Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa
File: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (raw, json)
Hash identifier: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=
Subject key identifier: 66:98:C3:40:BE:27:B0:5C:39:43:3B:C7:D0:6D:EB:D9:AD:46:36:59
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01975A663869AACC6CE983B7F292B2E8C8C1
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa
Signing time: Tue 10 Jun 2025 15:12:17 +0000
ROA not before: Tue 10 Jun 2025 15:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6823
IP address blocks: 213.146.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:66:38:69:aa:cc:6c:e9:83:b7:f2:92:b2:e8:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jun 10 15:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6698c340be27b05c39433bc7d06debd9ad463659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:a3:66:e3:b0:1a:11:40:b8:dd:8e:df:1a:
84:be:e6:73:fa:57:21:d5:e6:cc:7c:c1:73:47:29:
c7:26:f5:07:bc:43:ec:3a:a2:6a:86:12:60:e4:f6:
dc:7b:08:3d:0f:cb:94:7d:fb:53:67:92:67:b8:af:
33:6c:98:11:d5:f5:a3:91:76:c5:a0:8c:b6:d4:ab:
f7:44:82:01:20:e2:39:d6:3d:30:09:c2:5d:01:10:
76:73:cb:d2:5d:31:30:74:3a:f6:c3:7a:9a:2a:49:
ff:85:5e:c8:32:33:69:2d:af:07:48:6a:e9:2b:1a:
32:eb:8d:6b:aa:be:82:28:8f:a1:89:8c:dc:34:d2:
af:35:8f:da:f9:92:0b:3c:b6:5f:8d:cb:34:c1:2b:
ff:bc:df:a6:9d:71:79:41:f4:0b:f5:42:0a:7f:d3:
32:3a:1d:41:3e:88:30:0e:c3:32:6c:aa:bb:b5:82:
b7:e7:ee:f5:02:bb:87:c0:a4:65:b8:f3:30:88:9d:
d7:37:27:e0:69:0f:f3:c0:e8:fe:4a:54:81:fd:2c:
36:0f:59:66:27:f3:12:a1:8a:78:50:bc:49:d0:62:
97:da:34:53:cb:92:3c:46:c7:80:eb:94:61:39:73:
4e:54:c5:83:8f:15:f2:6c:25:2a:36:b6:f3:ad:cf:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:C3:40:BE:27:B0:5C:39:43:3B:C7:D0:6D:EB:D9:AD:46:36:59
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:eb:fd:57:30:d0:39:89:05:ee:b7:5b:53:cf:4a:93:60:32:
33:3f:0e:30:f7:7a:98:1a:66:75:f6:68:54:dd:e3:af:ff:d8:
71:02:56:b4:a8:f8:8d:55:13:a1:40:6f:a0:d3:84:0c:c2:f9:
2d:dc:36:5c:00:4a:21:cd:18:2d:59:3d:ec:b9:27:95:79:d0:
83:1d:a4:5b:21:24:8e:da:79:38:89:db:b4:6c:8c:4f:8e:9c:
56:5b:0e:1f:d3:b2:63:30:8c:9a:19:69:7f:29:eb:89:84:a9:
d6:6e:53:dd:74:92:bb:35:4e:c4:4a:67:1a:4d:02:db:fe:8e:
b2:aa:10:ab:89:40:d8:b9:2f:58:b7:b7:8f:2a:3e:ed:4a:2f:
b2:6c:e4:4b:30:16:08:de:b0:16:56:d6:da:00:13:d7:84:81:
4e:cb:fc:da:17:21:e0:58:4f:ea:b9:9a:9e:3a:2b:c6:74:e2:
35:80:f0:a4:05:ac:79:61:ac:86:19:87:ed:b5:c1:43:6a:ef:
0e:40:e4:ca:0f:22:ca:b5:86:d6:54:5b:11:a5:6b:d4:14:31:
ce:e0:fa:b1:09:66:df:a2:2d:b8:0e:4b:b0:7a:6f:ea:d6:74:
23:0c:dd:09:70:db:96:af:5f:90:78:50:19:60:ef:07:1c:90:
33:6b:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:52:34 2025 by rpki-client