Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa
File: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (raw, json)
Hash identifier: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=
Subject key identifier: 64:C4:F6:A8:97:90:96:EF:82:E6:2D:06:D3:51:01:08:D7:7E:83:A3
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0194258F01F72F27780A455FB2E2B65D5959
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 91.240.205.0/24 maxlen: 24
91.240.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:f7:2f:27:78:0a:45:5f:b2:e2:b6:5d:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c4f6a8979096ef82e62d06d3510108d77e83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:02:b5:d9:bd:f6:2c:8f:2d:e0:a5:b6:d4:
a8:af:3d:f5:2f:40:e7:bf:30:45:bc:9e:a8:0f:1b:
0c:96:f1:98:2d:8d:ac:fe:b7:f9:2f:93:15:04:30:
cf:1a:1d:3c:63:0c:13:40:f9:8d:16:63:f4:af:50:
23:6c:c4:0f:b0:d5:77:6d:43:fe:82:61:d1:d5:1f:
1b:8b:e4:38:56:52:43:4b:0c:ec:8c:eb:8e:e8:da:
69:a1:5f:b5:e5:5d:a0:41:21:46:16:5c:82:c0:d3:
bb:1d:95:d7:7f:ab:ae:7e:e0:ed:69:13:1d:4a:37:
b5:04:b4:44:64:3e:31:7e:1c:1e:a7:88:23:10:9e:
ff:30:91:40:ec:e4:1f:34:6e:32:86:cb:78:03:52:
9c:b6:6e:a0:06:ad:96:6f:4b:46:a5:1b:e5:8d:fc:
bf:0a:31:96:1c:ff:76:16:ba:c0:59:02:15:50:08:
d7:2a:ce:5e:1a:e0:6a:9b:c1:0b:a6:9b:ed:2d:0b:
62:73:38:82:f8:e1:ff:7a:f6:5d:96:9e:3b:a5:cb:
2b:c3:7e:ca:6d:5b:c6:6a:06:50:8c:a7:e0:c2:19:
e9:fb:5a:a7:5e:16:ea:03:55:ef:0c:ef:46:33:64:
ca:e4:93:fa:13:f8:4d:34:ca:94:f9:ec:ec:e6:19:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:F6:A8:97:90:96:EF:82:E6:2D:06:D3:51:01:08:D7:7E:83:A3
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.205.0-91.240.206.255
Signature Algorithm: sha256WithRSAEncryption
95:28:70:28:00:b3:61:34:fa:f5:07:1c:4d:f9:1a:25:4b:dc:
92:f3:31:a6:03:04:39:65:9a:64:c7:9e:a1:9d:e7:36:33:2a:
ac:2d:b8:be:23:d1:73:a4:c3:d6:38:5e:e7:2b:07:68:b0:92:
75:df:05:06:28:0e:4e:87:4a:d3:c8:15:22:ac:50:d7:fc:22:
93:e6:73:6f:24:23:5e:80:10:32:6e:7f:2a:97:8f:c0:50:81:
62:f4:93:9b:0b:69:41:3e:f5:f3:bd:fa:5b:9c:a7:67:b2:96:
12:dd:5b:59:82:fc:0d:a5:f3:27:a6:10:5a:3f:b5:0d:5a:d7:
1c:ba:4a:fe:24:20:a3:18:77:1f:47:62:cc:46:15:4b:5f:9b:
82:3b:14:e8:bc:7d:f9:00:e7:4c:8c:16:c0:59:57:ba:e4:1e:
0b:80:dc:fc:27:7b:07:82:f5:8e:53:6f:07:95:c0:cc:3b:0f:
aa:d1:51:64:46:fb:a1:15:60:47:c3:cb:fd:74:18:68:52:1e:
e3:58:c0:81:02:6f:28:51:fa:14:e8:e8:c9:18:dd:9a:54:2c:
a3:f1:87:1c:72:f5:9d:8b:ab:d7:b7:de:51:5a:ba:7c:30:5e:
f6:eb:ac:80:d3:4a:b6:c0:6c:37:bd:5d:f8:3c:69:66:bb:4e:
db:fa:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:19 2025 by rpki-client