Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa
File: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (raw, json)
Hash identifier: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=
Subject key identifier: CF:49:C9:57:A5:63:F7:25:8E:53:FF:01:21:EB:9A:F5:ED:C8:E8:91
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 01942444A2B2EE227BEA400DEDD4794DBE6C
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41616
IP address blocks: 81.163.80.0/24 maxlen: 24
81.163.81.0/24 maxlen: 24
81.163.82.0/24 maxlen: 24
81.163.83.0/24 maxlen: 24
81.163.84.0/24 maxlen: 24
81.163.85.0/24 maxlen: 24
81.163.86.0/24 maxlen: 24
81.163.87.0/24 maxlen: 24
91.247.152.0/24 maxlen: 24
91.247.153.0/24 maxlen: 24
91.247.154.0/24 maxlen: 24
91.247.155.0/24 maxlen: 24
91.247.156.0/24 maxlen: 24
91.247.157.0/24 maxlen: 24
91.247.158.0/24 maxlen: 24
91.247.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a2:b2:ee:22:7b:ea:40:0d:ed:d4:79:4d:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf49c957a563f7258e53ff0121eb9af5edc8e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:ac:07:1f:27:08:a2:19:02:99:92:35:bd:
79:13:11:31:f8:67:b3:c2:da:ca:70:6d:e6:4a:0d:
49:f4:b9:eb:21:8c:57:54:02:bb:06:8b:1d:03:a7:
6c:42:63:c4:0e:4c:02:a7:cc:ab:05:6f:76:d2:e5:
eb:a4:b0:0e:68:38:c0:ef:e5:5c:a8:dc:14:34:52:
53:e9:7d:46:9e:e2:1e:bd:4b:b4:1e:11:d2:25:fb:
bb:18:b4:b0:c8:dd:87:39:62:d6:75:b8:61:fb:99:
db:02:23:8e:3c:25:9a:bf:03:79:a0:c5:e9:a4:c6:
03:e0:f7:12:1a:d0:58:1f:f9:7a:46:ca:1f:cb:4f:
d5:64:1a:15:c3:8b:e9:53:f4:fb:7e:f3:6e:9f:03:
c5:61:2c:cf:6b:9a:73:c6:94:cf:ca:22:27:90:ab:
52:f9:ce:83:c9:57:e0:30:04:0a:8e:e5:16:3e:e1:
41:d4:a8:94:39:41:7e:db:c6:37:dc:e4:39:b5:ee:
1c:60:44:ed:cb:d7:d8:57:94:4d:8b:f1:da:90:be:
df:38:b5:ee:fa:af:e7:61:81:1b:76:31:cb:e4:01:
28:df:57:bd:f8:e8:c6:1a:6d:cc:cb:7a:15:e5:f8:
9f:da:44:ee:72:9f:87:af:f0:c8:bb:c8:aa:3a:05:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:C9:57:A5:63:F7:25:8E:53:FF:01:21:EB:9A:F5:ED:C8:E8:91
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.80.0/21
91.247.152.0/21
Signature Algorithm: sha256WithRSAEncryption
80:47:95:c3:4a:1c:29:b2:d1:8d:88:47:43:16:90:3d:07:55:
23:a5:64:8f:a9:88:dc:4a:44:2c:1f:eb:f5:33:e5:40:3d:58:
7c:a9:39:88:f8:75:42:56:5a:79:12:ad:40:0c:5c:5c:10:d3:
16:9b:60:08:7b:5d:4f:5c:f1:62:dc:67:57:4c:6f:82:b3:a5:
d8:f5:16:95:49:84:d0:34:f7:c8:02:62:6c:20:10:f1:b1:64:
30:3a:17:96:f9:80:fd:56:39:72:b0:81:25:b2:76:07:c8:ef:
77:dd:30:d2:43:2c:96:86:ce:33:86:df:8b:f4:22:cd:cf:05:
a7:a9:fb:37:d0:d3:8f:bb:cf:6d:0f:04:61:85:3c:b2:24:5a:
c2:33:f1:60:7e:25:3e:b2:38:fc:63:30:6d:77:d8:f7:13:f6:
f2:49:85:f4:ac:12:ea:1a:82:d2:2e:84:a8:4d:36:f9:05:a4:
27:48:cb:a8:be:ea:b1:f3:0d:f8:f5:dc:12:a9:ac:b4:1e:98:
1c:8a:1b:9f:60:62:eb:8d:b8:b7:28:b0:a5:d6:c4:c5:70:a6:
45:d4:41:ff:1c:a0:e4:b6:95:af:4a:6b:98:ac:8e:b2:db:82:
e2:f3:30:fa:c1:ea:28:b2:fb:e5:4f:ef:9b:e5:d6:02:f3:b1:
76:e2:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:07 2025 by rpki-client