Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zNbC7i75DZ7Qv54Q5fcZzPKDbe8.roa
File: zNbC7i75DZ7Qv54Q5fcZzPKDbe8.roa (raw, json)
Hash identifier: /Exmy28oV0yYlglHPzUIWpGKdFeHOtadXqv2XrIN9Bo=
Subject key identifier: CC:D6:C2:EE:2E:F9:0D:9E:D0:BF:9E:10:E5:F7:19:CC:F2:83:6D:EF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01963935D30E85DF63CF9C0715FAC6004776
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zNbC7i75DZ7Qv54Q5fcZzPKDbe8.roa
Signing time: Tue 15 Apr 2025 11:29:10 +0000
ROA not before: Tue 15 Apr 2025 11:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 85.202.203.0/24 maxlen: 24
2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:35:d3:0e:85:df:63:cf:9c:07:15:fa:c6:00:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 15 11:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd6c2ee2ef90d9ed0bf9e10e5f719ccf2836def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:3b:f4:99:35:b1:5d:36:6a:54:d7:83:72:
92:b9:1e:d0:9e:d1:69:c3:b7:20:2c:c2:db:0a:08:
7b:17:db:73:07:44:95:45:d8:f7:3d:c2:be:f6:42:
fc:75:af:c1:6e:b5:73:81:1b:f1:d3:9b:d7:48:09:
2a:0e:26:5e:67:df:94:92:14:49:b8:ed:93:bb:2e:
22:a9:db:13:33:ec:3e:3a:91:0f:85:4c:15:89:8a:
1d:23:f4:16:ee:e3:7a:4a:05:a1:b8:75:94:63:89:
2a:82:62:c1:0b:0c:31:d8:eb:43:c1:c2:37:b1:d0:
59:81:2e:fc:51:34:51:6e:e6:73:bf:2d:eb:f0:3d:
4b:3a:24:19:ea:45:15:f0:88:f6:66:79:aa:de:b8:
c6:e7:77:5a:a0:55:06:8b:69:5d:8a:3c:75:3b:60:
a0:e8:05:1b:d9:88:96:3d:31:41:43:e2:d9:37:46:
d3:97:05:3e:1f:5b:54:ba:59:83:3c:04:09:de:08:
9b:61:26:83:2d:28:b2:6e:67:1b:af:1c:4a:63:c6:
b0:ce:d0:f5:eb:19:da:28:a5:c1:78:e5:9f:0f:e8:
b8:fb:5e:81:b1:23:c7:f3:81:72:9d:d9:ef:ea:bf:
f5:e6:09:b2:19:31:98:17:95:33:d5:6d:a4:30:f8:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:C2:EE:2E:F9:0D:9E:D0:BF:9E:10:E5:F7:19:CC:F2:83:6D:EF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zNbC7i75DZ7Qv54Q5fcZzPKDbe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
08:e2:ff:dd:27:2f:65:c9:a2:eb:5a:f7:d4:be:6a:fa:18:48:
9e:41:7e:c0:f0:fd:82:12:56:29:59:b1:df:68:d4:f8:74:35:
23:e6:89:96:27:d3:d8:57:ac:89:1d:8d:21:3a:5e:47:8b:6e:
9d:30:8f:2d:8b:5e:3d:9b:64:94:8a:bb:b7:c9:e0:52:e2:ec:
98:53:1d:86:1e:5a:71:b8:92:d4:c2:66:c8:6a:d5:b3:47:c0:
17:44:dc:b7:df:80:7d:9e:ab:a2:f5:47:ae:07:2b:9c:87:7f:
b0:02:23:a0:08:7d:79:c6:29:97:e6:46:c5:38:5c:5f:cc:85:
63:95:e9:1e:88:10:7a:8f:d6:d5:cc:1b:be:49:21:bd:d1:87:
67:1e:5a:30:7f:92:8c:cd:1e:58:31:e6:33:29:6a:46:a7:15:
38:62:4a:58:31:01:b2:2f:84:b1:22:80:db:14:02:82:cc:9e:
06:48:d6:b1:42:c8:f8:7a:29:4b:4b:31:cb:44:a1:a8:ba:16:
46:89:bc:17:eb:4b:62:ed:f6:88:bb:66:35:5a:e1:59:24:eb:
41:48:18:af:75:a2:f5:52:dd:be:78:11:ef:1a:0b:50:24:aa:
d5:c9:dc:f7:e1:66:0f:82:a3:5d:5b:15:19:b2:54:43:3c:82:
c7:7c:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:19 2025 by rpki-client