Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/jzen_y9MjkJUaSD6dgV7vhjezg8.roa
File: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (raw, json)
Hash identifier: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=
Subject key identifier: 8F:37:A7:FF:2F:4C:8E:42:54:69:20:FA:76:05:7B:BE:18:DE:CE:0F
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019424B366F1B0A840194DDDB2DF0E6D21B8
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/jzen_y9MjkJUaSD6dgV7vhjezg8.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.243.160.0/24 maxlen: 24
185.243.161.0/24 maxlen: 24
2a09:900::/47 maxlen: 47
2a09:900:2::/47 maxlen: 47
2a09:900:100::/40 maxlen: 40
2a09:900:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:66:f1:b0:a8:40:19:4d:dd:b2:df:0e:6d:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f37a7ff2f4c8e42546920fa76057bbe18dece0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:c7:a9:47:db:fd:19:fe:14:25:23:5f:e5:
05:14:fb:67:5e:d6:ae:21:07:e2:c5:8c:60:5d:95:
25:01:46:69:52:7f:aa:5c:0f:c7:0f:f9:13:b1:fe:
90:e3:6e:01:fe:de:25:71:51:50:8a:91:68:ca:6d:
95:cf:d3:60:84:13:de:44:d7:a4:4f:39:18:66:c5:
42:65:15:5a:a0:d8:47:c8:28:11:30:7e:70:3d:ea:
2e:d4:cf:06:b7:cd:c5:ca:c3:70:9f:59:3c:d9:c4:
c7:4c:27:12:16:7a:81:db:28:44:3b:b8:ef:4c:f3:
21:aa:cb:7d:75:f1:43:45:d7:d8:6f:51:cc:cf:3d:
e0:5f:6b:97:57:c0:10:49:11:b8:2a:f7:ea:98:b8:
c8:50:fc:de:52:06:e4:43:28:e7:86:bf:77:1f:12:
69:37:45:46:7c:27:c1:69:db:8f:f6:d1:10:cd:45:
49:02:ff:73:6d:26:6c:34:15:35:9e:10:75:ad:ee:
98:8c:83:17:00:48:a8:9e:e0:e7:8a:7d:b4:7f:2f:
58:09:60:bc:44:94:a6:ab:86:a9:77:bc:88:aa:86:
13:9b:f0:60:c3:a0:df:ec:db:e9:68:b9:ac:29:f7:
ff:90:9c:62:f8:8e:d4:27:a4:bb:33:3a:19:f1:c6:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:A7:FF:2F:4C:8E:42:54:69:20:FA:76:05:7B:BE:18:DE:CE:0F
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/jzen_y9MjkJUaSD6dgV7vhjezg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.160.0/23
IPv6:
2a09:900::/46
2a09:900:100::-2a09:900:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:a0:1f:07:6d:fa:15:00:4e:19:c2:03:65:42:a0:61:f1:5b:
8b:ae:ba:68:15:ec:29:1d:d1:62:73:e6:c6:fa:42:cb:fe:1a:
15:0e:43:ce:66:a8:10:64:48:97:5e:85:07:b0:66:aa:b2:20:
53:4a:08:29:65:1e:36:13:ec:45:17:6b:5f:8f:66:67:df:e3:
db:96:f4:6a:0e:40:14:98:f3:30:31:9a:54:92:e0:f8:7c:97:
a7:19:9a:7c:d0:b3:14:a5:66:0e:ed:e2:1f:04:cb:b0:6e:0f:
a1:23:a1:7e:72:63:20:d7:12:34:7a:22:8c:94:68:07:a4:c5:
8f:96:92:49:54:76:da:99:63:2c:1a:da:d5:97:d8:89:fc:7f:
65:a6:fe:dd:7e:ba:e9:57:8a:fb:37:18:13:4c:50:83:af:93:
4c:08:20:70:d3:d1:d1:68:a2:48:85:cc:34:29:71:66:ee:ef:
d5:f6:7e:dd:e7:ba:d2:55:d3:3a:4d:82:65:aa:83:41:af:ee:
3c:38:ed:c9:5a:ab:a5:7e:1b:83:b7:2d:5e:a8:fc:78:fc:6b:
99:d5:6d:81:7f:f4:eb:d2:8b:a1:5d:c0:b4:a1:7e:9c:10:e3:
fc:51:7a:55:35:97:b7:57:90:ad:d7:db:81:fe:37:f4:53:8a:
48:54:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:56:42 2025 by rpki-client