Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ZrTjnkyveLPrK0jTMWKKrihN2ow.roa
File: ZrTjnkyveLPrK0jTMWKKrihN2ow.roa (raw, json)
Hash identifier: 9Jyi49qBWk08J78Yv473h4V46VqPQ/HKB9I5PkE3ZOc=
Subject key identifier: 66:B4:E3:9E:4C:AF:78:B3:EB:2B:48:D3:31:62:8A:AE:28:4D:DA:8C
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 0195DC55420DAFBC9423845853ED04BB327A
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ZrTjnkyveLPrK0jTMWKKrihN2ow.roa
Signing time: Fri 28 Mar 2025 10:38:49 +0000
ROA not before: Fri 28 Mar 2025 10:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20960
IP address blocks: 78.131.128.0/17 maxlen: 17
82.160.0.0/16 maxlen: 16
88.199.0.0/16 maxlen: 16
94.40.0.0/16 maxlen: 17
94.40.0.0/18 maxlen: 18
94.40.64.0/18 maxlen: 18
94.40.192.0/19 maxlen: 19
213.199.192.0/18 maxlen: 18
2a02:f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:55:42:0d:af:bc:94:23:84:58:53:ed:04:bb:32:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Mar 28 10:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b4e39e4caf78b3eb2b48d331628aae284dda8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:aa:2a:da:29:39:22:e9:91:eb:e6:89:90:
a9:8f:6e:e6:3e:bd:ac:ae:5b:f9:38:90:1c:56:5f:
92:27:0c:2c:de:f6:1f:9f:30:ba:b8:b0:5f:d6:0f:
5f:23:0f:d6:76:86:32:d0:2e:ca:0f:d9:f9:64:69:
d9:5b:4f:9b:17:17:1a:6f:1f:49:73:3f:c6:15:5b:
b2:42:4c:31:6f:c6:a6:ee:e5:bc:75:1e:ca:64:66:
fd:1b:bf:4a:db:6c:28:ce:31:13:93:57:7a:49:51:
90:46:bf:47:6f:2f:b5:57:5d:fe:57:f0:59:26:7c:
c0:62:61:0f:4d:16:59:52:4a:f6:d6:fc:7f:03:20:
fd:3e:49:b4:b6:d9:b2:4e:49:1c:84:96:06:06:94:
72:25:6b:27:25:63:31:c9:77:24:19:55:da:1f:0c:
7c:e3:3e:ef:84:a9:7e:af:88:e6:4f:eb:4a:c6:96:
69:4b:c3:ef:be:3b:4b:1a:fa:48:62:a4:e0:07:d1:
da:f0:64:a3:fa:d2:01:b7:6b:21:2b:28:db:35:5a:
34:f0:3f:9f:d7:94:98:4a:ab:3b:e9:4f:cb:24:23:
22:93:d8:9c:70:6f:24:d7:e0:81:22:da:4a:3b:a0:
53:fe:78:a1:51:47:09:bd:d4:24:21:df:e5:e3:bf:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:E3:9E:4C:AF:78:B3:EB:2B:48:D3:31:62:8A:AE:28:4D:DA:8C
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/ZrTjnkyveLPrK0jTMWKKrihN2ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.128.0/17
82.160.0.0/16
88.199.0.0/16
94.40.0.0/16
213.199.192.0/18
IPv6:
2a02:f40::/32
Signature Algorithm: sha256WithRSAEncryption
32:7a:c0:55:03:d2:b1:29:81:fb:74:1e:c6:3f:2e:70:30:30:
de:f6:65:ac:ba:a2:9e:7a:79:01:4d:b0:8c:7a:90:c5:90:7f:
29:55:24:3a:ec:52:ad:25:ae:64:bb:ed:45:2d:02:b7:ed:32:
14:d6:63:e0:19:2b:e4:6d:1e:76:79:dc:a9:63:37:5c:c1:c1:
01:9a:8e:fd:c6:b0:19:86:49:dc:7e:7a:c0:16:83:b2:a3:27:
e0:61:0e:6b:6e:06:77:f8:1a:59:de:71:6f:09:83:e2:8e:8d:
62:d0:12:71:89:10:6b:23:a9:9a:a5:03:78:6f:9f:aa:b1:c2:
d8:5a:e5:2a:8d:d4:a3:80:26:dc:c5:b5:d7:a2:3c:40:8a:95:
cc:19:83:09:b9:86:1c:e0:81:6c:62:84:04:3b:23:4a:b9:4c:
58:ce:5a:14:10:78:69:4d:60:00:b0:6b:2f:ea:51:78:97:b9:
9e:47:79:6e:0e:91:b7:90:cc:40:48:8e:d1:f1:c4:76:9a:0b:
c6:96:fb:b9:b3:4d:d2:37:73:38:df:70:e8:fc:5a:04:17:60:
9f:08:56:ec:b5:c1:46:3e:29:94:27:e5:59:69:dd:71:99:17:
23:39:d0:3e:86:36:8d:ac:63:4a:9d:36:f8:3d:3a:e3:96:18:
12:0c:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:21 2025 by rpki-client