Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zTJ0Zc8EuuuN7sHNqsA3ie_3zG4.roa
File: zTJ0Zc8EuuuN7sHNqsA3ie_3zG4.roa (raw, json)
Hash identifier: 9iUCrrgkSPKOe2G8HKh0gRbrV9rMqC/6bH9Fwg1cOv0=
Subject key identifier: CD:32:74:65:CF:04:BA:EB:8D:EE:C1:CD:AA:C0:37:89:EF:F7:CC:6E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019686570056F341287F78EF2187C26C1504
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zTJ0Zc8EuuuN7sHNqsA3ie_3zG4.roa
Signing time: Wed 30 Apr 2025 10:56:10 +0000
ROA not before: Wed 30 Apr 2025 10:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.70.0/24 maxlen: 24
45.85.107.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
185.165.45.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
194.5.83.0/24 maxlen: 24
194.61.40.0/24 maxlen: 24
194.61.41.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
204.75.229.0/24 maxlen: 24
220.158.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:57:00:56:f3:41:28:7f:78:ef:21:87:c2:6c:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 30 10:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd327465cf04baeb8deec1cdaac03789eff7cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:7c:eb:58:8e:52:8e:bb:0a:0a:2f:bd:92:
41:6e:5b:ee:78:53:f1:08:bc:00:41:06:57:9d:8d:
06:3e:23:41:52:20:12:18:78:a9:bd:6d:bb:e8:94:
90:f0:ed:37:95:bd:09:a6:2a:e7:1a:63:39:06:6b:
ca:b7:dd:e7:85:a9:70:0d:36:c8:d5:ec:95:d5:e3:
83:68:83:f8:24:96:d1:6e:85:09:86:2a:ca:ad:a6:
0e:e4:d8:c1:8d:1e:b1:5a:e7:eb:15:2a:49:f3:db:
25:e0:42:50:7d:d4:88:96:00:1d:16:fe:c6:7a:12:
9e:4a:ed:f6:08:3e:0a:3b:1f:52:3d:59:44:dd:0f:
42:77:c8:f4:79:aa:8f:20:c1:0b:07:70:e0:13:b8:
75:94:9e:11:e5:16:13:b3:f1:7b:67:5b:a4:70:9c:
fd:ea:0d:c9:46:a8:89:a2:a4:04:f5:ea:45:0b:7a:
d8:f7:4d:5c:ed:fa:7e:1d:2b:fa:a5:aa:a0:9f:c8:
49:d2:e1:86:60:b4:6c:6a:a6:16:b3:41:bb:de:3b:
fb:da:20:b6:4b:e3:99:28:9b:4b:14:13:33:74:14:
41:a5:5b:84:fc:f4:66:b4:19:ce:c8:df:d7:6f:0e:
ba:3d:75:5e:14:6d:6b:01:3e:e8:a4:92:bf:56:27:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:74:65:CF:04:BA:EB:8D:EE:C1:CD:AA:C0:37:89:EF:F7:CC:6E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zTJ0Zc8EuuuN7sHNqsA3ie_3zG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.85.107.0/24
45.130.202.0/23
45.133.4.0/22
89.34.126.0/23
185.165.45.0/24
185.245.7.0/24
188.213.202.0/24
194.5.82.0/23
194.61.40.0/23
203.25.124.0/24
204.75.229.0/24
220.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
57:77:42:c9:f5:52:4f:34:74:a6:d5:dd:9b:3d:fa:0e:a3:c7:
f4:95:8b:cb:cc:fc:b6:0d:41:2b:ba:be:df:f4:ec:24:9e:1a:
81:0e:59:f8:b6:20:5f:51:3e:d5:03:2b:c1:81:e7:58:26:27:
d2:05:27:e5:2d:1e:80:96:1c:f0:98:81:2c:6d:76:84:f0:eb:
cf:7d:46:c1:28:77:c6:b2:00:8b:61:c4:18:72:23:f8:83:38:
ca:40:eb:bd:94:ef:bc:05:2e:d9:13:f3:dc:7d:6f:ff:6d:56:
fd:17:e2:55:32:5b:52:86:59:98:54:c9:f8:87:ad:d7:73:dc:
04:e9:a1:64:74:ce:52:6a:57:e0:6b:51:03:43:b1:a4:28:80:
74:4c:86:54:63:83:8a:75:a7:42:e6:2b:8e:91:e6:4c:3a:d8:
a5:bb:0c:49:71:8a:62:4f:ed:ad:fd:2e:52:c7:cd:b1:da:1f:
8e:d4:1d:3b:c1:b5:d7:be:f3:fd:32:b1:da:57:88:28:31:41:
b2:e0:aa:a7:87:d5:26:c1:24:e5:21:d3:2e:32:e5:27:c0:64:
f1:a0:57:f4:b0:d0:12:0b:63:60:7b:77:1a:dc:96:f9:10:3c:
23:25:f7:84:0e:f3:3d:d5:79:fd:71:1a:ee:db:35:ec:64:04:
a9:d6:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:16:38 2025 by rpki-client