Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZViEJUena9no3k6Ae1_F2TCUJ1s.roa
File: ZViEJUena9no3k6Ae1_F2TCUJ1s.roa (raw, json)
Hash identifier: 9w7jEI95jS2WRSJaPLFBNXTWhCP7KfI5YnDHB0UiSYE=
Subject key identifier: 65:58:84:25:47:A7:6B:D9:E8:DE:4E:80:7B:5F:C5:D9:30:94:27:5B
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 0196B53A797A69F646A9754F3DC6F2214721
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZViEJUena9no3k6Ae1_F2TCUJ1s.roa
Signing time: Fri 09 May 2025 13:27:10 +0000
ROA not before: Fri 09 May 2025 13:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207137
IP address blocks: 185.135.45.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:a::/48 maxlen: 48
2a13:240:b::/48 maxlen: 48
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4600::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
2a13:240:4a00::/40 maxlen: 40
2a13:240:4b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:3a:79:7a:69:f6:46:a9:75:4f:3d:c6:f2:21:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: May 9 13:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6558842547a76bd9e8de4e807b5fc5d93094275b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:74:02:a3:c7:fe:27:3b:f5:8c:20:26:f4:
dd:96:8b:60:33:e7:dc:c0:6b:33:23:09:9f:7f:ae:
d2:e1:4a:e8:4b:2e:1a:a4:87:79:83:a8:18:e5:56:
a7:6b:9e:6a:31:2c:92:9e:71:2a:05:2f:ea:3f:53:
b0:fd:3f:2c:92:17:0e:02:00:c5:e3:4d:3a:62:8b:
34:42:6b:7c:76:6d:4d:30:0a:0b:cf:5e:e6:cf:d5:
80:d5:04:11:4a:3d:1e:d5:34:2f:9e:36:5a:e4:69:
fe:db:8c:7c:27:83:58:33:f3:05:b7:1f:23:ae:b4:
aa:74:a9:df:bc:bd:f4:72:10:ca:ba:0a:9c:25:52:
c2:a4:6f:b6:38:81:ec:cb:f1:6f:e5:89:fe:bd:03:
95:ff:fb:04:18:8e:6c:83:b6:f3:3f:34:82:12:13:
03:8c:c8:07:7b:db:46:07:08:1c:06:98:b9:1d:1c:
b8:f2:f0:3a:f8:ae:6d:f1:59:a6:c1:25:70:de:f3:
a8:4c:f2:a1:b3:c7:13:b7:36:9d:8f:77:d2:a2:7f:
c2:79:e0:ab:d5:84:ff:19:26:59:49:06:86:1b:ad:
24:aa:46:81:2c:98:9f:98:37:4b:56:e1:6d:28:d6:
4a:93:da:ab:07:a0:99:81:c9:26:e5:3e:71:9d:c5:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:84:25:47:A7:6B:D9:E8:DE:4E:80:7B:5F:C5:D9:30:94:27:5B
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZViEJUena9no3k6Ae1_F2TCUJ1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.45.0/24
IPv6:
2a13:240::-2a13:240:b:ffff:ffff:ffff:ffff:ffff
2a13:240:4200::-2a13:240:4bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:99:69:76:e5:45:b9:92:73:89:f5:80:90:24:fa:08:e3:45:
14:ce:86:72:6b:50:48:be:04:fb:3b:33:62:3b:8b:a8:bf:bb:
78:38:5c:f9:ef:75:fd:26:63:49:f9:b0:b9:6d:93:45:64:f7:
c9:de:ef:6a:01:6a:70:4c:4c:19:76:9a:77:08:fa:f9:0c:47:
0b:58:f8:d1:2f:ae:bc:d0:69:b7:40:a5:1c:6f:77:28:ef:d1:
99:cb:2b:ef:b3:ad:12:68:c8:02:a6:7b:78:ec:e0:bd:02:b4:
4e:19:e4:b8:fa:36:34:46:40:ee:94:4f:63:79:3c:25:d8:e0:
ea:c7:63:c4:39:b8:0b:11:96:55:1a:48:34:ee:88:f7:57:c2:
52:19:41:0b:f9:58:cd:84:3a:71:be:0a:02:e0:a2:96:19:1c:
40:2d:fe:4d:8b:84:f7:24:33:ef:a9:ec:64:82:3a:e3:90:dc:
7c:55:d6:6a:10:8f:8c:18:fa:11:b4:a2:d6:d1:f8:37:65:2e:
11:af:b1:68:b6:16:6c:3c:91:08:eb:95:08:69:22:8e:2e:18:
52:cf:c0:a6:42:3d:cb:ad:63:92:45:0c:f8:6a:8b:b8:90:6a:
af:54:09:c6:aa:81:14:6e:ef:fc:9c:6a:fa:7e:63:5e:b2:93:
55:d5:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:58:09 2025 by rpki-client