Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZkxRUMGE9CQRvySfgcJj3kHytZg.roa
File: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (raw, json)
Hash identifier: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=
Subject key identifier: 66:4C:51:50:C1:84:F4:24:11:BF:24:9F:81:C2:63:DE:41:F2:B5:98
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0194282535216559283B6E11D26EAFFBD1E1
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZkxRUMGE9CQRvySfgcJj3kHytZg.roa
Signing time: Thu 02 Jan 2025 17:51:54 +0000
ROA not before: Thu 02 Jan 2025 17:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 146.66.210.0/24 maxlen: 24
178.157.109.0/24 maxlen: 24
188.74.130.0/24 maxlen: 24
188.74.131.0/24 maxlen: 24
188.119.160.0/24 maxlen: 24
188.119.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:35:21:65:59:28:3b:6e:11:d2:6e:af:fb:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=664c5150c184f42411bf249f81c263de41f2b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:62:6e:48:50:61:e1:41:fa:56:a9:d2:f6:
4f:80:ab:d8:e6:1b:5b:db:48:d5:a8:4f:97:54:f4:
07:5d:c8:07:25:1b:67:f0:29:fd:a8:41:c7:62:ef:
79:4b:41:25:d5:46:d7:4d:ba:10:f8:d1:85:1b:09:
e4:e9:ef:c9:69:52:9f:4e:63:9e:1f:9f:a3:39:63:
23:76:ea:dd:33:d1:86:1b:bf:01:7c:71:f9:99:e9:
37:2b:1c:e3:bb:32:0c:45:70:02:49:7f:94:50:55:
b9:66:42:92:53:ae:5c:ed:72:9c:3d:a4:2c:e1:ed:
f5:4c:1b:05:d1:d4:64:bb:7d:43:c5:38:b6:20:21:
f7:90:01:46:8b:5c:35:63:90:31:65:9b:ea:36:93:
9d:b0:b1:90:e6:85:cb:1f:74:0d:14:44:d4:c0:4f:
93:c8:ba:10:56:a9:f5:bd:1e:81:0d:2b:89:93:d7:
dc:c4:44:fc:0e:40:ad:d0:e0:ea:be:0f:91:97:a9:
04:4d:54:5f:0b:db:de:eb:6c:32:5b:2a:ff:72:9e:
fe:7b:20:6a:22:58:41:07:b1:ad:58:c0:26:f8:90:
64:36:39:c5:48:0e:03:ca:eb:87:26:30:75:ec:2a:
11:6c:13:9d:ab:f8:1d:54:2f:fc:d0:f2:b2:45:05:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:51:50:C1:84:F4:24:11:BF:24:9F:81:C2:63:DE:41:F2:B5:98
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ZkxRUMGE9CQRvySfgcJj3kHytZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.210.0/24
178.157.109.0/24
188.74.130.0/23
188.119.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:5e:bc:ba:bc:68:4d:b1:d4:79:90:92:6e:b7:90:69:d7:36:
90:ac:b2:c9:05:6a:30:1d:df:fc:ed:1f:09:aa:3f:12:c4:a5:
21:71:9b:68:0b:86:88:6a:b5:a4:14:d6:06:52:02:bb:f8:a7:
00:8c:7c:15:5a:4b:6b:25:aa:16:7c:0a:76:eb:99:82:65:fa:
79:af:6a:f7:f1:e7:a8:83:9c:76:c3:55:0b:53:54:79:b1:87:
ba:03:3b:7b:57:5b:ec:55:91:57:55:74:9e:c3:a4:93:4d:78:
33:45:ee:e3:a0:9c:f3:84:37:01:05:98:e7:84:3a:91:29:94:
36:d6:bf:cd:1b:95:7a:16:7e:2c:00:40:4c:88:30:da:db:ce:
56:79:75:26:c0:2c:d8:2b:6d:fb:95:aa:53:ee:7e:61:45:94:
c6:a3:d6:98:de:d9:39:7c:ad:98:5d:a2:fb:5d:a5:f4:0c:ad:
ec:95:b9:3e:4c:87:16:af:f9:5d:a4:3f:c7:63:b5:f6:8a:30:
68:89:16:76:47:8b:a4:fd:ac:90:d7:1d:5a:45:43:ec:e8:5d:
3b:37:d3:3b:9e:5f:c6:59:37:b1:cb:f9:f8:08:4f:1b:ef:9b:
aa:3a:b0:f5:3d:12:b8:a8:84:69:4d:1c:27:dd:34:2a:89:88:
51:1b:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:29:07 2025 by rpki-client