Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Zpq1z1PsrBLwrS50m3-np38WPQI.roa
File: Zpq1z1PsrBLwrS50m3-np38WPQI.roa (raw, json)
Hash identifier: zZORkU8d975nPXYuzlYWGYkdMqv/3CWqIAxBtpQsgtU=
Subject key identifier: 66:9A:B5:CF:53:EC:AC:12:F0:AD:2E:74:9B:7F:A7:A7:7F:16:3D:02
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0197496FDF90F6E851186058978E6550FA24
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Zpq1z1PsrBLwrS50m3-np38WPQI.roa
Signing time: Sat 07 Jun 2025 08:09:17 +0000
ROA not before: Sat 07 Jun 2025 08:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 45.159.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:6f:df:90:f6:e8:51:18:60:58:97:8e:65:50:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 7 08:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=669ab5cf53ecac12f0ad2e749b7fa7a77f163d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:a6:01:2a:5d:f8:6d:0f:f4:55:7a:b2:e4:
7e:d1:d5:6b:2c:3e:5f:92:96:e6:d9:87:3f:75:d5:
8b:25:2a:ba:af:fe:f5:18:57:6a:50:e4:48:5d:5c:
23:e5:9f:b2:d6:03:07:44:b4:f2:75:7c:3f:ef:12:
8e:20:08:0a:b7:d0:a8:b1:1a:07:d4:f0:a2:04:cf:
4c:ed:f4:80:1b:eb:c2:d8:14:88:f2:02:e1:02:ca:
2c:7b:20:c6:c6:3b:7a:d6:2b:f8:6c:80:f5:68:83:
43:d5:21:2c:33:a4:86:f4:33:10:90:f5:07:66:e3:
1e:14:d0:52:60:fc:3f:8c:34:36:fc:ec:f4:ca:ac:
13:2b:a3:f7:cb:3d:f5:e3:1b:23:9f:b3:02:7e:bd:
be:ba:8f:52:96:96:21:11:07:17:b8:e0:2d:dc:5a:
9e:ce:59:0c:0b:22:43:7f:c6:5d:51:14:9f:98:2f:
d6:4c:8d:45:7e:88:0f:29:da:e5:8d:38:f4:14:cd:
f7:4a:29:13:03:32:b9:01:c9:2c:ba:0a:dc:04:ce:
b3:b6:b1:2f:a2:62:c2:10:53:fd:2b:1d:ce:62:c4:
a7:2c:5f:72:c8:f0:7c:00:cb:f5:e3:1d:9a:c1:f9:
14:3c:cc:0e:53:4c:fb:7c:29:99:74:9b:86:67:e7:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:B5:CF:53:EC:AC:12:F0:AD:2E:74:9B:7F:A7:A7:7F:16:3D:02
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Zpq1z1PsrBLwrS50m3-np38WPQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:06:87:4e:ae:3d:e9:c1:93:c7:d3:b4:a5:1e:cf:d2:05:82:
4a:90:96:7c:81:62:b5:b8:00:8b:09:7e:5f:31:29:12:93:29:
1e:4f:36:0e:6f:6e:7f:ca:fd:ce:7e:ff:81:3a:1f:75:15:7c:
9f:2a:58:dd:1b:48:11:58:16:11:15:4e:ad:39:26:63:cc:a1:
4a:c0:9d:c7:6f:13:f9:f2:1f:26:a7:5e:71:f7:b9:1c:7e:3d:
79:b4:29:88:b6:bc:b9:fa:9d:4c:e1:6b:a5:d1:71:8a:c7:a8:
5c:ae:e7:9f:b7:e5:35:7d:d5:1d:d3:be:44:cb:d1:d5:bf:9e:
64:27:27:6e:66:d7:d9:42:94:d7:99:8a:38:28:95:30:8e:06:
cf:c7:03:2d:53:d1:5b:b9:a8:26:dc:54:59:e2:f7:77:6b:84:
88:dd:ca:5e:60:3d:b3:5a:9d:9b:10:91:85:2e:86:d4:89:74:
cd:e7:5b:40:89:ab:81:de:87:bf:a1:b5:42:bb:0a:d7:48:a3:
60:60:68:b5:8c:dd:81:27:4f:fc:48:9a:f0:3f:ca:03:31:c5:
3d:d4:9a:2e:89:14:c5:aa:d3:1b:f2:90:fe:88:fa:6a:bb:0a:
5d:d6:aa:f7:32:a6:dd:6d:ca:9c:c3:f5:93:5b:06:24:30:1d:
4e:a5:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:46 2025 by rpki-client