Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0ZW5KAczE20U5QcyFUsqUpXEED8.roa
File: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (raw, json)
Hash identifier: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=
Subject key identifier: D1:95:B9:28:07:33:13:6D:14:E5:07:32:15:4B:2A:52:95:C4:10:3F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CA7F9B5478FBFB1C439140D33BF5E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0ZW5KAczE20U5QcyFUsqUpXEED8.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41531
IP address blocks: 185.214.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:f9:b5:47:8f:bf:b1:c4:39:14:0d:33:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d195b9280733136d14e50732154b2a5295c4103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:0a:9e:4b:d4:87:87:a8:52:88:74:0e:ee:
3e:0e:e9:3d:bc:33:05:50:ba:db:7a:b9:8e:77:e6:
ae:8e:6d:d3:2d:cf:97:05:9e:27:ae:34:7a:c4:f8:
89:f8:72:2f:de:e1:ed:a3:7a:ee:5f:16:b1:de:cc:
1d:a6:93:c9:bb:84:52:d8:b7:0e:ad:86:66:b9:ad:
4b:b9:08:3a:3d:8b:df:6c:34:e8:d1:b2:0f:7b:f4:
d0:a4:04:82:e2:34:06:4c:95:2d:0e:cf:0d:6c:ec:
1d:11:45:62:7d:53:c9:ea:03:5a:0a:a1:41:9a:97:
23:c7:94:00:9a:c4:95:6c:75:44:c8:ea:29:2f:03:
30:51:31:c3:b4:aa:90:95:2d:98:d9:b2:18:fe:f4:
e1:bb:dd:a8:ef:82:80:83:1d:e9:80:98:4e:b4:82:
6e:f0:21:8e:d2:a0:3f:96:df:bf:2b:cd:4b:a3:00:
78:3b:6b:e0:43:02:cf:5c:3e:0f:9f:e5:42:eb:ee:
40:ca:71:82:0e:e5:b9:65:99:dd:da:d4:d9:7f:06:
ba:7a:06:81:b2:88:10:ae:97:59:e9:26:84:20:d3:
11:cd:6f:55:b8:3b:9a:06:1b:7b:91:3f:79:ad:4c:
b2:0d:67:05:78:4f:8a:48:49:28:1f:85:95:78:3b:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:B9:28:07:33:13:6D:14:E5:07:32:15:4B:2A:52:95:C4:10:3F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0ZW5KAczE20U5QcyFUsqUpXEED8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.12.0/22
Signature Algorithm: sha256WithRSAEncryption
24:3c:59:25:26:0c:15:dc:4c:33:99:6d:db:e3:bd:98:3b:cc:
30:f0:f9:8b:d7:8e:80:f7:6a:29:c4:37:cb:cf:ec:5a:87:84:
b5:0a:c7:99:12:f4:2b:ef:cf:47:70:c9:50:d4:6a:11:92:1c:
13:83:2c:a0:10:8e:5b:92:a6:d3:da:2d:51:2e:98:b3:21:f6:
83:ae:00:fb:9f:b0:f3:3a:26:a3:b5:27:9e:93:ee:7f:66:3e:
76:fb:7e:a6:d2:29:d6:1d:d3:db:29:ce:4e:2a:06:9b:2f:59:
d6:7e:fa:93:74:a0:a1:bc:8d:10:06:58:5e:e6:2f:73:e7:86:
3f:02:66:b2:8a:8a:a6:45:6c:1c:32:7e:da:cd:bf:93:f0:b9:
41:65:92:1e:a9:5a:46:90:3d:e5:57:d6:90:cc:0e:9d:c9:7e:
7b:2f:3f:a2:31:d3:c8:b2:d5:ce:f9:a1:7c:76:16:36:e3:c9:
d1:e7:d3:fa:d0:57:41:a7:10:50:87:49:c1:7c:e2:5e:82:02:
5e:a2:29:7d:7e:0b:b2:10:3e:d7:7c:0e:cd:81:b2:8b:25:6b:
3d:c1:51:c5:14:ec:91:5e:ac:dd:31:ba:c6:5b:ef:8f:18:8d:
17:9e:3a:25:07:1b:5c:e8:0a:e5:84:85:55:3d:c9:6e:c6:db:
bd:0f:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:59 2025 by rpki-client