Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/zegOmVW3er1W7JPzrg42o5wEwdQ.roa
File: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (raw, json)
Hash identifier: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=
Subject key identifier: CD:E8:0E:99:55:B7:7A:BD:56:EC:93:F3:AE:0E:36:A3:9C:04:C1:D4
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019427B5AED4F195E3D5B2715583DB9CF01C
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/zegOmVW3er1W7JPzrg42o5wEwdQ.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51335
IP address blocks: 85.118.36.0/24 maxlen: 24
85.118.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ae:d4:f1:95:e3:d5:b2:71:55:83:db:9c:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde80e9955b77abd56ec93f3ae0e36a39c04c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:7c:42:f2:61:e6:47:ba:fd:84:76:a6:84:
67:07:4e:33:77:5c:20:08:52:f2:34:6a:89:ec:5b:
9a:2a:fe:a7:6a:99:77:97:c3:96:e8:6e:f2:73:50:
47:41:4c:43:15:17:45:ea:ec:2c:1c:23:35:b7:a9:
47:a0:5a:74:f1:ae:cd:5b:8b:3d:fc:20:10:9b:75:
51:f4:3b:16:1c:2e:69:4b:64:aa:17:34:d5:ea:1c:
d7:53:f6:e6:b2:a8:06:5f:1b:b1:c8:f3:0d:e1:d2:
77:6c:04:5e:ed:f8:35:c6:fb:25:f4:05:ec:6a:f0:
61:dd:ef:60:99:a3:64:7f:e0:4e:34:5d:42:19:2f:
ab:fa:e2:e0:2e:d9:b4:34:5a:08:d4:fc:e0:21:ac:
d0:87:4f:46:5d:05:b8:98:11:fd:b3:5e:8c:41:93:
1d:8a:15:3b:58:8e:10:4a:c7:ed:20:62:36:8e:13:
bb:40:50:c9:bb:d7:db:11:4c:c6:c0:41:54:f1:94:
5b:d0:0d:92:0e:3e:0e:14:00:3d:ee:1e:bb:74:da:
7b:20:d8:fa:a1:00:61:8b:51:81:7c:da:57:ef:4b:
a9:68:18:b8:fa:e6:39:61:2e:67:fa:06:c3:3e:d1:
68:47:cf:83:3f:13:30:8d:84:ad:25:da:6b:f8:54:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:0E:99:55:B7:7A:BD:56:EC:93:F3:AE:0E:36:A3:9C:04:C1:D4
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/zegOmVW3er1W7JPzrg42o5wEwdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.36.0/24
85.118.39.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e9:02:36:18:d8:5e:80:ee:c5:6a:f4:ca:06:28:9b:88:4a:
4b:0c:ad:81:61:bb:01:8c:57:ad:d1:d7:b4:15:4d:b1:88:c2:
a8:cb:9e:92:a2:35:b9:a2:d8:65:a9:12:37:83:c2:1b:ca:c6:
7f:83:5f:fb:9b:d5:5b:ce:79:3a:74:68:01:29:db:e3:03:26:
bb:43:3b:4b:fc:65:8b:4e:aa:0c:06:33:64:77:d9:60:af:be:
86:88:8c:5f:fb:62:8e:e6:14:f0:c6:45:2a:26:05:ed:b1:4a:
55:98:24:25:88:3b:c4:4f:80:ec:70:d6:cb:c8:aa:9b:ae:02:
54:93:01:e1:79:f0:a3:a9:7a:59:30:3e:26:4d:60:3d:7c:9e:
8f:46:26:e7:4d:1d:71:7d:14:c6:c5:79:6c:d9:2a:78:e4:ce:
2d:89:44:80:36:ab:13:c7:f0:be:24:84:8f:75:7e:35:cb:0f:
10:26:17:91:7b:6b:a9:37:ef:d8:42:36:68:2f:e2:1f:f5:62:
c6:dd:b1:9f:2f:2d:00:79:09:79:eb:ff:80:95:c5:1d:b6:ac:
25:a4:ef:91:29:b4:09:3f:e8:ab:55:26:7d:af:5e:9c:25:1e:
be:40:47:3d:04:ea:9d:fb:95:55:18:98:a5:84:b5:68:85:d7:
46:bb:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:40:22 2025 by rpki-client