Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa
File: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (raw, json)
Hash identifier: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=
Subject key identifier: 8F:37:73:9F:C7:CD:3D:96:21:B0:DC:CB:16:F9:CD:10:08:8D:A9:F4
Certificate issuer: /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Certificate serial: 019600A66FA03C249F597FCBB70FED7A6114
Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa
Signing time: Fri 04 Apr 2025 11:53:49 +0000
ROA not before: Fri 04 Apr 2025 11:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51504
IP address blocks: 46.16.112.0/21 maxlen: 21
46.39.128.0/19 maxlen: 19
81.25.240.0/20 maxlen: 20
188.95.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:a6:6f:a0:3c:24:9f:59:7f:cb:b7:0f:ed:7a:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Validity
Not Before: Apr 4 11:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f37739fc7cd3d9621b0dccb16f9cd10088da9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:51:71:bc:a3:e2:ef:b3:62:82:ac:14:ea:
e0:2b:64:ab:11:84:ea:ae:5f:07:fd:7d:f1:b4:28:
21:a4:bc:c6:8b:50:23:bc:e1:73:b8:b9:0f:5a:b1:
5d:d4:ec:1d:81:8a:c1:0c:a6:cc:9c:8d:fc:49:90:
dc:20:9f:2f:02:42:15:74:5d:84:31:06:85:d3:d4:
c8:89:fc:9a:f6:5f:40:77:da:98:ec:08:0c:7f:c1:
4e:b8:af:20:d1:bf:17:a3:e2:cf:d7:16:62:91:f1:
09:52:18:1e:f5:64:91:12:69:8b:c1:53:27:6e:15:
a8:00:93:39:4d:5b:72:8b:ba:eb:74:99:86:ad:05:
11:16:32:4c:fd:dd:5c:b6:09:fa:cd:01:6b:2c:95:
44:7a:fb:29:cd:56:49:82:3f:a8:c0:98:b3:57:f3:
5e:09:c9:03:2a:d5:db:06:71:a5:5e:71:fc:ed:80:
57:6f:ea:6e:84:b5:bc:ad:b5:5e:c0:5f:f9:5a:f4:
ed:81:f7:99:b0:fc:37:77:f8:4d:05:b1:33:c3:75:
25:cd:ca:d3:52:64:be:19:16:b1:96:42:27:6c:43:
64:bd:bc:c1:11:c9:4a:72:6d:b7:b1:76:34:25:83:
04:a6:93:eb:52:2e:9a:70:37:9a:9d:90:3d:e9:95:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:73:9F:C7:CD:3D:96:21:B0:DC:CB:16:F9:CD:10:08:8D:A9:F4
X509v3 Authority Key Identifier:
keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.112.0/21
46.39.128.0/19
81.25.240.0/20
188.95.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:0b:ad:9e:66:0f:f2:bd:6d:29:7e:f8:b5:ae:b0:e1:b3:04:
46:96:03:7b:e3:ed:b4:7b:22:8e:91:95:00:cd:ee:f7:57:f1:
da:d8:2a:6b:61:c5:aa:a2:a4:7b:88:c9:44:5a:77:9d:49:aa:
7c:22:e2:1f:08:25:12:25:f1:94:99:9f:55:cf:88:1b:54:4f:
78:c1:07:6f:51:3f:41:74:92:03:3d:d2:23:40:19:d4:5f:09:
11:15:a9:00:cc:e4:84:01:3b:99:15:b5:8d:42:3a:0c:77:c7:
d8:9c:f6:21:c9:8a:1c:cc:e1:bf:0e:df:90:aa:93:8b:78:f3:
cb:b8:83:fb:d0:f9:9d:1e:5d:fc:ef:ef:48:fe:ef:79:33:9e:
6a:2a:a0:35:d7:7c:df:0f:d3:14:6a:24:91:8f:06:89:7f:19:
3e:80:17:ce:63:75:cc:5a:6d:f5:61:73:ce:4f:ee:d0:f1:8d:
26:3e:b1:ec:fa:26:eb:68:23:e2:63:c5:59:4e:a1:f9:53:84:
e8:1a:ac:72:8d:2a:e5:62:ce:42:49:64:ab:3f:85:57:4d:6f:
8b:73:3f:ef:53:a8:1c:92:09:17:d7:17:95:52:e2:cc:e4:81:
d6:97:39:7c:ea:e7:c0:02:4c:36:84:07:34:4a:0e:b6:75:13:
e9:a9:0c:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYApm+gPCSfWX/Ltw/temEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODgzZTk0YWExNDUxYmE3NDhkNmE1YmYxNzVhNDNmZTgx
NmU2NjEwHhcNMjUwNDA0MTE1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjM3NzM5ZmM3Y2QzZDk2MjFiMGRjY2IxNmY5Y2QxMDA4OGRhOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe9Rcbyj4u+zYoKsFOrgK2SrEYTq
rl8H/X3xtCghpLzGi1AjvOFzuLkPWrFd1OwdgYrBDKbMnI38SZDcIJ8vAkIVdF2E
MQaF09TIifya9l9Ad9qY7AgMf8FOuK8g0b8Xo+LP1xZikfEJUhge9WSREmmLwVMn
bhWoAJM5TVtyi7rrdJmGrQURFjJM/d1ctgn6zQFrLJVEevspzVZJgj+owJizV/Ne
CckDKtXbBnGlXnH87YBXb+puhLW8rbVewF/5WvTtgfeZsPw3d/hNBbEzw3UlzcrT
UmS+GRaxlkInbENkvbzBEclKcm23sXY0JYMEppPrUi6acDeanZA96ZXFUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI83c5/HzT2WIbDcyxb5zRAIjan0MB8GA1UdIwQY
MBaAFEqIPpSqFFG6dI1qW/F1pD/oFuZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMt
OWQzNzAyNmY1MWI0LzEvanpkem44Zk5QWlloc056TEZ2bk5FQWlOcWZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMtOWQzNzAyNmY1MWI0
LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLhBwAwQF
LieAAwQEURnwAwQDvF/QMA0GCSqGSIb3DQEBCwUAA4IBAQBPC62eZg/yvW0pfvi1
rrDhswRGlgN74+20eyKOkZUAze73V/Ha2CprYcWqoqR7iMlEWnedSap8IuIfCCUS
JfGUmZ9Vz4gbVE94wQdvUT9BdJIDPdIjQBnUXwkRFakAzOSEATuZFbWNQjoMd8fY
nPYhyYoczOG/Dt+QqpOLePPLuIP70PmdHl387+9I/u95M55qKqA113zfD9MUaiSR
jwaJfxk+gBfOY3XMWm31YXPOT+7Q8Y0mPrHs+ibraCPiY8VZTqH5U4ToGqxyjSrl
Ys5CSWSrP4VXTW+Lcz/vU6gckgkX1xeVUuLM5IHWlzl86ufAAkw2hAc0Sg62dRPp
qQxs
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:47:55 2025 by rpki-client