Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/z735G_UD7XSfWpNDTnzeaf_tL4w.roa
File: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (raw, json)
Hash identifier: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=
Subject key identifier: CF:BD:F9:1B:F5:03:ED:74:9F:5A:93:43:4E:7C:DE:69:FF:ED:2F:8C
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019421B18CE35D3E888A122C2606BE93E697
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/z735G_UD7XSfWpNDTnzeaf_tL4w.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198595
IP address blocks: 91.236.57.0/24 maxlen: 24
185.202.124.0/24 maxlen: 24
185.202.125.0/24 maxlen: 24
185.202.126.0/24 maxlen: 24
185.202.127.0/24 maxlen: 24
2001:67c:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8c:e3:5d:3e:88:8a:12:2c:26:06:be:93:e6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfbdf91bf503ed749f5a93434e7cde69ffed2f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:2e:69:85:c1:40:84:59:ee:e7:db:23:55:
b4:2f:96:c5:0f:34:83:4a:8d:06:4e:49:8e:3e:16:
4f:e1:ef:56:06:5c:95:4a:64:53:ef:f3:b4:79:2d:
0f:16:44:13:00:b1:31:77:6b:ad:77:e7:51:63:75:
7a:ed:8f:fd:2e:fb:84:e5:5b:1c:3b:4f:6a:f2:7d:
37:c8:30:54:15:41:4c:fc:c7:ab:85:6d:14:8a:d4:
b5:ab:99:9a:62:ef:44:98:a4:71:82:d9:6b:71:6e:
77:28:fa:d3:16:88:1d:be:4c:17:6a:5e:14:b2:83:
3c:c8:9a:ca:67:64:70:a1:2c:89:ea:58:ea:6b:38:
a1:dd:a2:e1:0f:31:77:e8:af:4f:9b:0a:9c:5f:6d:
8e:b9:ea:b9:4b:39:7f:45:8c:1f:1b:1d:83:38:2b:
5a:2c:e4:75:0e:f4:68:56:78:e6:00:5e:f2:db:cc:
46:4b:fc:be:89:50:86:a2:26:c0:69:8b:04:a8:e3:
cd:18:45:bc:b5:c0:80:5c:0a:36:53:78:dd:70:9a:
a9:84:7a:73:18:4b:14:17:c7:7a:ca:01:a9:59:55:
a4:eb:64:e0:f1:88:a2:5f:a1:42:ec:03:e4:fc:61:
2e:b0:c5:0f:4e:a8:64:24:03:f1:69:e0:cd:3d:1a:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:F9:1B:F5:03:ED:74:9F:5A:93:43:4E:7C:DE:69:FF:ED:2F:8C
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/z735G_UD7XSfWpNDTnzeaf_tL4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.57.0/24
185.202.124.0/22
IPv6:
2001:67c:104::/48
Signature Algorithm: sha256WithRSAEncryption
b1:50:f6:fa:a9:86:1c:2f:8a:c8:ab:7e:16:75:ac:68:6b:f8:
13:14:85:63:6b:41:02:0a:fb:0a:8d:15:ee:a8:65:ae:b3:af:
ae:55:0b:81:33:bc:cc:fc:69:8d:9b:a0:a1:00:2f:f8:94:8b:
7c:e8:75:40:62:47:db:dd:b0:a1:16:af:26:73:6a:88:06:98:
38:58:81:8f:77:bb:4c:fe:f2:ee:be:49:f7:1f:75:a3:92:a5:
7e:55:d1:ea:49:4a:18:cb:1f:06:55:ae:3d:af:02:f2:54:88:
d1:bb:eb:b7:ef:c9:5a:b0:18:bf:58:c5:f7:98:0b:f0:d8:61:
83:5e:fa:68:83:a2:b5:c9:3c:d2:41:c0:ef:96:73:fb:f9:18:
54:b9:96:9e:f3:af:93:5e:3e:8d:3c:6f:ba:15:46:dc:4a:8e:
84:e8:d2:c9:3e:a1:c0:78:9b:8d:13:0e:36:55:c3:52:ff:a4:
94:ce:76:ba:03:79:36:2e:db:b2:ba:ab:a0:3a:62:f1:4e:4d:
80:9b:d3:3d:a7:b7:96:02:58:98:4b:3e:3a:f9:86:fb:43:20:
50:7f:2d:30:f1:e7:c8:06:0d:be:e5:fe:a0:1c:51:02:1f:2b:
16:53:c5:71:1c:77:4c:a7:ea:02:51:3b:54:37:00:6e:81:19:
43:c4:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:46 2025 by rpki-client