Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/ZQ_LRmwNZ1BIk0LVLv6QE5ADZjE.roa
File: ZQ_LRmwNZ1BIk0LVLv6QE5ADZjE.roa (raw, json)
Hash identifier: UwXWOO5wJ2dIiDhF/fwtVEvbn5ihhsplExA1a1SD1Lc=
Subject key identifier: 65:0F:CB:46:6C:0D:67:50:48:93:42:D5:2E:FE:90:13:90:03:66:31
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 01961593D489D5C7D51DCC845DAAACD971C7
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/ZQ_LRmwNZ1BIk0LVLv6QE5ADZjE.roa
Signing time: Tue 08 Apr 2025 13:25:31 +0000
ROA not before: Tue 08 Apr 2025 13:25:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.60.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:93:d4:89:d5:c7:d5:1d:cc:84:5d:aa:ac:d9:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Apr 8 13:25:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=650fcb466c0d6750489342d52efe901390036631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:32:1f:6f:b8:b5:a2:3e:c7:d7:4c:33:04:
c8:f8:a3:76:e0:02:7b:7d:2b:82:fe:0c:0c:c6:82:
ec:a2:3d:0b:d4:5b:93:a8:9a:2e:25:a7:d0:db:30:
6b:19:aa:6d:64:2e:98:28:dd:6d:4a:b3:c8:b7:70:
36:d3:47:31:32:5f:54:47:65:a9:18:53:8c:27:0b:
63:43:58:5c:c7:3d:de:2b:76:2a:09:85:18:9c:d3:
01:45:3b:69:4a:47:f1:3b:31:c3:ce:2d:de:2b:85:
ba:f8:77:10:f3:ca:c8:62:46:56:07:11:a7:2f:45:
a8:0f:b7:18:40:59:d0:76:3c:f2:99:47:63:c4:2b:
9b:64:5c:2a:5d:45:00:98:7d:54:2a:09:82:5b:fa:
f9:85:03:7c:62:4e:54:af:f8:9a:15:4f:35:66:54:
58:6d:49:95:ff:b4:bc:a4:b2:bf:79:bd:ba:f0:ce:
24:14:53:cc:c6:46:0e:4b:17:8d:e4:be:ff:cc:4e:
13:f7:f6:cb:ec:f2:b0:44:33:4a:f4:3e:2d:73:a1:
29:f3:3e:27:30:11:d9:eb:37:e3:d3:40:57:4f:c0:
dc:0f:1b:9c:5f:60:1a:20:8c:a0:9c:4f:26:4a:3a:
5d:76:7b:ae:3a:85:ec:e0:1f:f8:86:52:d7:c1:d7:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:CB:46:6C:0D:67:50:48:93:42:D5:2E:FE:90:13:90:03:66:31
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/ZQ_LRmwNZ1BIk0LVLv6QE5ADZjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:de:18:3e:b1:0b:3b:8c:4b:8e:16:66:81:5b:a1:5f:1c:42:
1d:05:7a:bd:cc:57:16:f6:fe:1a:36:cf:5c:54:c8:cb:96:dc:
cc:2e:20:34:f1:f9:ab:64:4d:83:c4:cb:60:31:19:b9:ca:53:
94:19:f5:7f:4d:96:e5:e2:f3:75:6b:0f:39:01:96:3f:53:1f:
b8:ab:6c:ef:d8:65:65:a0:b8:b5:eb:f1:61:1d:27:aa:14:f8:
58:8e:e8:35:f3:66:73:45:cd:15:c3:37:89:f4:f0:1d:24:1b:
90:d1:f0:20:5c:2b:45:eb:43:80:fb:5d:9b:ad:be:c7:51:89:
5f:60:d5:d4:e9:e1:0d:55:e1:61:6d:73:c6:bf:86:95:24:fe:
a0:7f:08:69:dc:86:6c:5c:e8:8b:b2:47:ba:b9:63:ba:10:1a:
e1:89:65:b5:66:85:29:ba:87:a4:da:45:6f:45:a2:59:71:dd:
f3:da:50:f5:f3:9e:8a:fb:3d:89:12:6e:62:ef:68:26:16:d8:
dd:ba:f0:9a:df:77:24:9e:83:96:85:da:3e:f5:db:56:17:93:
ee:14:6b:83:c7:aa:ad:f6:51:74:db:49:ff:c1:af:54:bf:2f:
2d:dd:11:9a:15:51:67:92:d2:93:08:2e:23:02:26:2c:e6:29:
ba:e8:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:17:47 2025 by rpki-client