Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa
File: zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa (raw, json)
Hash identifier: 6Q/6wdfAylMsEZywBPJb5E0+PJFDXtpbTad0L2I6rWg=
Subject key identifier: CE:65:8B:46:F6:7B:5C:C9:98:85:03:A9:A7:30:6F:17:14:63:47:DA
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827ABE64C7F2642AD4D9D051E57D0F8
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa
Signing time: Thu 02 Jan 2025 17:54:36 +0000
ROA not before: Thu 02 Jan 2025 17:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 213.182.207.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
213.182.211.0/24 maxlen: 24
213.182.216.0/24 maxlen: 24
213.182.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ab:e6:4c:7f:26:42:ad:4d:9d:05:1e:57:d0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce658b46f67b5cc9988503a9a7306f17146347da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:97:82:7b:db:25:2a:af:d9:ae:39:71:ff:
de:4f:d2:aa:4e:fd:bc:93:ad:bb:c6:3b:a5:96:d5:
d4:2a:da:29:4f:cd:21:f8:3f:1d:63:a9:0e:a3:79:
0e:8a:29:de:2e:d6:e0:ad:de:a5:36:51:a5:9f:7b:
2c:cb:32:18:f5:de:18:f1:14:43:b8:17:e4:ca:ab:
f2:95:bd:fd:d6:5d:49:f4:f6:b6:02:fc:a9:2c:f4:
fd:b7:2f:36:30:fb:dd:4e:dd:1f:59:16:57:5d:a5:
fb:90:c7:9d:06:00:d0:ad:c6:f9:6e:30:e1:a5:6b:
7c:00:cb:72:f2:c5:db:fa:06:57:66:78:25:f1:97:
65:fd:ed:0f:af:7e:fd:8d:4e:ab:75:76:33:13:9e:
f8:b1:bc:72:ac:f3:b8:a5:4a:3f:29:8e:6e:64:77:
8a:b1:8d:18:37:6f:6d:97:98:e5:9d:56:9f:aa:41:
fc:e3:f2:c4:80:25:1f:1a:1e:5c:62:02:b4:3e:6b:
93:0e:21:75:82:5b:c8:68:99:f7:78:af:76:f9:3f:
36:54:67:9f:0a:76:8b:fc:6b:71:31:d5:7c:9a:22:
17:35:b7:b0:1c:51:70:f2:3b:31:80:e5:11:1e:cb:
a3:88:c9:a0:f9:57:43:45:45:e4:18:27:90:0e:0a:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:65:8B:46:F6:7B:5C:C9:98:85:03:A9:A7:30:6F:17:14:63:47:DA
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.207.0-213.182.209.255
213.182.211.0/24
213.182.216.0/23
Signature Algorithm: sha256WithRSAEncryption
68:f1:45:18:23:d4:8f:0a:3f:91:00:05:c1:b9:cd:a8:a0:ac:
a8:10:3c:c8:16:25:a9:f8:2a:6b:db:b1:20:73:b8:4c:b3:81:
b0:81:bf:fc:63:24:72:cb:bb:58:99:51:5b:80:78:0a:3d:61:
78:a4:52:99:10:ea:7b:ea:55:4f:b0:e3:d8:72:46:77:32:03:
79:0f:a9:d5:83:aa:55:e3:b6:a1:a9:1b:e0:5f:15:91:14:00:
d9:99:44:62:32:2e:33:3c:4e:f8:db:0d:43:86:da:ae:e4:73:
2a:cf:2a:13:ab:a4:f3:1e:51:1a:84:3c:91:53:64:50:4c:78:
4a:89:78:dd:54:e4:11:78:fc:55:2a:91:3a:18:a3:6e:76:2e:
55:3e:cf:8b:7f:f0:4f:a8:cb:ca:6d:46:4f:39:89:a3:9d:c2:
0f:2a:75:22:53:9b:ab:cd:6a:94:72:68:26:09:a8:ef:f6:4b:
ca:1b:fd:90:22:e2:6c:73:4c:af:46:dc:86:40:2f:24:63:3c:
f5:ce:94:4d:0c:a2:61:60:36:fa:97:68:e6:53:8c:f5:41:7b:
7c:8d:c2:8c:ff:d6:7d:ce:ab:7d:66:ed:3e:88:a1:10:9d:0b:
e9:ef:5b:db:2f:a0:ab:75:fc:73:b7:d5:6d:87:fa:8b:ed:ed:
1f:38:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:32 2025 by rpki-client