Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/zORT1METPqqNBfYdoSZVGl7banI.roa
File: zORT1METPqqNBfYdoSZVGl7banI.roa (raw, json)
Hash identifier: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=
Subject key identifier: CC:E4:53:D4:C1:13:3E:AA:8D:05:F6:1D:A1:26:55:1A:5E:DB:6A:72
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 0197836314355A88A14EDB68017B374B3F59
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/zORT1METPqqNBfYdoSZVGl7banI.roa
Signing time: Wed 18 Jun 2025 14:13:17 +0000
ROA not before: Wed 18 Jun 2025 14:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 91.230.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:63:14:35:5a:88:a1:4e:db:68:01:7b:37:4b:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jun 18 14:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce453d4c1133eaa8d05f61da126551a5edb6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:f0:b9:3d:9c:38:9d:b0:15:05:04:e2:55:
70:77:67:e8:f9:5c:45:c3:14:02:cf:4b:c6:35:65:
99:59:67:c5:5c:f4:9a:aa:b0:ec:89:d8:f0:ff:5d:
0f:e9:3e:03:62:ce:c0:0f:1b:93:05:0f:f1:4b:48:
20:68:ab:10:40:4d:2b:bb:90:68:0d:32:55:d7:05:
28:19:02:c0:fd:a6:b6:0d:27:c5:7a:2d:72:1a:04:
e9:17:cd:65:9d:66:f0:8c:74:aa:c4:aa:af:9a:02:
19:0f:83:c2:07:41:b3:0d:92:08:5c:57:0d:f7:bb:
7a:31:44:d6:72:11:95:f8:c1:ee:3e:8e:73:85:42:
24:84:fd:c9:e4:aa:d1:76:ab:e6:71:b0:a3:4d:0c:
52:3e:ab:db:df:dc:5d:6e:df:10:49:75:e8:2d:9a:
48:1f:a8:b8:77:3d:7c:ba:4d:94:36:71:41:8b:a6:
e9:17:15:74:85:1c:f2:33:26:a9:5b:ad:f7:77:43:
bc:a6:0b:48:9a:47:28:f8:80:cc:dd:e3:9f:c2:d8:
ee:26:7f:70:42:56:57:dc:a4:33:1e:a8:26:bf:57:
90:b5:ee:1a:23:40:ef:07:ce:57:1e:e0:0c:83:25:
21:58:7a:5d:16:87:58:44:df:23:2f:1d:ad:16:68:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E4:53:D4:C1:13:3E:AA:8D:05:F6:1D:A1:26:55:1A:5E:DB:6A:72
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/zORT1METPqqNBfYdoSZVGl7banI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.94.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:e2:b8:45:77:6e:fc:2c:33:d5:15:e7:45:0a:4f:a1:40:
10:20:03:58:61:ab:7e:69:42:f4:52:b0:2a:02:50:da:0e:38:
32:33:0f:07:f7:af:3b:ba:d7:17:4a:09:ca:ca:35:82:2e:62:
64:17:d4:59:cb:f4:5b:e7:d3:29:20:6a:ab:6b:1a:e3:99:24:
59:68:c2:86:b8:61:2d:95:2d:b1:a3:8b:99:c5:6c:a7:fb:87:
2c:46:c5:80:32:f2:3a:4e:0e:d4:45:5d:53:9e:da:2b:ca:3c:
25:c8:8e:f7:34:be:0f:89:6a:33:84:74:f9:7f:3e:f1:f9:f7:
21:20:4c:17:eb:03:f3:3b:84:68:5a:c2:23:fe:7c:09:a2:9a:
12:27:cd:0b:b7:a3:a8:6f:d3:40:9c:cb:b2:f7:18:35:0a:a8:
9e:0d:69:bd:38:f7:da:3d:fa:fd:9e:12:43:45:07:d9:6c:e7:
e0:34:ba:0c:c6:9a:1f:ab:b9:32:a6:9f:8a:9c:50:c1:7d:af:
75:56:12:f3:93:b0:db:12:a3:7f:77:26:85:cf:b1:09:63:be:
3a:be:5a:33:13:97:95:e0:ec:26:e7:85:ca:cf:0d:73:42:3a:
a2:e1:60:52:96:4f:54:ca:36:16:62:c0:b9:e6:32:08:65:5c:
91:4b:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:01 2025 by rpki-client