Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa
File: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (raw, json)
Hash identifier: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=
Subject key identifier: D1:9A:BC:96:0E:D6:1C:9A:0C:F0:1F:70:0A:18:B4:FE:E7:E2:06:F2
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01975FAC9FD7B0DF16A9751D13B9F4CA1641
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa
Signing time: Wed 11 Jun 2025 15:47:18 +0000
ROA not before: Wed 11 Jun 2025 15:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209671
IP address blocks: 185.104.208.0/22 maxlen: 24
2a06:3340::/32 maxlen: 32
2a09:de80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ac:9f:d7:b0:df:16:a9:75:1d:13:b9:f4:ca:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jun 11 15:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19abc960ed61c9a0cf01f700a18b4fee7e206f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:d5:f7:d7:2b:d4:ca:29:de:0a:ec:aa:d7:
69:27:7e:d0:6b:6d:c0:69:e2:b9:22:de:10:6c:bc:
79:62:fa:68:06:b6:fa:61:f7:1c:66:f4:fb:1f:f0:
54:5a:35:14:db:de:fb:bb:28:c7:7e:0e:c9:f8:6a:
1e:ca:30:c7:70:79:17:72:63:a9:24:ce:f3:fa:bd:
3f:1d:90:4d:2f:63:5a:03:82:e1:98:b9:73:5f:1a:
dd:51:fd:3f:a8:fd:b2:68:f7:13:dd:b5:13:cd:09:
eb:dc:a0:f6:b9:28:8d:fa:dc:1d:a1:77:ce:f8:3b:
8b:67:57:f6:2b:71:cd:a9:2e:b4:5f:e1:b5:54:6e:
b8:95:17:24:b6:a1:ab:ef:a9:19:dd:39:e9:e3:d8:
39:65:f8:05:48:6d:c5:fa:5d:a5:b5:dd:60:57:de:
79:3c:9f:75:ed:c9:dc:6b:30:44:21:b4:ed:cd:1e:
f5:c8:8c:3e:d6:aa:66:fb:69:05:32:cf:1a:d5:ff:
61:60:e1:52:15:52:91:0b:4f:3c:77:4a:e3:fb:1f:
32:e3:24:ce:89:8e:de:ab:18:65:2b:6e:c0:15:1f:
6a:f9:d2:fc:cd:f9:7b:82:f7:33:48:6f:d0:c3:86:
40:fe:d7:5f:1f:ea:b9:f4:e3:5b:6b:18:80:9b:59:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9A:BC:96:0E:D6:1C:9A:0C:F0:1F:70:0A:18:B4:FE:E7:E2:06:F2
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.208.0/22
IPv6:
2a06:3340::/32
2a09:de80::/32
Signature Algorithm: sha256WithRSAEncryption
60:29:49:9d:2f:85:d3:5d:b9:75:bb:af:76:d1:bb:a2:59:02:
aa:5e:83:bb:36:45:f0:ce:ac:f3:c0:0c:21:33:23:18:ff:7b:
da:82:81:84:8b:ff:c5:b7:af:04:4f:2d:f6:33:0d:d9:cc:59:
a5:00:06:b3:ab:61:e8:99:e0:c4:7f:b3:67:77:97:30:4b:d3:
d9:41:05:23:62:cd:7c:56:c5:28:e2:4f:7a:05:d5:f1:18:12:
04:ca:79:8d:6d:fc:35:51:97:ba:f6:22:86:57:9a:55:26:97:
90:d2:1b:84:c4:3f:8c:f2:4f:a4:35:51:5b:ae:60:81:e9:b0:
ca:2e:55:54:d1:b2:0f:4a:ce:26:54:11:4b:7c:d5:c8:a7:d4:
da:a2:00:df:a2:06:e2:44:95:91:c0:13:d5:70:28:37:bf:f4:
7b:41:25:67:65:d8:45:c9:ae:60:5f:a8:8c:3a:b1:12:42:da:
54:03:67:53:f4:42:e1:e5:d6:11:1f:5d:c5:08:32:5a:4d:6a:
e1:96:cb:12:af:6a:01:4e:9f:7c:96:1c:f1:06:4a:95:ad:3a:
1a:4e:84:5f:77:71:e2:81:97:da:ad:f4:f3:3d:f4:9f:fb:1c:
16:ae:94:50:ac:7f:af:ff:4e:28:63:53:7b:86:9d:73:b0:4f:
e0:03:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:17:33 2025 by rpki-client