Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZhUy_k5L6JItWU-BH4wSnhWOWaY.roa
File: ZhUy_k5L6JItWU-BH4wSnhWOWaY.roa (raw, json)
Hash identifier: XFy75Oxpy6qH/wjYftX9sq3Nnb+mwb1qdkhuxGw1xN8=
Subject key identifier: 66:15:32:FE:4E:4B:E8:92:2D:59:4F:81:1F:8C:12:9E:15:8E:59:A6
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019885DC01C14ECCFC0DF9DF4AC293661F12
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZhUy_k5L6JItWU-BH4wSnhWOWaY.roa
Signing time: Thu 07 Aug 2025 18:47:24 +0000
ROA not before: Thu 07 Aug 2025 18:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 212.116.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:dc:01:c1:4e:cc:fc:0d:f9:df:4a:c2:93:66:1f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 7 18:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661532fe4e4be8922d594f811f8c129e158e59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:13:6d:2a:53:41:ef:67:ab:31:6f:5e:5d:
58:de:c4:c0:05:aa:61:76:87:1b:13:06:48:6b:43:
25:dc:b4:ec:b7:58:a2:4f:b3:0d:2e:7b:aa:0f:62:
ff:04:19:27:29:4a:ac:ee:b3:d7:40:f0:55:4d:05:
3e:83:80:a4:4a:9e:fe:92:e2:b3:f1:b4:46:93:27:
84:f0:e8:a2:95:b4:d2:1a:3d:80:ca:94:57:00:a7:
49:ff:2c:23:ff:85:4a:81:6a:7d:fb:82:cd:7c:35:
d6:35:15:7f:fd:be:30:f3:ec:7c:1c:ff:70:c4:c6:
70:f9:23:12:a1:55:95:79:fc:ce:02:97:6f:7f:df:
c2:9d:18:95:4c:ad:81:db:dc:84:bb:4e:f5:15:50:
cb:83:28:eb:3c:43:7a:5e:19:0d:f1:9b:27:d6:45:
48:a4:f0:2f:28:fc:c2:9a:67:e1:36:ba:9d:a0:f1:
87:32:24:09:e0:f8:3c:ff:33:b2:74:7a:e3:74:ba:
88:de:c5:88:52:62:d7:4c:4c:99:5c:cd:1d:05:dc:
2b:4b:b8:cc:b5:f5:ba:de:21:35:ae:d2:6c:a8:fb:
a3:b6:c1:4d:0c:7e:bb:ca:4f:56:7b:1e:d7:87:e1:
7c:5a:8c:5d:8d:07:2d:c2:62:5e:2f:73:76:ed:62:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:32:FE:4E:4B:E8:92:2D:59:4F:81:1F:8C:12:9E:15:8E:59:A6
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZhUy_k5L6JItWU-BH4wSnhWOWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:29:00:30:7e:c0:eb:c6:f8:ac:42:d5:d2:87:31:d2:d5:c7:
65:a4:6d:11:08:6b:34:93:e4:11:c2:e0:45:14:a8:40:da:16:
26:2b:e9:3e:1f:2b:a3:ea:18:5a:65:96:8a:b9:8e:b6:f7:5d:
79:37:18:aa:ea:40:f6:50:cd:9b:fd:d9:88:9e:a1:3f:e2:cc:
c7:1b:72:8a:4e:4f:fe:b6:88:9c:48:b5:a0:44:c5:08:07:47:
e0:0c:02:5e:b0:df:64:7b:d0:97:dd:70:d2:6c:51:77:e7:10:
20:4b:cb:53:d9:de:6f:ea:91:06:60:90:9d:d5:1f:5e:8f:be:
76:c6:d4:c6:95:49:5f:93:b0:ae:d7:c3:9a:fc:46:dd:ac:af:
1d:ef:6f:59:73:f0:36:0d:d6:a0:87:46:c1:94:22:d1:0d:87:
1d:47:57:4b:a0:ba:d0:03:d7:d3:65:db:8a:55:75:74:57:0e:
33:b4:37:41:f4:28:f0:09:7d:6c:9c:32:b6:b2:5e:f2:28:b8:
0e:35:ad:3f:b9:fc:e2:92:eb:3b:0b:24:70:ba:16:17:b0:32:
7d:60:7e:34:18:5c:29:5a:1b:3c:b5:93:3a:d3:69:0e:3a:8d:
e4:1e:83:db:f8:33:b0:84:be:82:4b:e6:09:45:32:1c:eb:3a:
8d:ab:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:34 2025 by rpki-client