Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/zVUl367uAuWMVUPRoi840j0jiPg.roa
File: zVUl367uAuWMVUPRoi840j0jiPg.roa (raw, json)
Hash identifier: qS11jDGkCNzMKbCIBI9UQyUrb/zBjJR7FmPuRC9w0J0=
Subject key identifier: CD:55:25:DF:AE:EE:02:E5:8C:55:43:D1:A2:2F:38:D2:3D:23:88:F8
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0196D39EA07632537E0D2FEBBFFF29D6CAE2
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/zVUl367uAuWMVUPRoi840j0jiPg.roa
Signing time: Thu 15 May 2025 11:05:10 +0000
ROA not before: Thu 15 May 2025 11:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214297
IP address blocks: 185.241.72.0/24 maxlen: 24
185.241.73.0/24 maxlen: 24
185.241.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9e:a0:76:32:53:7e:0d:2f:eb:bf:ff:29:d6:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: May 15 11:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5525dfaeee02e58c5543d1a22f38d23d2388f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:13:6b:b3:9e:df:23:6b:6a:66:1e:4c:56:
14:ca:ac:b0:89:b9:1a:6b:80:f6:ae:2c:7c:39:e9:
f0:d3:d5:ea:19:56:af:fb:5f:8d:18:0f:6b:29:8c:
b6:eb:f5:9b:bb:1f:b5:62:4d:43:a8:14:44:a7:c0:
4d:d5:e0:1c:d9:8a:9d:9f:61:96:2d:e6:ad:ab:08:
42:d2:a8:c6:0d:13:cb:f3:60:ba:d3:58:96:e0:0b:
ce:99:78:22:19:ba:e4:63:9d:c0:2c:cc:39:03:95:
19:1a:a8:33:52:14:b9:9e:da:9f:f0:c8:a5:84:b3:
93:20:ff:92:33:e5:14:2b:b4:ea:99:cf:dd:34:54:
ff:11:e0:90:97:1a:41:5b:3e:9e:9c:63:69:a3:b1:
10:bc:63:f2:4d:b8:72:c4:7d:5a:c5:aa:cc:59:b0:
d3:e3:af:e7:ab:43:19:2e:32:0a:13:2c:5f:ad:85:
47:74:96:b8:ae:34:f1:c9:92:85:1e:23:5c:d7:75:
51:a5:23:42:35:f7:4b:b1:78:11:14:86:ad:92:eb:
6d:8f:64:29:ff:9c:d6:98:cf:3e:19:d8:6a:bd:e5:
5c:dd:d2:13:ef:18:41:aa:c9:dc:23:86:78:21:df:
21:f4:49:c0:53:3b:10:bc:11:6b:77:1d:50:b5:c6:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:55:25:DF:AE:EE:02:E5:8C:55:43:D1:A2:2F:38:D2:3D:23:88:F8
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/zVUl367uAuWMVUPRoi840j0jiPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.72.0-185.241.74.255
Signature Algorithm: sha256WithRSAEncryption
34:4f:0b:b8:dc:43:01:c0:47:22:f3:f4:4f:af:2f:5a:25:f6:
2e:2e:d1:de:63:87:89:ce:ea:99:39:55:fa:d6:d1:1a:44:6a:
47:3b:f6:d3:53:c1:c6:10:1c:f9:be:d2:49:62:6e:4d:77:2b:
3f:ff:c0:10:d9:42:15:5e:53:ed:fd:d9:6d:66:2d:7b:ac:f6:
d0:0a:ea:93:f9:ef:de:2b:cd:f5:f8:96:8c:30:45:c5:bc:7a:
36:82:a8:d1:17:7d:cf:3e:7a:80:f2:9e:8c:09:19:6a:d2:a1:
70:e7:12:37:17:6c:49:46:52:ac:e8:5f:bf:7b:48:4d:ec:95:
65:96:3f:33:60:19:19:8f:3e:d7:53:9b:0d:7c:65:f0:0b:3c:
42:e9:36:1c:fe:9e:a0:c0:a5:3b:4d:83:5d:7c:a3:fb:d8:12:
40:5e:41:a4:f2:eb:2e:20:8d:ce:c3:0a:7b:c2:ca:27:2a:92:
06:18:f9:5f:9b:56:e5:2a:e8:4c:98:05:b7:c0:1b:cf:d8:d7:
a8:19:8a:b2:fd:1b:1c:0a:42:46:05:f6:f3:26:cb:f0:26:0c:
bc:81:0f:e3:2c:1f:c0:f4:93:0f:85:bd:84:e7:61:0c:e3:13:
61:be:f6:e3:7c:a2:9d:e5:60:e6:92:b5:6a:27:cd:63:c7:c6:
e7:ee:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:30:38 2025 by rpki-client