Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/zrWwYbMwUkgEq1zB-74An6Zgrao.roa
File: zrWwYbMwUkgEq1zB-74An6Zgrao.roa (raw, json)
Hash identifier: 0ne8xPMwtTCJ/HLh2hHlmeoVFe/+GqB9X95WcDSMhFA=
Subject key identifier: CE:B5:B0:61:B3:30:52:48:04:AB:5C:C1:FB:BE:00:9F:A6:60:AD:AA
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 01975DA3AF26D59ED88DDEE17C4B75F7B149
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/zrWwYbMwUkgEq1zB-74An6Zgrao.roa
Signing time: Wed 11 Jun 2025 06:18:17 +0000
ROA not before: Wed 11 Jun 2025 06:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 91.217.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:a3:af:26:d5:9e:d8:8d:de:e1:7c:4b:75:f7:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Jun 11 06:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceb5b061b330524804ab5cc1fbbe009fa660adaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:af:8a:67:fa:fa:ad:1e:53:d6:4e:09:78:
83:1e:b9:49:60:5e:17:77:79:c4:54:ce:13:2a:2a:
43:ee:79:b7:b4:ce:6e:d2:7a:1f:44:6c:08:be:24:
d1:c6:2d:10:12:74:e7:54:02:30:96:d8:86:65:27:
19:42:9d:3a:8b:1e:30:5e:56:56:d3:75:9e:dc:7e:
68:4e:9f:13:8a:4d:36:87:db:4a:24:10:b1:27:7b:
36:63:44:c3:d1:e3:e6:e6:99:84:85:19:83:3a:4b:
4d:01:ef:5e:cf:c4:44:b7:5a:ef:e6:42:f0:9d:ad:
6c:ed:c6:51:82:69:f9:91:3c:ae:e5:0a:ab:21:96:
49:4f:d1:d5:9c:34:28:5c:cb:73:89:a7:b1:2b:1b:
ac:0c:38:0e:5f:76:77:76:c7:48:22:7b:85:64:0f:
2e:0b:b3:ac:0b:7d:2c:94:fb:33:62:4e:02:d2:53:
79:42:01:84:1d:08:3e:75:6b:bf:94:91:ea:66:4e:
39:68:31:8e:38:27:78:a6:ec:64:c4:de:2e:5f:d2:
52:ba:20:41:9a:60:a0:46:3e:3b:52:8e:f5:6e:34:
82:2e:82:51:11:17:02:33:93:96:13:27:d3:9e:0c:
62:92:68:71:ab:27:9b:06:03:ae:59:f6:1e:85:8c:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:B0:61:B3:30:52:48:04:AB:5C:C1:FB:BE:00:9F:A6:60:AD:AA
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/zrWwYbMwUkgEq1zB-74An6Zgrao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.241.0/24
Signature Algorithm: sha256WithRSAEncryption
94:33:2c:e1:0c:2e:08:27:cc:44:d9:2f:0e:fd:45:5c:c7:50:
66:16:4a:f8:e3:65:fb:3d:16:ec:18:38:17:50:3f:47:b1:05:
67:7f:8e:9b:e7:83:b9:3b:4b:9b:8d:f1:92:cc:44:f9:22:af:
b4:7d:fe:38:74:40:7e:5c:27:76:45:9f:85:6b:1a:e6:4d:69:
99:a9:99:10:79:2e:ce:c7:13:e3:96:5a:65:92:7b:f8:16:c6:
3c:bb:c2:e7:f9:4e:3d:e1:16:f1:93:52:28:77:07:86:76:ce:
cc:c3:7f:d0:3b:33:67:de:ea:d5:ef:ae:13:f2:12:2d:0a:a3:
e6:f7:b6:30:76:20:b1:69:95:c4:70:0b:cb:27:41:b8:48:e5:
b6:25:d9:1d:ac:f5:35:a5:0e:f8:4d:df:20:bb:90:9e:60:b8:
5a:59:d1:65:dc:b1:2c:52:3c:c4:f6:ed:e3:d5:d3:54:7e:8a:
f5:dc:a5:d6:da:a2:66:9b:0f:2d:f7:ca:04:3e:6c:fc:00:cb:
23:5d:a1:40:d2:c3:12:03:02:59:91:17:f4:3d:91:63:d9:be:
19:58:1c:ba:82:9b:b4:c9:ca:45:29:57:4e:9a:5b:ff:bb:79:
54:60:2a:73:c4:02:06:e7:89:7a:20:4a:b1:49:5f:b3:37:11:
cd:03:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:50:38 2025 by rpki-client