Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbeiDx6onIHmP1DUCejxBe7Nug0.roa
File: ZbeiDx6onIHmP1DUCejxBe7Nug0.roa (raw, json)
Hash identifier: oBQAb75jpQRNXGrKRoaG6HgjY0VOv6hvKXoXwUvBkPQ=
Subject key identifier: 65:B7:A2:0F:1E:A8:9C:81:E6:3F:50:D4:09:E8:F1:05:EE:CD:BA:0D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0197597FF611A4809BDD9F08A1AE4C7E4ED7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbeiDx6onIHmP1DUCejxBe7Nug0.roa
Signing time: Tue 10 Jun 2025 11:00:47 +0000
ROA not before: Tue 10 Jun 2025 11:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 45.129.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:f6:11:a4:80:9b:dd:9f:08:a1:ae:4c:7e:4e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 10 11:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b7a20f1ea89c81e63f50d409e8f105eecdba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:03:81:df:22:94:63:cb:f3:1f:39:09:43:
12:fa:29:d9:f8:f2:77:4d:96:71:ba:ce:6b:46:82:
85:e2:34:85:c9:0f:ec:20:f2:5e:a8:04:57:a9:8a:
8a:07:4a:3b:ab:6b:b7:8f:1d:90:6f:83:f5:5c:c6:
28:c4:23:0f:5f:66:a4:c5:e4:43:16:8c:8e:47:bf:
88:1f:17:b1:5c:01:d5:9f:f7:91:4c:1b:28:95:e4:
2a:ce:5d:56:42:b1:de:e2:cd:17:f1:47:17:d8:3f:
16:fd:79:98:2f:7c:2d:a6:17:f6:dd:54:b6:20:80:
04:f6:d0:fb:21:74:61:2a:45:03:5d:eb:11:f6:01:
bd:39:df:db:bf:32:dd:f0:dc:e9:1d:51:52:3e:2b:
5a:6e:fa:da:2f:48:73:97:09:82:9d:4e:16:2d:4f:
36:97:fe:21:1b:3e:bf:b1:21:30:6f:3b:74:f6:fc:
17:6f:c7:58:f3:8a:0f:45:4a:81:6f:78:73:77:f2:
00:90:fe:82:10:04:b3:11:ed:73:ae:0c:ef:9c:ac:
68:84:2a:c6:35:79:bd:85:28:c2:34:35:6a:76:f4:
45:9f:7a:54:53:d4:2d:86:a5:ce:d4:62:a9:2d:43:
75:64:ef:d0:4c:bc:e0:3c:cc:db:cd:dc:1d:19:f6:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:A2:0F:1E:A8:9C:81:E6:3F:50:D4:09:E8:F1:05:EE:CD:BA:0D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZbeiDx6onIHmP1DUCejxBe7Nug0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a9:5a:01:8b:f0:03:e0:eb:3d:36:bf:8b:f7:ac:53:57:18:
21:0b:22:5c:c0:e7:68:03:7a:3f:ef:2b:16:9c:20:da:7d:05:
ae:85:dc:b4:4a:1e:8b:ca:98:f2:bd:af:8b:b7:32:20:b5:a3:
16:23:4f:81:39:b6:d6:02:7f:90:57:d5:a3:ba:8e:6b:a2:3e:
af:c4:f7:36:02:e3:69:39:a5:98:02:7f:5b:c8:a9:01:a3:de:
52:78:53:a0:2e:8a:60:26:c1:75:8c:ad:86:9c:1c:7c:a6:52:
cc:3e:4b:e7:96:d5:56:18:c7:32:e5:1d:85:6b:b8:ab:1b:03:
4a:cc:4b:3f:4f:5d:fb:a5:51:af:5d:42:01:0d:7e:06:4d:76:
09:3a:40:a4:6d:50:fc:c8:a9:86:47:3d:90:87:2d:ab:58:63:
0e:8f:0a:8c:9d:15:59:e6:6e:2a:de:cb:c6:11:79:8d:67:77:
3d:b6:28:d9:36:e0:5c:82:53:4b:33:36:e0:09:58:38:87:87:
7b:d7:a5:60:99:a1:b8:ca:ea:e8:80:26:87:c2:a6:76:dc:26:
4e:56:a4:23:0d:e7:30:de:a2:d7:d8:b0:7e:53:69:54:04:ec:
16:c6:06:1a:a5:23:e2:75:77:4d:3b:60:b4:f8:12:41:36:92:
fc:51:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:38 2025 by rpki-client