Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa
File: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (raw, json)
Hash identifier: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=
Subject key identifier: CD:A0:B4:B7:A4:FD:BB:54:34:FC:E6:3F:06:5F:BB:60:E2:7E:76:3E
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019492C0590B2E8C9BFC3E36C8ADA9E1AD5E
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa
Signing time: Thu 23 Jan 2025 10:41:06 +0000
ROA not before: Thu 23 Jan 2025 10:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 185.100.240.0/24 maxlen: 24
185.100.241.0/24 maxlen: 24
185.100.242.0/24 maxlen: 24
185.100.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:c0:59:0b:2e:8c:9b:fc:3e:36:c8:ad:a9:e1:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jan 23 10:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda0b4b7a4fdbb5434fce63f065fbb60e27e763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:e1:fa:cb:b6:54:bb:69:eb:f7:f2:9d:8e:
69:83:2d:06:83:b9:ad:02:f0:80:d9:9a:c3:64:30:
bc:17:b7:1d:49:90:98:b9:78:be:25:e0:2e:a5:b5:
52:e7:3a:74:13:1c:9d:c0:06:ac:72:35:e7:a9:46:
4f:7c:1f:6e:1e:93:0b:a2:a2:69:14:90:d8:cf:ce:
88:c5:36:b8:63:98:89:c9:fa:e1:d8:95:6d:9f:ef:
35:9b:fa:b1:c7:ad:d6:d2:9a:dc:97:38:c1:8e:59:
f0:c8:78:6f:2a:80:f4:18:75:c3:f2:9d:62:c7:73:
c0:3e:64:93:ff:53:27:81:55:4c:b8:f6:0d:a6:01:
83:84:27:4b:29:c6:32:e7:dd:ec:3d:62:f4:22:e0:
dd:ce:b8:1e:cb:a8:a0:63:9c:be:cd:93:e7:a4:9c:
b0:f9:de:a0:d1:3a:5c:69:93:b7:d7:63:7d:84:18:
cf:48:49:7f:97:21:6d:84:6f:b0:ab:4f:42:0f:c6:
2e:d5:f6:c7:d9:7d:68:41:b9:81:3a:f0:35:c9:35:
e2:a6:d1:f5:90:32:99:c7:52:30:1c:5b:98:ed:07:
a7:bb:4f:f3:fd:1d:a5:09:6e:6a:ba:d7:22:e4:c1:
b3:c1:55:d5:56:30:d1:75:70:73:81:99:2c:24:35:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:B4:B7:A4:FD:BB:54:34:FC:E6:3F:06:5F:BB:60:E2:7E:76:3E
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.240.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:e7:ef:5f:1d:89:1a:87:6f:71:20:87:28:cb:69:2a:fe:bf:
cb:a8:9a:48:9d:b5:7c:da:76:21:08:3f:5c:2f:eb:25:87:ec:
fb:e2:fe:c1:18:b6:e9:c8:c6:36:89:3c:c7:17:1b:61:12:ce:
83:fd:72:e7:3f:fe:b7:62:ee:d4:cc:c3:bb:d4:22:32:a6:6f:
f4:f3:10:0d:8d:e9:3c:99:dd:5b:24:41:86:e1:98:02:35:4a:
8e:92:ad:17:76:d9:06:08:06:59:c5:0b:ce:ea:bb:06:49:d3:
02:56:9e:d3:46:97:ba:d1:87:9d:0a:61:6f:e5:be:8c:92:3d:
2d:0a:de:ea:ff:aa:91:cc:8f:40:ac:01:42:31:c6:9b:18:66:
66:23:7b:18:74:48:98:76:a5:6f:8d:b7:a0:48:d7:ae:50:db:
2d:e7:b5:60:6b:94:96:d2:f0:ff:bc:50:d2:c3:97:79:6f:fb:
68:e4:8c:8a:63:ba:88:d0:39:4a:11:d3:f5:97:c8:b8:f2:09:
51:e8:15:46:33:94:dc:55:e4:7c:53:6d:d1:c1:29:a7:d5:f8:
56:14:cc:21:f8:13:bf:9b:5f:3e:45:9a:dc:cd:c8:d2:82:a2:
11:cf:f2:7f:57:d5:e0:63:26:f6:5b:ba:7a:a3:01:11:76:f4:
16:64:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:23:36 2025 by rpki-client