Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/zl8vYnMSKo50V7tHcL3U74d2LS4.roa
File: zl8vYnMSKo50V7tHcL3U74d2LS4.roa (raw, json)
Hash identifier: cxI3XYqo0XKxXcEnFf9KagnCReAfMGFWl39LE0K//l8=
Subject key identifier: CE:5F:2F:62:73:12:2A:8E:74:57:BB:47:70:BD:D4:EF:87:76:2D:2E
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 0196CE0313A0E66306742F639459C14A1005
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/zl8vYnMSKo50V7tHcL3U74d2LS4.roa
Signing time: Wed 14 May 2025 08:57:10 +0000
ROA not before: Wed 14 May 2025 08:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208624
IP address blocks: 185.182.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:03:13:a0:e6:63:06:74:2f:63:94:59:c1:4a:10:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: May 14 08:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5f2f6273122a8e7457bb4770bdd4ef87762d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:21:bb:e3:82:44:37:e0:1a:7c:0e:49:e8:
a4:2f:b6:b9:d3:8c:bf:d0:73:24:52:4c:c4:8b:fd:
93:31:4f:3f:aa:85:76:d1:3d:a8:4f:39:3e:2f:e8:
5f:49:41:25:c3:7f:06:d2:98:7a:d6:c6:ca:4e:46:
cc:be:bc:45:74:06:8c:37:b9:99:69:25:ed:6d:10:
b2:62:84:55:81:80:f3:5d:69:52:d5:f7:f7:6b:98:
d1:14:17:d5:5b:e5:a6:94:8a:65:64:c6:21:a6:6e:
ec:a6:84:b9:2f:79:b5:9b:06:28:23:e7:87:a9:55:
0d:bc:de:49:b9:f4:a6:bf:41:e7:f7:8b:6a:58:86:
2a:ba:c6:0b:18:d9:98:8e:22:da:a5:70:c3:c1:b5:
1d:df:f0:57:f4:a2:cd:4b:d1:12:6a:e0:28:3d:b8:
3e:5b:45:01:94:be:d2:ad:cd:a7:97:c7:02:f3:ec:
86:2c:fd:ac:61:5a:ed:8b:20:0f:1e:48:f7:2f:f0:
de:c0:98:dd:70:0c:0b:22:43:1b:e5:bc:5c:33:b5:
be:3a:96:cc:ea:42:08:5c:49:47:83:04:7a:a9:06:
78:53:24:b7:4a:49:b2:ea:b5:e5:dd:14:54:7a:49:
25:23:29:13:55:ba:63:85:96:34:16:e2:56:04:58:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:2F:62:73:12:2A:8E:74:57:BB:47:70:BD:D4:EF:87:76:2D:2E
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/zl8vYnMSKo50V7tHcL3U74d2LS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f3:dd:fb:d5:1b:bb:bf:c5:be:22:da:69:ef:45:7f:1d:6f:
a5:fc:a6:53:43:8c:97:90:72:5c:f7:af:2d:c9:21:71:15:1c:
15:1e:38:98:3d:27:c6:e0:15:0a:e6:46:37:de:d4:4f:52:02:
14:a2:78:cf:19:6b:91:c6:bd:97:f6:c6:8d:10:8f:2c:19:f0:
d6:23:9b:1b:ee:12:10:e4:c2:07:1a:02:19:3a:a2:da:a6:47:
37:17:03:33:25:14:1a:92:3e:3c:fe:e7:48:55:99:48:18:c2:
e2:8c:69:85:60:7f:a1:99:af:68:8e:0b:e3:2d:bd:e5:c5:63:
34:42:73:90:8d:97:cb:c9:c3:7f:2a:0c:02:77:45:9c:2e:71:
2a:0a:aa:26:a3:3f:9b:80:6c:30:fc:13:56:50:e7:6d:59:23:
1c:9e:f6:c0:c9:f4:ac:fc:7c:15:e3:b8:35:70:52:f2:ba:f2:
64:44:c0:8d:30:93:f2:db:57:46:32:eb:4e:40:07:d2:09:df:
fe:19:f4:d0:ca:9f:99:39:df:ac:59:60:4c:f5:83:76:c5:a0:
b5:cd:f8:6e:6b:d6:21:d1:9b:ac:27:17:fb:86:8e:b4:f8:57:
be:d7:1f:cc:ac:fd:25:f4:c7:e8:07:b2:ef:a3:36:92:56:50:
35:ac:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:40:13 2025 by rpki-client