Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cz3J00GDAGDueWXPe_xRj5cFv2I.roa
File: cz3J00GDAGDueWXPe_xRj5cFv2I.roa (raw, json)
Hash identifier: tKJWzH526DBUObRoMJUkTrA5LepSTXjFOeoKdlWF3YM=
Subject key identifier: 73:3D:C9:D3:41:83:00:60:EE:79:65:CF:7B:FC:51:8F:97:05:BF:62
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01976E46B7D398271EB9B25B4AA90F3123FE
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cz3J00GDAGDueWXPe_xRj5cFv2I.roa
Signing time: Sat 14 Jun 2025 11:50:17 +0000
ROA not before: Sat 14 Jun 2025 11:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:46:b7:d3:98:27:1e:b9:b2:5b:4a:a9:0f:31:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 14 11:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733dc9d341830060ee7965cf7bfc518f9705bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:c0:b1:e8:46:02:b8:60:2d:2b:db:58:49:
64:14:37:55:53:f1:c5:27:f4:64:e7:9d:f8:75:eb:
85:62:b2:76:02:39:f8:29:e8:ab:e1:1f:2b:d1:5d:
7a:ad:44:d6:23:61:1f:94:d0:83:9e:66:b3:23:f0:
00:2c:0c:f8:b5:48:45:98:52:a1:66:90:cd:11:26:
c8:10:11:a1:a9:fa:8a:96:c4:e7:b3:79:3f:a0:3d:
4f:a1:06:f4:6a:50:67:3e:42:7f:b4:09:3c:fc:2b:
32:0f:86:60:04:a1:58:0c:07:94:9f:96:fd:86:29:
f3:af:a1:44:10:ab:b3:7a:3f:eb:05:54:15:6b:61:
b9:ce:15:7a:3c:a0:d1:27:bc:49:f5:f6:a6:88:25:
f6:a9:9d:80:81:c0:71:5d:c9:df:b7:0d:f1:7a:20:
f8:fa:61:81:8c:df:0e:42:2f:00:b3:c5:a4:c1:70:
fd:74:06:1c:7d:cf:1b:00:29:95:20:08:f3:bb:66:
9e:2a:85:42:97:76:35:de:99:8c:cc:fe:bd:12:e1:
f2:21:be:9f:1c:69:65:3f:74:1a:aa:a8:54:0b:51:
21:14:fa:8c:a2:8e:0e:d1:d5:57:52:ef:4e:b8:4d:
b7:2f:7b:9a:81:4e:9e:8b:f5:f1:b0:cd:f7:72:69:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:C9:D3:41:83:00:60:EE:79:65:CF:7B:FC:51:8F:97:05:BF:62
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cz3J00GDAGDueWXPe_xRj5cFv2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.112.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:6e:1a:41:d6:bc:a6:7a:1c:6c:e5:a3:2a:58:d0:93:18:6a:
0a:cb:7c:75:ef:af:2b:47:21:31:fb:13:6c:cc:3b:da:12:b9:
fd:2e:3d:73:80:8b:db:40:14:06:f3:64:73:c1:59:e1:cf:61:
cc:53:76:89:a9:be:b9:4f:9a:80:48:b5:d1:e5:31:ca:43:e6:
00:f0:dd:2d:8e:b1:75:47:a1:e0:77:bf:9a:9a:54:83:03:1b:
08:3c:4f:fd:a7:a6:44:7a:ec:ac:8f:15:ca:85:38:0d:6a:2c:
4a:f0:38:a3:a1:18:4e:ca:f9:15:ae:20:c5:b2:4d:eb:d8:7d:
66:c3:68:a6:d9:ad:76:8b:cc:fe:6d:5f:6e:14:81:80:d0:e3:
6a:1d:f2:e9:1b:cb:04:e0:58:6a:ff:e5:7d:ef:65:78:6f:b7:
c6:50:1d:6e:d0:79:a7:52:1c:8a:be:fa:18:3b:b7:5a:50:e1:
5c:c6:38:19:3f:6d:e8:76:02:d5:62:9d:f2:15:45:4e:d1:c3:
f2:de:26:74:5b:85:94:f2:d2:ad:68:6d:3b:2d:5a:04:2b:57:
9a:ee:bd:63:8b:fb:7a:52:4d:c5:e2:1c:dd:83:e6:e6:f8:c9:
15:d4:f8:4d:9c:30:a3:3a:68:ca:a5:5d:83:ac:a0:26:93:95:
51:f8:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:22:05 2025 by rpki-client