Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ZmCMretj_IKNhbhPW7MGGPPg6QY.roa
File: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (raw, json)
Hash identifier: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=
Subject key identifier: 66:60:8C:AD:EB:63:FC:82:8D:85:B8:4F:5B:B3:06:18:F3:E0:E9:06
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01976C9DEA3B20200774FC46DE4988BA17A4
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ZmCMretj_IKNhbhPW7MGGPPg6QY.roa
Signing time: Sat 14 Jun 2025 04:06:17 +0000
ROA not before: Sat 14 Jun 2025 04:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214268
IP address blocks: 31.41.12.0/23 maxlen: 23
176.124.16.0/23 maxlen: 24
178.217.160.0/22 maxlen: 24
178.217.164.0/22 maxlen: 24
178.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:9d:ea:3b:20:20:07:74:fc:46:de:49:88:ba:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jun 14 04:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66608cadeb63fc828d85b84f5bb30618f3e0e906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:27:ff:7e:43:c2:16:37:56:4d:38:40:e8:
7c:ca:2a:c5:37:59:09:a6:c0:52:cd:1f:96:92:57:
e4:bd:7f:f3:74:3e:b6:5b:92:7a:bc:45:6c:9e:f6:
b5:91:c0:f4:cd:21:2d:dc:a5:c8:16:e7:ac:73:b5:
22:80:d7:6e:05:7e:9e:18:0b:23:de:92:b9:97:d5:
67:9c:54:48:09:ff:79:86:c9:01:92:3a:62:f9:4b:
c8:ba:a3:f8:54:88:cb:ba:16:2e:f3:97:fa:c2:36:
d7:a1:ec:ec:0e:0c:00:dd:e1:eb:a0:34:ab:6c:47:
5f:56:d0:30:85:2f:3c:f1:b1:17:30:d5:dc:a7:7d:
db:36:d0:ad:a5:25:f8:de:23:64:52:20:56:2a:22:
23:3c:60:fc:21:ee:93:75:3f:b3:21:9a:23:80:f4:
6f:ca:38:6a:79:47:93:f2:0f:8c:1e:ac:9a:61:07:
e0:e0:6e:7e:f9:c5:76:ba:62:18:00:d4:22:a3:c8:
10:70:1f:26:af:be:7a:b8:d3:c4:d4:41:6d:02:a7:
94:a5:f8:2f:7d:67:ec:b9:78:49:48:ff:da:4e:e0:
66:6a:d3:1e:1a:3f:99:92:a9:82:16:9f:ba:df:6a:
02:9c:6d:ae:81:97:59:86:2c:3a:0d:d9:e8:33:f2:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:8C:AD:EB:63:FC:82:8D:85:B8:4F:5B:B3:06:18:F3:E0:E9:06
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ZmCMretj_IKNhbhPW7MGGPPg6QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.12.0/23
176.124.16.0/23
178.217.160.0/21
Signature Algorithm: sha256WithRSAEncryption
71:85:b2:f6:72:06:fc:98:8f:58:33:7a:4b:eb:ff:a3:0e:a9:
04:bd:55:4f:33:e1:80:00:6d:42:51:eb:0c:c0:c2:51:fc:ec:
23:0f:7d:0f:1c:05:31:d6:a8:18:2e:b5:c1:3f:60:e3:3d:3c:
20:2a:f4:6c:79:74:7e:a4:73:62:6b:81:92:8c:16:29:49:3d:
e6:bc:ad:5c:9d:3e:75:59:f7:fd:a5:60:27:87:62:aa:44:2e:
32:f8:1d:a7:f1:ea:b0:ad:46:94:03:26:74:8c:dd:78:02:fc:
f8:ea:6b:26:c0:02:a7:3e:89:1f:58:58:e1:ad:fb:25:13:f0:
1d:cc:98:d7:b9:61:17:29:c3:a3:31:6c:5b:07:a2:e7:8f:8f:
64:41:0b:2d:db:4b:05:e4:e8:03:b9:88:fd:9f:da:0f:db:aa:
1c:2b:d9:13:79:93:32:57:45:fc:87:bd:4e:17:1b:d8:6f:a2:
e5:77:5f:aa:7b:ac:3e:a3:3e:4a:cd:63:2e:ff:a4:c7:7a:de:
4b:0c:13:fc:fc:24:56:84:b4:8b:ee:c4:3d:e4:58:36:f5:25:
b4:b6:4c:13:13:3c:6b:ec:cb:18:8a:2f:0b:8a:1d:31:9d:da:
5a:09:6c:ca:33:70:de:f4:fd:48:12:fe:ba:18:6f:c1:a2:c5:
b5:9c:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:05 2025 by rpki-client