Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zsoe5k6vLmQVi3RCpApj9MCP3yk.roa
File: zsoe5k6vLmQVi3RCpApj9MCP3yk.roa (raw, json)
Hash identifier: CsYhdXNX5gmoj2IwGK+qzDKZz+bOvTEBy3C8TrYUKps=
Subject key identifier: CE:CA:1E:E6:4E:AF:2E:64:15:8B:74:42:A4:0A:63:F4:C0:8F:DF:29
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01970DC1D09E745D54530972879B8DF45A00
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zsoe5k6vLmQVi3RCpApj9MCP3yk.roa
Signing time: Mon 26 May 2025 18:01:35 +0000
ROA not before: Mon 26 May 2025 18:01:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 82.152.142.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:c1:d0:9e:74:5d:54:53:09:72:87:9b:8d:f4:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 18:01:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceca1ee64eaf2e64158b7442a40a63f4c08fdf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:24:42:91:0a:9b:61:8c:a9:d4:e8:5f:96:
1e:c4:20:d6:51:2e:5f:86:fc:f7:2e:c7:9c:15:8a:
d1:e6:e7:33:1b:c1:a1:a5:d6:99:85:45:bb:7b:55:
02:e4:db:6e:75:13:6f:d4:eb:3b:a4:5a:71:7a:ba:
03:68:da:3f:eb:a9:fd:7e:b2:7c:29:a0:b3:2c:e7:
55:57:f5:d4:3c:4b:93:fb:7d:4a:bf:05:f3:d0:3d:
5b:f4:1f:f9:a6:51:01:7b:78:ef:a9:fb:f8:19:d9:
a6:50:1a:5b:d7:1c:a4:10:13:52:92:83:8f:57:39:
6b:77:22:04:bb:7e:53:f9:57:c3:92:1f:9b:fe:97:
22:7b:6a:1a:8d:28:ed:f2:c9:43:5f:1b:83:a1:3c:
ee:a8:96:95:4b:e5:ad:f5:b6:49:27:a0:ff:4f:a3:
d3:74:2d:7f:b4:ab:4b:08:dc:8c:7f:f1:a0:58:3a:
6c:0a:df:8f:78:29:fa:53:b0:bf:4b:4c:b9:ab:de:
75:c3:58:72:6b:f8:65:6e:0e:34:9a:a0:aa:83:f2:
c8:7e:ae:ef:0b:49:60:ef:04:ef:2c:4b:ba:dc:e6:
f5:3c:ed:70:3a:2b:ed:24:2d:28:38:c0:f2:47:cf:
2f:f7:6e:dc:f9:ad:6f:71:6d:42:66:e8:07:1f:67:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:1E:E6:4E:AF:2E:64:15:8B:74:42:A4:0A:63:F4:C0:8F:DF:29
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zsoe5k6vLmQVi3RCpApj9MCP3yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
89.213.6.0/24
89.213.104.0/24
89.213.123.0/24
213.210.52.0/23
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0a:bc:ac:bf:5a:39:5b:e9:24:6a:3d:e2:b6:17:73:8a:e7:
07:d4:4c:ad:8d:b1:8d:98:5d:40:27:a9:91:19:c4:f3:84:6f:
94:f7:a1:bd:6a:18:72:fe:9a:16:12:be:8b:e7:41:28:a8:08:
a7:61:73:a3:c4:2f:39:85:f5:e5:20:fd:20:8d:fc:a5:a6:72:
07:84:c6:2b:a8:5b:50:65:72:c9:34:be:6b:e8:ca:d0:70:19:
6a:5d:19:7f:0b:5d:7e:cf:e1:47:07:4d:c6:d5:83:a0:af:ad:
22:bc:13:0f:ac:46:aa:6e:86:d9:57:33:e7:58:53:46:e7:92:
2e:38:a2:4d:57:5b:c6:13:a3:b0:36:30:f3:6d:b9:81:1b:f2:
17:00:33:47:ac:c8:f5:44:99:a6:26:60:21:81:3d:79:d6:0c:
8b:37:c5:5f:0a:3f:51:7b:13:fb:37:29:80:86:da:63:44:b2:
82:0f:e7:d6:2d:b1:87:a8:e2:64:86:d4:ba:f0:97:c9:8d:69:
cf:df:1b:59:6d:0e:9d:90:9b:b1:c2:40:cb:5e:09:6d:d1:a7:
92:31:45:14:e7:10:ca:e3:82:8c:01:04:ad:83:9e:2c:ad:b8:
9d:a2:b2:dd:0d:be:db:d0:31:0b:06:dc:db:ad:2d:a2:3d:b9:
06:61:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:56:45 2025 by rpki-client