Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa
File: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (raw, json)
Hash identifier: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=
Subject key identifier: CC:B7:D4:A9:7A:8A:62:B0:D2:98:E2:37:CE:E0:2E:1F:B5:56:F4:04
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 01966214B0FE5DF149051FCED9B2E79F4548
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa
Signing time: Wed 23 Apr 2025 09:57:25 +0000
ROA not before: Wed 23 Apr 2025 09:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213241
IP address blocks: 91.199.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:14:b0:fe:5d:f1:49:05:1f:ce:d9:b2:e7:9f:45:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Apr 23 09:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb7d4a97a8a62b0d298e237cee02e1fb556f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:6c:db:8e:6f:28:c5:1f:34:27:a3:8a:0e:
db:4c:ed:b9:6e:91:7a:ec:8f:79:97:80:70:f8:9d:
25:c9:28:04:ac:6a:34:01:57:4e:c3:d5:42:01:05:
11:c4:2c:5f:85:86:e3:ae:06:56:e1:01:51:6e:5c:
f9:3e:96:8a:11:e2:e1:ae:af:a8:8e:21:28:a3:0c:
f8:d2:2b:73:ae:e2:d6:33:50:ef:95:aa:38:69:dc:
8d:35:32:f1:4d:a5:b7:8c:aa:04:6d:22:a2:56:7c:
d9:8c:16:53:0c:de:fb:7d:00:bb:5e:6a:c8:b5:9f:
90:1b:42:2d:fd:7a:4b:2a:a7:67:17:ca:75:7c:48:
ee:a9:e1:59:60:16:af:22:2d:d5:46:41:e8:f2:5c:
ac:0c:32:2f:1b:bb:76:81:45:d3:5d:6b:6b:49:02:
4e:c6:a5:84:3f:ce:8c:60:27:cb:dc:33:88:f1:49:
72:2e:7f:c7:a8:61:84:e3:70:dc:7a:1d:83:a5:85:
21:d9:c3:61:6b:11:21:77:56:a0:21:bc:bd:aa:e8:
e1:33:af:d8:cc:4f:c1:96:09:e7:16:f5:fa:60:97:
f3:fd:e5:10:27:22:97:2f:35:22:50:f8:42:dd:a2:
f6:db:9b:08:34:be:bd:6b:b3:ba:e0:08:54:ee:a2:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:D4:A9:7A:8A:62:B0:D2:98:E2:37:CE:E0:2E:1F:B5:56:F4:04
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.110.0/24
Signature Algorithm: sha256WithRSAEncryption
67:96:21:6b:13:2f:6c:91:57:5d:53:17:6d:2d:91:32:e9:41:
95:d0:7e:fa:c3:ae:57:7c:be:7b:ec:ea:98:55:99:4d:32:27:
83:40:69:a6:80:36:c2:32:d1:c0:99:a9:b9:37:07:05:f0:f2:
d5:12:0c:86:48:61:fb:18:a4:76:81:83:ca:3a:70:ea:42:a8:
71:55:32:90:7d:ea:5a:d4:04:29:dd:24:99:36:5d:44:f5:03:
37:72:24:b9:dd:8d:ed:1f:5a:ad:c2:65:29:52:99:9a:61:33:
39:0c:b1:ed:53:f3:4a:4b:38:09:92:ab:99:82:31:db:dc:01:
6e:d1:32:a1:e2:86:c5:da:95:bb:2a:fc:bd:9f:58:cf:4c:1c:
44:d0:4f:d3:2b:da:22:02:9b:4d:3e:41:aa:65:7b:58:d8:19:
95:b5:6e:88:e6:9b:02:f9:31:8e:35:dd:d9:31:3a:c5:fc:7e:
d5:4e:a4:21:72:4d:15:9c:50:b4:eb:70:af:76:b4:7a:c2:86:
a3:c8:09:8a:ca:53:94:0a:22:8b:ba:dd:ce:81:77:d9:e0:ac:
15:4a:e1:af:18:bd:1b:23:97:4b:a6:37:c2:53:36:33:6d:6a:
df:cd:15:4a:4d:77:e9:2b:57:71:e1:fc:c4:8d:a8:25:2e:b0:
59:ec:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:07:40 2025 by rpki-client