Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa
File: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (raw, json)
Hash identifier: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=
Subject key identifier: 64:2C:FF:07:F7:38:01:BE:D3:27:E5:9D:8F:A0:8D:6D:EE:2F:24:CF
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 01942444DF970CC3C201EC308C5F358A01D1
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44656
IP address blocks: 89.58.64.0/19 maxlen: 19
89.58.96.0/21 maxlen: 21
185.232.40.0/24 maxlen: 24
2a11:fb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:df:97:0c:c3:c2:01:ec:30:8c:5f:35:8a:01:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=642cff07f73801bed327e59d8fa08d6dee2f24cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:06:78:92:a0:6d:36:42:86:27:9f:98:c9:
11:d9:2c:f4:25:7f:33:c2:dd:f5:b3:41:e8:fa:15:
96:ed:bb:57:bb:f7:30:17:df:aa:ad:53:48:5f:51:
25:00:5b:80:75:c4:0b:d8:2a:e1:1a:7d:ef:ca:ff:
9d:b4:49:87:a5:a8:a8:6e:bb:a2:c6:bc:fa:e8:f5:
26:bd:95:31:ec:de:2f:67:2c:76:3e:7e:c1:e0:b5:
ba:e6:ec:12:ed:de:f7:eb:ce:cf:84:ff:25:c8:80:
5c:7f:88:39:bd:95:93:e6:51:4b:8d:99:76:a3:83:
11:93:d3:4f:29:f1:81:3a:e6:db:e5:16:ed:6c:ea:
75:92:5f:be:c5:18:d1:85:f2:64:19:fd:3a:e0:bc:
9f:49:01:8c:98:ba:8d:1c:8c:7f:e7:7e:02:a9:ae:
f0:5b:a4:cc:de:70:23:b9:cf:b6:d6:b1:57:3f:2c:
eb:85:1b:09:4d:b5:19:52:4a:d7:f0:49:7b:a2:a9:
d3:18:06:63:61:63:05:31:58:6b:96:52:83:44:49:
20:2f:6c:a2:b8:47:18:af:73:90:30:0f:91:ab:89:
26:f9:55:e2:c2:29:70:3e:33:cb:0f:2f:ac:e5:8c:
01:74:72:b0:ca:8b:ff:5d:6f:07:66:d5:8d:7e:0f:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:FF:07:F7:38:01:BE:D3:27:E5:9D:8F:A0:8D:6D:EE:2F:24:CF
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.64.0-89.58.103.255
185.232.40.0/24
IPv6:
2a11:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
b0:dd:db:3d:cd:4f:fe:00:1e:47:c1:c3:fd:ef:b8:5c:98:f3:
33:af:ae:f5:f5:36:ee:c0:cd:b4:d6:6f:37:3f:e2:9a:7a:a8:
3b:4c:9f:37:ea:a7:e8:39:64:45:e9:3c:47:fa:2f:22:f2:04:
9d:4f:7e:5a:09:7e:9a:41:eb:02:0d:1b:ee:18:07:8b:96:4f:
76:d4:8d:73:41:03:1a:77:49:ea:ef:28:6a:bc:8a:27:71:88:
09:bd:7a:ed:c3:5e:67:d7:7c:25:37:12:e8:26:4d:ae:ce:11:
7a:b9:3a:e2:32:57:c0:b6:4d:0f:8c:d6:8d:63:29:d4:7c:bd:
55:fa:cf:9b:cc:0c:43:d8:90:95:ef:cb:bd:2c:a3:a1:e3:bd:
ab:14:32:22:63:63:af:6b:d1:93:af:9e:29:f5:d9:4e:90:4b:
20:56:cf:2c:6b:7b:1f:a1:3c:78:1c:a4:50:ed:76:ac:e4:0c:
33:62:e8:77:5f:f8:55:62:39:5a:9e:89:37:d0:16:55:47:fe:
3f:f7:cb:bc:e5:b4:0e:41:0d:8b:2f:e5:83:12:a2:88:2e:22:
1c:1e:3a:60:1b:0e:85:4a:64:03:df:d4:69:a9:e2:42:22:cb:
bd:2a:fd:19:b3:40:fa:7a:62:87:94:d7:88:1a:9b:cd:27:3c:
96:47:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:36:41 2025 by rpki-client