Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/z_UAwn_kVjkZ866neZB3p1WwlTQ.roa
File: z_UAwn_kVjkZ866neZB3p1WwlTQ.roa (raw, json)
Hash identifier: vOzwNAGom3g7rnBvXvNP0+S04/68PZsmumFEfuK6/uo=
Subject key identifier: CF:F5:00:C2:7F:E4:56:39:19:F3:AE:A7:79:90:77:A7:55:B0:95:34
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019632F37B24D593D935631339875CA78459
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/z_UAwn_kVjkZ866neZB3p1WwlTQ.roa
Signing time: Mon 14 Apr 2025 06:18:59 +0000
ROA not before: Mon 14 Apr 2025 06:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59484
IP address blocks: 87.227.140.0/24 maxlen: 24
151.251.32.0/24 maxlen: 24
151.251.33.0/24 maxlen: 24
151.251.34.0/24 maxlen: 24
151.251.35.0/24 maxlen: 24
151.251.40.0/24 maxlen: 24
151.251.41.0/24 maxlen: 24
151.251.42.0/24 maxlen: 24
151.251.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:f3:7b:24:d5:93:d9:35:63:13:39:87:5c:a7:84:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 14 06:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cff500c27fe4563919f3aea7799077a755b09534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:dd:6e:62:ab:5d:9a:0d:ed:52:a0:53:eb:
2f:b6:19:89:a1:12:bf:0a:dd:09:e1:f6:1e:d6:10:
bc:ea:67:66:9f:12:5a:57:98:e5:7d:a4:4a:b9:18:
a4:b0:9b:1f:71:07:98:35:a2:a1:26:e2:8b:e5:ee:
80:36:5a:6a:5e:79:9b:9a:36:db:23:67:a0:a4:37:
99:a5:40:fe:23:58:63:d1:80:71:36:c9:8a:75:95:
01:f1:a1:ed:8c:02:26:68:fc:df:17:c5:ac:a9:95:
86:83:7b:6d:13:9a:7b:25:75:8b:b9:f9:86:de:c0:
af:a3:91:77:79:89:ad:9b:a4:a3:2b:66:5c:87:c5:
5e:d0:5a:ec:f7:f3:e5:ce:22:2a:5e:4a:00:1c:50:
15:3f:d7:bf:22:d8:63:c6:cb:e0:1c:26:a1:5c:6a:
f8:8a:a7:35:b1:78:18:db:5d:03:1c:ab:0c:0e:16:
cb:67:9b:c0:05:ec:e0:8b:93:8a:2f:da:76:d1:da:
0e:21:08:c8:0b:b5:0e:3d:06:a4:b6:54:d1:0a:e9:
d1:64:33:f3:28:e3:b4:1b:37:4c:c0:fe:61:71:3d:
76:1c:07:ef:54:71:44:c7:1a:22:38:d4:3f:d6:01:
10:62:f1:87:84:b2:3c:07:55:85:74:80:1c:f6:ce:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:00:C2:7F:E4:56:39:19:F3:AE:A7:79:90:77:A7:55:B0:95:34
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/z_UAwn_kVjkZ866neZB3p1WwlTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.140.0/24
151.251.32.0/22
151.251.40.0-151.251.42.255
151.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
79:67:51:4c:f4:70:87:10:95:56:ff:be:4b:f4:9a:dd:29:d2:
54:5c:8e:dc:ea:29:32:76:25:dc:56:d2:91:67:2c:61:5a:0e:
cf:95:35:2f:1e:03:80:64:f9:d3:9e:93:9a:70:ad:81:ae:4c:
b4:fd:7b:93:f4:22:6d:76:87:14:9d:b5:c5:37:d8:3a:69:27:
1e:e2:3f:13:f4:5d:15:ce:01:d4:82:f4:aa:52:87:d1:1d:08:
9b:78:41:f4:e7:68:4a:85:ad:27:46:c2:de:4f:12:72:a6:af:
be:8c:78:f5:1c:26:3c:05:36:78:d5:35:fa:26:47:0a:8e:9f:
bb:57:cf:cc:30:d6:00:61:3d:43:32:5b:7e:16:49:3e:1a:ed:
a3:8b:d2:60:13:f1:a7:4e:c8:fa:db:bf:b6:5a:c6:5f:2f:cc:
05:54:c1:c2:0b:ff:1b:a0:68:2b:07:dc:51:3c:cd:3d:c8:d4:
04:ca:4c:a6:7f:dc:a6:69:a5:37:2e:52:44:b1:52:a9:65:35:
83:90:ab:98:b5:e2:b2:0b:ea:86:23:43:84:9f:71:e2:50:da:
5c:ac:3a:c7:14:f2:f4:c4:54:e6:96:4b:44:84:9c:da:9b:af:
c2:d5:83:a5:8b:38:fb:37:74:74:1b:b6:c6:ce:67:cc:50:5b:
82:f2:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:08 2025 by rpki-client