Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa
File: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (raw, json)
Hash identifier: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=
Subject key identifier: 64:E1:B4:A4:9D:35:85:75:42:DE:BF:52:05:25:17:DE:73:F7:89:65
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 0194221FED6F81AD4D436EBA2707AF25331B
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 185.156.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:6f:81:ad:4d:43:6e:ba:27:07:af:25:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e1b4a49d35857542debf52052517de73f78965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:f3:29:31:f7:88:40:a0:8f:d6:fe:2d:29:
ac:7f:5e:c0:c2:c9:3e:67:e1:a9:ad:16:98:6c:11:
f0:e8:62:bf:eb:0e:fc:89:cd:c8:e3:de:f6:7d:13:
07:3f:53:e3:90:94:61:da:e7:0d:d6:b2:4c:05:ee:
8a:58:00:cd:d8:1d:6c:46:8e:14:fe:80:2c:76:db:
55:48:5f:97:d3:78:f3:38:61:c1:4f:c0:3c:42:e3:
06:01:7a:d2:4c:3b:e6:6e:07:72:58:20:9f:cc:56:
f4:b8:32:34:61:3a:2c:ca:0b:01:1c:ca:6c:3a:f9:
59:46:d9:eb:e6:27:f3:51:7d:05:e4:a0:bb:f1:4d:
35:8e:09:f5:7d:c7:c6:a8:a6:a0:66:04:94:7a:da:
d8:66:df:71:1c:a3:c3:c6:8d:eb:6c:db:d6:4b:ce:
ce:5a:4e:4b:09:3d:58:98:cd:0a:ab:c6:bc:c2:db:
2a:6d:1f:e5:15:b2:2b:06:18:58:e1:91:48:18:84:
de:35:6b:b1:2c:2a:bf:9a:5b:e7:70:85:35:5c:81:
d5:97:a1:f7:62:9c:e3:76:ad:93:27:f9:76:bf:92:
2b:b4:33:af:22:c0:01:e4:77:d8:d0:07:d4:3f:01:
35:ab:c1:fc:05:e1:c5:68:5c:bb:13:af:c2:95:52:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:B4:A4:9D:35:85:75:42:DE:BF:52:05:25:17:DE:73:F7:89:65
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.4.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:9f:30:a6:25:b8:f7:5d:1b:21:52:31:8b:7e:3d:6e:de:
82:27:fa:07:47:79:22:ec:6c:15:9f:d9:7d:99:b7:56:c7:b6:
00:bc:32:72:1f:a6:06:93:52:8b:e9:4a:a7:45:4f:9c:e3:46:
4a:ae:05:f4:a8:9f:8f:38:a8:0d:7a:cf:38:44:2d:66:23:2e:
f9:cc:4b:a2:53:6a:f5:91:fd:fe:20:a4:c8:eb:30:e8:75:a2:
9e:90:3e:5a:c7:8c:00:71:43:59:b7:67:f5:8d:73:ae:a4:ab:
44:07:f5:d6:a4:cc:d6:87:2e:3f:a6:44:3b:b4:08:68:f4:e0:
12:b4:2d:3d:06:46:87:58:cf:f3:ef:06:90:1f:1d:4a:26:ef:
af:d1:af:4a:c4:4a:a4:d7:0b:0f:d2:4b:a2:01:2c:05:a0:b2:
23:99:bb:e9:00:db:d8:51:ff:bf:ed:46:9b:73:c4:fe:5e:15:
a0:a6:1e:41:60:af:05:d4:37:90:f4:ec:44:7a:f6:2e:ea:9a:
36:36:60:2f:f0:7b:ff:67:8c:46:61:70:08:29:09:81:2e:12:
43:5b:16:eb:6e:21:b3:e8:22:80:2c:10:27:40:77:d8:62:65:
96:31:11:90:1b:2b:eb:7d:76:2d:6d:d2:f3:a3:c0:1a:d4:1a:
0d:93:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:18 2025 by rpki-client