Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/RZDB-wEsqhNgJE7sn6sviv6flew.roa
File: RZDB-wEsqhNgJE7sn6sviv6flew.roa (raw, json)
Hash identifier: OO6b8TF+dc/NIr8Tg9F9I1/6IDlTjI89aON6PORPAdg=
Subject key identifier: 45:90:C1:FB:01:2C:AA:13:60:24:4E:EC:9F:AB:2F:8A:FE:9F:95:EC
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01979E6D28A6C746DF2D5B080D6734D0AFBE
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/RZDB-wEsqhNgJE7sn6sviv6flew.roa
Signing time: Mon 23 Jun 2025 20:14:03 +0000
ROA not before: Mon 23 Jun 2025 20:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.224.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:6d:28:a6:c7:46:df:2d:5b:08:0d:67:34:d0:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jun 23 20:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4590c1fb012caa1360244eec9fab2f8afe9f95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:84:4a:19:8b:e0:26:d8:0e:9f:d7:df:7e:
38:35:71:0f:b4:27:0f:60:58:b3:6e:04:1e:f7:b5:
17:dc:3c:1e:62:2e:ff:13:2f:a4:68:93:88:4c:ea:
ab:45:56:58:56:5b:f5:71:b1:2f:0a:d5:4d:db:4d:
6c:78:9c:0d:af:88:90:3a:98:2d:58:3e:e5:0b:61:
03:02:2f:f5:66:7d:e8:53:e0:57:6b:6f:8f:17:18:
7e:17:21:69:f6:c7:44:7e:97:29:17:fb:1c:cb:a7:
dc:c5:0a:04:44:14:06:37:70:41:68:96:09:5e:12:
aa:81:3b:14:1a:91:bf:b1:be:7e:15:0e:17:73:d9:
51:a4:ed:e6:1c:1a:ba:1d:4f:e7:07:a4:99:6c:2e:
12:fd:0d:8a:d4:18:54:d8:fc:2e:69:e6:d8:3f:e2:
5b:32:e2:a7:10:43:d5:4c:30:13:54:0a:42:91:71:
8e:81:b6:4f:4d:98:80:27:f4:11:1e:47:13:17:06:
d7:50:36:fe:18:f5:1f:dd:e5:36:04:be:5e:f1:6b:
8f:0d:b4:37:04:0d:d8:95:d7:f2:c7:b7:96:88:df:
43:94:45:b7:e3:41:0d:fa:67:11:10:dd:2b:75:71:
de:b9:c3:fa:67:6c:09:d5:25:ca:b1:74:c8:36:97:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:C1:FB:01:2C:AA:13:60:24:4E:EC:9F:AB:2F:8A:FE:9F:95:EC
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/RZDB-wEsqhNgJE7sn6sviv6flew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
39:52:25:9a:d8:b9:bc:ff:df:4d:d1:d5:3c:bc:11:df:d6:1e:
20:d1:64:9e:cb:a3:20:47:f2:34:5d:d7:9c:8d:e6:64:89:47:
09:75:8e:0e:af:ac:86:e3:e3:2e:51:4a:a3:f3:22:82:bf:d3:
3b:e5:0a:2e:5d:6c:64:ed:cf:21:1d:07:16:59:8e:df:e1:1c:
3f:60:38:c0:11:7b:3f:29:e3:69:32:48:8a:45:b2:96:f9:a8:
0b:23:fd:06:ab:ff:34:e3:89:ea:b7:9f:bc:25:52:02:cd:2f:
eb:c0:62:cd:dc:2b:cf:df:98:bd:10:10:65:bd:e1:15:4e:60:
91:cd:fc:1a:cb:5a:f1:b0:35:8d:37:f1:92:3a:55:63:c4:9a:
9e:78:dd:3a:c6:37:d3:a4:3c:82:a6:01:3a:98:34:60:cf:25:
74:ab:1a:e7:df:b5:45:75:b2:06:db:bb:ca:58:8d:7e:e9:f1:
5c:3d:cf:1b:47:0a:fb:f0:6a:9e:94:82:61:da:16:3d:92:6d:
7d:93:32:cb:14:02:6d:b9:bb:6c:ea:7b:01:19:30:6c:bf:35:
d4:9e:f9:40:7d:51:22:d7:05:6c:af:05:ff:a6:dc:47:cb:f1:
c3:77:de:cf:52:a2:c6:fd:f6:45:e8:20:8f:a2:f1:b1:f0:3f:
c5:ff:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:37:16 2025 by rpki-client