Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/85tLColHz2gs1kcjcHIOLXPmYtQ.roa
File: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (raw, json)
Hash identifier: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=
Subject key identifier: F3:9B:4B:0A:89:47:CF:68:2C:D6:47:23:70:72:0E:2D:73:E6:62:D4
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 0197568FDB906001CE22307BB87491F16BD5
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/85tLColHz2gs1kcjcHIOLXPmYtQ.roa
Signing time: Mon 09 Jun 2025 21:19:17 +0000
ROA not before: Mon 09 Jun 2025 21:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 62.102.148.0/23 maxlen: 23
62.102.151.0/24 maxlen: 24
78.108.48.0/21 maxlen: 21
91.190.136.0/21 maxlen: 21
176.56.240.0/20 maxlen: 20
185.170.180.0/22 maxlen: 22
185.204.144.0/22 maxlen: 22
2a00:1520::/32 maxlen: 32
2a02:2490::/32 maxlen: 32
2a0b:b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:8f:db:90:60:01:ce:22:30:7b:b8:74:91:f1:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jun 9 21:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f39b4b0a8947cf682cd6472370720e2d73e662d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:62:65:8f:00:fa:9f:82:71:96:99:2d:55:
0e:b0:9a:fc:af:66:af:4c:cf:e2:17:7a:75:aa:70:
7b:51:3b:5e:be:ca:e7:94:8f:2e:d0:67:76:60:66:
61:0a:a2:5a:a5:f7:57:fb:48:33:43:ff:26:69:0d:
24:b3:ae:a8:a5:70:3b:4e:7c:a9:0e:4b:ec:24:04:
7c:65:fa:fa:6a:d4:a4:92:38:d6:a7:70:84:a7:99:
50:98:49:1a:61:ad:fa:bf:fa:f3:b1:96:f4:a7:e5:
1d:b6:72:d5:1e:e1:70:36:18:fe:a2:27:22:dc:bc:
ee:e1:57:88:04:67:3d:27:3a:ea:86:df:e1:44:b6:
20:d4:24:46:08:73:99:c5:71:ba:d8:4b:2f:e9:81:
72:36:3c:a2:7b:a9:1c:db:97:08:76:1e:39:57:8a:
45:74:0f:0b:c2:6c:c3:54:07:f1:d8:69:5f:ae:2a:
da:91:96:80:5b:aa:d3:fe:0a:fd:36:68:59:12:89:
40:4c:81:1a:74:0d:d0:3e:96:ed:d9:91:6c:5e:9d:
78:61:35:4c:8d:6d:11:68:11:e2:30:d5:c3:0c:fe:
6d:9d:37:91:25:84:46:df:7a:3c:aa:1a:12:51:3e:
fa:ff:59:94:99:4e:10:73:39:14:1b:5f:88:a7:c7:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:4B:0A:89:47:CF:68:2C:D6:47:23:70:72:0E:2D:73:E6:62:D4
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/85tLColHz2gs1kcjcHIOLXPmYtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.148.0/23
62.102.151.0/24
78.108.48.0/21
91.190.136.0/21
176.56.240.0/20
185.170.180.0/22
185.204.144.0/22
IPv6:
2a00:1520::/32
2a02:2490::/32
2a0b:b40::/29
Signature Algorithm: sha256WithRSAEncryption
52:cb:0d:b2:05:df:f8:31:8e:4b:d0:78:9e:6a:2b:81:5e:b3:
f1:8e:58:2b:5b:cd:f6:1b:9b:f9:35:f6:7a:19:35:4f:af:76:
91:38:60:f0:5e:b5:ba:12:87:f1:35:cc:53:9a:43:df:1c:53:
eb:51:4b:f7:6d:00:a7:8d:12:a1:29:bf:11:88:92:ab:85:ad:
ea:62:5e:55:ab:40:80:c9:bc:e2:4d:16:db:50:fe:79:61:b9:
4d:ff:72:f6:37:38:1d:bc:7c:57:c0:53:58:7c:70:11:1f:51:
f0:ed:df:2b:f2:66:b9:e3:1b:a5:8c:1d:41:c4:7d:6f:51:2f:
d5:ef:70:2d:5a:3d:64:4b:88:37:cd:51:80:96:04:6a:6d:58:
81:c4:13:ba:2b:6f:6d:15:a8:e8:1d:60:60:84:cf:16:dd:59:
8a:9d:72:81:ad:e0:21:33:2e:8e:c9:31:fb:62:1a:a9:b5:6d:
bc:fb:0e:31:38:52:b3:43:e5:3b:e9:a1:e0:ef:e3:25:52:7f:
e6:94:33:3a:3d:3e:9c:ca:ca:86:13:f4:9c:84:f2:60:67:e4:
1e:b9:a7:cb:db:07:01:5e:5a:6e:c0:52:ab:d9:8b:c4:89:7e:
56:3e:60:45:f1:1a:d5:4b:be:9c:3f:35:8c:b6:e4:07:10:a1:
b2:21:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:15:14 2025 by rpki-client