Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa
File: jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa (raw, json)
Hash identifier: oNa1hwlsmstQ0sAKmsfIRqvEXfj92rgiiikTtvbNxKU=
Subject key identifier: 8D:94:07:B9:81:99:FC:1C:C9:D3:F0:8F:7D:F8:A3:36:F1:A3:A0:3E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0197076BCE0F60C5D2C4CE2DE5AEF7D368AD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa
Signing time: Sun 25 May 2025 12:29:54 +0000
ROA not before: Sun 25 May 2025 12:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.153.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:6b:ce:0f:60:c5:d2:c4:ce:2d:e5:ae:f7:d3:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 25 12:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d9407b98199fc1cc9d3f08f7df8a336f1a3a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:9d:80:8b:02:50:6b:17:2f:b4:9f:4d:9a:
19:63:8e:ae:c2:77:ac:bd:6a:ca:4d:df:c6:9f:83:
7a:97:36:ab:15:33:59:8d:9a:28:83:13:ba:b7:94:
dd:33:89:3f:40:48:6c:a1:da:8f:f9:8c:f2:a4:df:
b2:08:fa:5a:f8:28:a5:e6:34:dc:6b:61:ed:e3:ec:
2a:0c:07:98:78:6d:c1:df:d4:37:74:df:ca:b6:9d:
e6:c6:e2:cb:e8:a4:74:a6:d4:1a:90:2a:8d:33:fd:
79:83:a8:54:2f:35:1f:95:50:86:1a:d5:0c:c2:60:
1c:26:56:d5:b0:1e:19:6f:b9:a6:b4:66:3f:66:20:
0b:09:6e:78:b0:61:f7:09:46:9b:ff:95:f4:fa:02:
31:16:0e:73:46:d0:ff:c4:f3:7d:2e:34:27:de:af:
58:e1:6d:cb:55:ac:5d:35:0d:ed:c8:50:13:9a:1f:
bb:e8:dc:6d:ac:c4:4d:e6:a6:55:b8:56:b9:8c:e6:
1c:1e:63:04:91:65:d9:bf:06:35:45:66:9d:36:db:
7e:4b:0c:9b:39:65:0b:c3:7b:fe:46:e9:5e:16:94:
d6:8b:fc:31:d6:62:52:c0:1e:e5:a2:f4:29:a1:cc:
04:78:77:cb:e2:6b:cc:2b:91:08:16:39:f8:01:83:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:07:B9:81:99:FC:1C:C9:D3:F0:8F:7D:F8:A3:36:F1:A3:A0:3E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.153.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:28:7f:5e:dc:64:25:35:46:30:78:04:8b:f2:49:01:dc:75:
b5:13:24:d2:21:79:95:54:84:ff:a6:ee:73:2f:95:32:79:01:
1d:f2:04:42:7a:7e:5a:4c:81:da:5a:e6:97:d1:9b:81:10:9c:
03:b0:f4:55:d1:d7:0d:77:77:1b:03:0c:30:c8:a4:96:c5:26:
74:93:f1:2a:cf:a7:09:cf:ac:92:9c:8a:6d:0b:af:f2:4c:e6:
03:84:d0:01:75:9e:84:65:33:7f:2f:76:27:57:cb:68:f3:19:
79:c6:dc:81:df:8d:44:cb:79:78:83:af:33:b4:85:2b:10:e4:
7a:82:57:2c:d7:14:ae:5f:90:75:7a:8c:28:d3:86:30:e6:16:
93:66:ec:75:3b:38:be:44:aa:51:ce:ed:c4:f4:a9:f1:a7:53:
58:75:18:99:e9:97:40:93:5e:72:e9:27:76:ae:f0:fd:d7:5e:
f3:f7:27:41:50:e0:fb:ae:a2:01:47:46:86:9c:6e:34:92:bf:
47:66:ad:d1:f1:1b:e1:48:49:30:c1:fb:02:b0:f6:d4:9c:ab:
1c:7f:4e:20:09:32:05:8e:a1:49:a3:c0:7c:47:73:45:ed:9e:
4c:92:e4:09:d9:51:68:d9:d3:54:fe:90:e0:dd:5f:14:3d:1f:
2d:36:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:14 2025 by rpki-client