Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa
File: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (raw, json)
Hash identifier: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=
Subject key identifier: CF:1D:1B:7B:FA:64:88:35:69:DC:1A:7A:63:6A:7B:DC:27:63:9D:14
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019423D7C5BD4C57E97C8792AF93B50C138D
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197328
IP address blocks: 185.125.32.0/24 maxlen: 24
185.125.33.0/24 maxlen: 24
185.125.34.0/24 maxlen: 24
185.125.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c5:bd:4c:57:e9:7c:87:92:af:93:b5:0c:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf1d1b7bfa64883569dc1a7a636a7bdc27639d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:e8:09:ec:65:09:a0:4d:03:75:1b:93:50:
db:ba:2f:b9:3a:a5:67:53:bc:b8:de:00:0b:a8:c5:
13:6d:61:72:37:f4:fa:76:0d:1b:97:a7:2f:63:e6:
f8:96:18:56:08:ea:99:b7:36:57:43:53:ac:87:60:
9d:c4:84:59:52:68:d1:f8:d5:0f:38:3e:8b:d4:01:
0d:9b:6c:e7:36:ed:cd:1d:7d:19:1b:87:2f:9d:7a:
0e:21:60:c0:ba:95:4e:85:0b:da:e3:de:80:b1:55:
ca:ec:f0:4d:ed:97:d4:88:e3:b1:cd:76:bd:3e:4e:
84:69:18:dc:6b:1c:7b:5c:9a:e0:9e:ae:3b:85:65:
14:6d:0a:f7:c3:11:0a:8a:e2:38:35:df:e9:54:a3:
dc:46:28:42:cb:93:5e:c6:48:9e:65:e8:82:9c:fb:
9e:73:ae:76:b5:22:74:c0:ab:32:46:26:e7:67:7d:
bc:cc:f2:09:e7:ce:b0:8a:45:eb:61:67:84:5c:85:
cf:71:a6:29:99:56:a4:8f:ca:89:05:9d:a4:8d:2b:
d4:7f:1d:37:6d:e0:88:0b:11:45:50:cc:6b:b1:27:
6e:03:44:43:40:ef:19:e4:c0:11:29:1d:10:4a:03:
5d:c8:33:d2:3e:c6:e6:10:45:ad:c6:53:33:70:e7:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:1B:7B:FA:64:88:35:69:DC:1A:7A:63:6A:7B:DC:27:63:9D:14
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.32.0/22
Signature Algorithm: sha256WithRSAEncryption
87:9b:8b:57:c7:c4:6e:db:54:0b:cc:81:19:c9:e9:03:a5:c9:
53:6c:2c:b3:e5:b5:39:38:85:73:3c:23:51:8a:ff:0d:43:ba:
e5:a8:df:19:50:ff:c2:2d:f8:47:0c:d3:90:c8:60:b8:67:55:
84:08:de:6b:24:5d:52:9a:a9:ae:db:b1:92:12:ff:c9:f0:6c:
df:03:a7:3b:c7:e9:e1:d6:06:d7:0c:e1:d7:94:93:96:c5:ce:
c4:b4:37:de:d0:68:a6:fa:57:3b:9c:5c:fb:c0:4d:46:b7:9a:
94:90:b5:a8:be:9d:33:be:28:61:54:9e:0f:e4:c2:d5:6c:b2:
05:ee:aa:3e:50:0a:9e:51:03:d1:f8:00:4c:9b:fc:36:ec:10:
e9:a0:fc:73:25:c4:96:69:50:f1:fc:71:e6:55:9c:cc:c9:f4:
89:bd:54:38:39:78:e1:a0:b6:4b:81:92:d6:33:67:8f:85:0e:
ea:8a:56:04:61:71:6e:de:d0:81:f9:9d:66:02:55:63:82:d0:
ad:ef:c1:d0:60:26:e4:10:9e:4e:92:3b:13:00:a9:2c:8b:7e:
a5:62:f5:3f:8b:0b:81:fd:3c:46:8d:32:18:bc:0f:e8:34:16:
7e:44:58:7d:5d:77:74:11:42:c2:d2:90:ec:d6:fb:3f:46:c3:
3d:a8:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:55 2025 by rpki-client