11:20:
a3:2a:17:07:f4:1d:a6:76:1e:62:05:c4:8a:10:b5:
4d:b8:2e:d6:6a:05:60:e8:01:3d:30:d1:08:e4:8e:
9d:98:88:ae:7e:9a:0e:0f:02:bd:74:a0:4c:62:08:
f3:65:91:b8:aa:8a:28:19:77:cd:d0:f1:77:35:4e:
46:da:0f:98:a8:42:6c:70:4d:ce:07:75:e9:a8:04:
64:52:da:d1:40:8b:11:ab:c7:ff:ab:44:2e:35:68:
26:eb:c3:dc:ab:d1:a5:82:a2:7b:0e:92:10:9d:2e:
7b:2f:fd:23:0a:40:0f:51:6a:de:aa:42:58:10:0a:
e9:64:7f:a8:57:f0:d2:d5:a8:3d:ff:c3:88:db:fe:
1f:4b:15:c0:85:64:50:c3:50:ee:da:a9:51:5f:40:
99:4b:a0:15:da:2a:e9:e6:72:ff:ad:75:cb:05:2e:
e9:86:63:5a:fe:71:1c:f9:65:1a:cd:6f:6a:02:a6:
7c:24:a6:88:82:71:e4:07:35:cb:a2:54:f1:d5:01:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:81:8B:DD:1F:62:C2:7D:B8:D4:1C:26:79:C4:DA:BE:2B:63:BE:69
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/z4GL3R9iwn241BwmecTavitjvmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.73.0/24
185.185.16.0/22
Signature Algorithm: sha256WithRSAEncryption
42:54:31:9d:25:5d:a5:42:69:ff:e2:ba:6e:b1:e4:92:59:c8:
b0:b1:47:12:b2:f7:65:da:78:e5:b7:ec:70:ff:41:bc:25:5a:
f7:94:05:e4:1c:af:79:02:13:f2:44:46:2e:92:82:37:89:29:
54:1b:92:a6:7e:dd:e0:41:ac:4a:a9:b8:55:e4:77:03:e7:7c:
c8:4d:3d:dc:e0:fe:6c:49:35:f0:df:9f:60:33:cb:be:67:11:
3c:6f:00:5a:77:ad:c0:f6:15:bb:2d:19:a4:30:5e:1c:39:95:
1b:8d:d9:5e:cd:08:63:c1:c9:86:76:65:3b:3c:85:50:f9:dc:
03:43:80:69:ef:72:7e:b3:2b:15:e4:0e:d0:2a:be:da:d1:44:
4d:e1:94:98:96:66:8c:1e:a8:9a:39:50:89:72:c2:42:9b:29:
03:49:d1:70:f9:43:94:28:27:a2:13:4b:5c:56:52:99:4e:01:
5a:04:1c:4e:c2:f1:0c:28:1f:2b:e6:92:3f:99:5b:9f:fc:ec:
be:be:cd:fa:32:c7:28:1b:ab:81:b0:a4:06:15:fd:bd:54:15:
7d:4b:e7:fb:2e:c5:63:28:e6:8a:f9:66:0c:b9:3a:35:93:c9:
1f:5b:34:97:94:d0:15:2b:15:36:8e:53:89:9e:24:dd:cb:a5:
f9:78:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:21 2025 by rpki-client