Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa
File: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (raw, json)
Hash identifier: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=
Subject key identifier: CF:14:25:EA:3B:C6:79:BD:5C:E8:85:45:8E:A6:15:2C:36:7A:D8:BD
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 0196E78DC5E7373014C56A8D99098D0DF385
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa
Signing time: Mon 19 May 2025 07:59:10 +0000
ROA not before: Mon 19 May 2025 07:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202293
IP address blocks: 88.151.118.0/24 maxlen: 24
91.229.148.0/22 maxlen: 22
91.229.148.0/24 maxlen: 24
91.229.149.0/24 maxlen: 24
91.229.150.0/24 maxlen: 24
91.229.151.0/24 maxlen: 24
195.245.96.0/22 maxlen: 22
195.245.96.0/24 maxlen: 24
195.245.97.0/24 maxlen: 24
195.245.98.0/24 maxlen: 24
195.245.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:8d:c5:e7:37:30:14:c5:6a:8d:99:09:8d:0d:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: May 19 07:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf1425ea3bc679bd5ce885458ea6152c367ad8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:a7:ad:5d:63:ec:27:40:dc:6d:8f:8f:98:
4d:73:a7:dd:2e:f0:ed:21:e5:a6:7d:91:b0:13:3c:
23:e9:40:f7:ba:e6:92:42:cf:62:99:96:9d:62:f5:
dc:25:47:55:75:b5:88:ab:d2:9c:0e:84:d8:b8:2d:
05:5b:b5:7a:89:59:f0:47:ff:68:5c:5f:9b:84:df:
f7:09:09:e6:74:a1:92:5d:44:11:89:b4:20:ef:c4:
7c:2b:54:47:9e:0f:b5:a8:4d:0e:07:00:21:e5:59:
0f:16:0f:50:07:54:eb:dc:9d:23:76:78:e4:07:ca:
03:b0:50:8b:92:00:83:3c:66:68:d0:f3:c3:4c:4f:
7f:3b:9d:e8:9f:3b:ae:8d:65:06:93:03:3c:69:e9:
83:2d:7b:b6:3f:ae:0d:f6:e5:5b:1b:5a:77:4a:f2:
f5:86:a2:3d:4e:eb:20:d9:86:eb:5b:2b:21:b3:96:
1f:3b:ef:9c:45:04:db:31:27:88:7b:c2:6d:52:6e:
ba:20:26:aa:2d:d9:35:16:5c:46:6a:7a:91:12:a6:
cf:35:9d:8c:86:03:0b:09:d2:21:9c:b0:38:1e:5b:
f0:2a:82:3b:fa:2d:0f:58:a9:82:f1:75:74:a1:eb:
f5:4f:c3:25:33:7f:23:0e:c7:21:da:70:c8:7e:ac:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:25:EA:3B:C6:79:BD:5C:E8:85:45:8E:A6:15:2C:36:7A:D8:BD
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.118.0/24
91.229.148.0/22
195.245.96.0/22
Signature Algorithm: sha256WithRSAEncryption
18:6c:2e:74:54:d9:bb:0e:31:df:b0:11:ec:72:56:62:da:f1:
d4:0f:e3:e5:7b:80:00:6d:4c:af:ae:fc:28:93:5c:34:a7:72:
e3:f5:b3:42:5b:a8:d7:e5:2f:5d:ed:39:a9:80:97:be:2e:85:
4f:9f:e2:8c:2f:e9:9a:84:9e:68:1a:f5:17:9c:b7:94:96:43:
97:0c:41:5f:1b:b1:f0:f7:c0:42:f0:32:cc:23:41:24:6c:5d:
35:3b:30:06:05:9a:ee:f5:e2:37:87:32:0b:bd:cf:38:b7:f7:
ea:bb:02:d0:15:54:52:9a:10:9f:64:ec:9b:f0:6d:55:0e:6e:
ba:44:37:e7:3e:46:aa:ff:7a:4c:ab:9a:bc:12:76:68:67:6e:
80:99:10:3c:00:3f:b8:fe:21:4e:e0:21:f1:89:3a:aa:32:1b:
8a:84:f4:82:68:6b:0e:fb:d3:b8:65:93:0b:2a:86:04:3d:fe:
00:2f:d4:88:c4:29:c8:71:25:b4:fd:07:fc:ff:23:0f:68:9a:
08:b2:b9:d2:01:64:6b:b5:bd:e5:c1:9a:8b:6d:50:c8:2d:d2:
40:c1:a4:1f:05:f2:6b:27:a2:f3:23:b6:69:67:e0:ce:b8:14:
f3:33:dc:93:93:01:08:c1:a5:0e:1f:35:4c:37:c5:79:f6:84:
ba:3e:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:16 2025 by rpki-client