Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/zad7TKoNmHhoc0CyHOzgSXKr6f4.roa
File: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (raw, json)
Hash identifier: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=
Subject key identifier: CD:A7:7B:4C:AA:0D:98:78:68:73:40:B2:1C:EC:E0:49:72:AB:E9:FE
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0194252146C99ED72F90AE0EC0CC2CA1BACE
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/zad7TKoNmHhoc0CyHOzgSXKr6f4.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212369
IP address blocks: 89.35.52.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:46:c9:9e:d7:2f:90:ae:0e:c0:cc:2c:a1:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda77b4caa0d9878687340b21cece04972abe9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:13:20:aa:5d:a5:42:aa:d3:1d:3f:75:bc:
1c:3e:9d:36:c5:2f:12:82:3f:07:15:09:d1:95:a6:
03:41:40:07:6e:63:ce:37:ef:75:a4:48:0b:bc:41:
86:da:db:a1:34:15:04:f4:43:49:22:d7:ad:25:e3:
ae:45:3b:59:ba:f8:2a:fc:a0:2a:d6:e0:f0:ce:6e:
d8:da:ab:0b:fa:9d:94:da:c6:20:fd:0a:1c:36:ad:
7f:7c:49:6a:37:98:d3:5b:f4:47:88:48:81:aa:60:
42:38:32:30:d9:4d:b7:b2:1a:5a:6d:fd:e0:b4:cd:
2a:14:ad:c9:e3:5a:8b:9c:25:3a:b2:a7:df:7a:32:
df:88:e0:c6:0b:e2:72:8b:cd:dd:69:d1:88:7d:41:
7d:ae:97:8b:28:5a:db:af:d2:fe:94:15:49:a6:32:
f5:e0:22:0a:89:c4:ab:35:3b:53:38:9b:39:fd:04:
d2:ee:21:97:5d:97:dc:0e:a6:80:de:59:56:5f:bb:
90:24:f4:7e:8b:0d:d9:eb:78:4e:cb:26:18:d6:33:
30:9a:5f:43:d2:24:6b:92:00:2d:65:8f:2b:9c:df:
24:63:8c:4c:e2:68:46:ed:81:96:70:16:91:ff:57:
e0:7d:0f:cb:08:8c:12:69:5e:2e:d6:fd:40:29:e2:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:7B:4C:AA:0D:98:78:68:73:40:B2:1C:EC:E0:49:72:AB:E9:FE
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/zad7TKoNmHhoc0CyHOzgSXKr6f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0-93.177.102.255
185.93.68.0-185.93.70.255
185.132.126.0/24
185.255.93.0-185.255.95.255
Signature Algorithm: sha256WithRSAEncryption
04:f1:3d:dc:15:0d:51:b2:81:cb:8a:a9:4d:12:3a:5f:94:16:
d4:48:9c:a8:10:92:e3:56:05:7b:a1:2f:a5:23:12:89:29:80:
44:42:1b:15:f3:b2:0c:ed:fa:ef:be:c8:f7:06:5e:4b:74:e1:
dd:93:87:ef:7f:96:4a:cb:a5:08:61:0b:68:f0:74:77:84:d7:
4a:ca:55:ac:45:98:51:cd:6a:8f:56:c5:e6:e3:c1:21:4b:d3:
ac:bb:3e:fd:3b:cf:b6:34:72:91:a9:e1:9b:c0:ef:c9:fd:9a:
83:0f:64:b0:ee:64:cd:23:4d:7a:9e:32:95:e8:f0:8a:58:8e:
86:b2:5d:e1:82:fb:53:63:52:a3:8e:a5:a7:3d:62:19:12:ea:
24:0c:25:90:ad:84:9f:98:f4:ae:e5:e9:a6:25:1d:9c:5c:a9:
ad:08:11:5f:c0:9a:81:ac:b5:ab:28:de:8c:ad:0a:a6:35:78:
ab:ce:a6:73:0a:f7:da:b3:a3:7d:bc:18:dd:3d:84:37:35:d8:
84:7f:08:65:0f:5e:05:77:dc:6f:d7:c7:0a:30:89:fa:33:9f:
b3:7d:dc:7d:c8:ea:06:3e:db:3f:95:c4:4c:01:83:15:cf:16:
e0:01:e9:4a:bf:7c:70:0f:9b:24:2b:56:6b:d8:7a:dc:59:1b:
18:e4:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:52 2025 by rpki-client