Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/z96_ZJgr9Ouwu3H857DM3qPVUxI.roa
File: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (raw, json)
Hash identifier: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=
Subject key identifier: CF:DE:BF:64:98:2B:F4:EB:B0:BB:71:FC:E7:B0:CC:DE:A3:D5:53:12
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 0195C77BBCF3472CC611C72915DF7D2A2F9A
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/z96_ZJgr9Ouwu3H857DM3qPVUxI.roa
Signing time: Mon 24 Mar 2025 09:28:49 +0000
ROA not before: Mon 24 Mar 2025 09:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 192.166.0.0/21 maxlen: 24
192.166.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:7b:bc:f3:47:2c:c6:11:c7:29:15:df:7d:2a:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Mar 24 09:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfdebf64982bf4ebb0bb71fce7b0ccdea3d55312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:49:38:0d:98:39:e9:3f:fb:21:de:76:7c:
3e:91:9c:b1:f8:a3:34:a4:6b:25:60:bf:42:4c:6e:
dd:24:04:7e:56:f1:b0:b4:49:24:a7:1d:db:e8:be:
6c:00:11:3c:42:29:f8:79:e5:17:1c:0a:9e:99:a4:
6b:d8:96:76:78:96:6f:29:f0:d6:59:95:2a:c3:56:
63:f1:b9:0a:fa:e0:e7:5d:c6:23:7f:5e:2b:63:5b:
df:0e:54:d5:5d:8f:b2:c7:ed:40:c2:ff:05:31:94:
36:55:bf:67:7a:11:87:38:e8:57:bb:f6:5d:0e:b3:
3b:45:cb:68:e3:b9:86:c4:a3:a0:0b:8d:d4:b7:92:
ac:54:8d:9b:b9:01:9d:cc:30:7e:4a:13:aa:b3:fe:
a4:82:ca:78:59:82:56:4d:22:16:b5:42:b3:2e:80:
74:89:c8:71:a0:d9:46:73:ba:da:d7:ff:1c:92:69:
a8:97:86:6c:ca:3e:20:37:06:0d:57:4f:7c:7a:80:
2e:2f:69:19:72:2b:b0:76:a0:8c:a4:2b:68:1e:e9:
e7:6c:04:1f:9d:e7:2d:88:ff:a6:24:0a:82:c8:95:
07:a0:dc:c2:6d:9f:b8:ae:f7:34:23:a7:db:cb:1e:
73:dc:37:33:00:10:c3:80:b8:00:f4:6e:71:10:9b:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DE:BF:64:98:2B:F4:EB:B0:BB:71:FC:E7:B0:CC:DE:A3:D5:53:12
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/z96_ZJgr9Ouwu3H857DM3qPVUxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.0.0/21
192.166.84.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b6:e1:27:64:55:35:28:57:72:bf:f5:15:2c:a5:d3:07:13:
58:d6:a9:72:0b:a6:ff:be:27:8d:fb:a4:5d:b2:ac:8c:b6:64:
41:a1:0d:50:c6:28:af:f7:07:8c:e6:61:9d:90:73:14:75:c9:
b4:41:2b:53:f8:66:ca:b2:30:d6:de:17:18:e7:c4:82:96:f8:
5e:76:94:ac:a7:b1:e5:db:58:2e:17:5f:5a:9f:41:58:37:3a:
36:9a:07:65:f7:b5:a3:04:3d:6e:d8:bf:d4:9b:ea:de:f9:a9:
47:0c:21:7e:4a:75:dd:80:e5:a0:6a:6e:46:d0:3f:6b:6b:12:
a7:97:55:98:73:0a:25:c3:55:7c:87:56:40:a4:d1:82:49:fb:
9a:bd:41:b1:df:9a:de:45:f0:f5:b9:54:8d:ae:3f:08:e8:b8:
0b:74:20:d5:01:25:49:b5:b6:e1:75:ee:79:fb:f1:b5:37:ab:
00:ab:38:15:52:7a:f9:4d:e3:ed:5e:d1:d0:30:29:7f:ff:65:
61:7a:a9:fa:1e:98:52:cd:37:6f:87:4f:7d:09:0f:9c:9a:33:
4c:4a:cd:42:35:50:4e:4e:89:0a:4c:79:0f:2b:f7:ae:e4:2e:
1d:ee:34:7f:17:22:4a:74:84:4c:3d:ac:ba:18:f3:f2:ee:82:
26:e3:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:08:48 2025 by rpki-client