Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZjIGhXgkE_pNGpiDDfStyiFy9Mg.roa
File: ZjIGhXgkE_pNGpiDDfStyiFy9Mg.roa (raw, json)
Hash identifier: nNcCS5DJLH8e76rK+xKHRma6hjMvQlZUiSP/LdCTwEE=
Subject key identifier: 66:32:06:85:78:24:13:FA:4D:1A:98:83:0D:F4:AD:CA:21:72:F4:C8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2EC24405C2A3628038513F3563A84
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZjIGhXgkE_pNGpiDDfStyiFy9Mg.roa
Signing time: Thu 02 Jan 2025 01:48:13 +0000
ROA not before: Thu 02 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35484
IP address blocks: 85.254.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ec:24:40:5c:2a:36:28:03:85:13:f3:56:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66320685782413fa4d1a98830df4adca2172f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:14:3c:a7:78:23:c6:b0:9d:da:a4:cd:df:
83:d0:df:96:c9:90:f7:08:20:b4:36:2f:74:7d:28:
ca:7b:31:68:53:63:88:0a:30:df:15:66:aa:5a:6c:
8f:e7:c4:c7:cf:1b:05:5c:58:bc:fc:58:17:12:ab:
7b:39:a9:67:d6:fd:3a:e6:9f:e3:06:24:ba:af:d8:
0c:42:38:cc:d6:16:78:de:cb:84:10:0d:4a:8c:0e:
df:e3:15:41:41:7d:1c:58:a2:2f:9d:86:ee:99:b2:
54:0e:6b:d2:ef:a0:5b:7f:1f:cc:7a:91:2e:16:8c:
ba:a4:5e:0a:0d:1e:04:fc:19:cc:25:47:f0:99:44:
db:bd:d9:a1:e2:bc:13:86:bd:d9:fb:f5:a5:f2:23:
1e:10:df:04:cf:90:37:ae:f6:8b:dc:bf:b2:56:a2:
ea:bb:a2:0c:d2:a0:62:f8:b6:f2:b0:e8:b9:72:36:
e7:19:7b:9e:41:55:a6:ed:eb:4a:24:d6:59:cc:b9:
6c:fb:d1:00:e0:9d:34:e9:4d:0d:6b:73:e8:7d:a5:
7b:a6:d8:31:41:53:1c:30:e4:37:a4:98:e6:5f:f7:
63:93:c2:be:92:7d:73:8f:f5:09:e0:d0:dc:b6:1e:
83:66:80:4e:b6:d6:95:7a:8e:df:e0:00:99:a5:65:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:06:85:78:24:13:FA:4D:1A:98:83:0D:F4:AD:CA:21:72:F4:C8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZjIGhXgkE_pNGpiDDfStyiFy9Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d5:cf:3c:41:fd:0d:15:06:d9:49:38:21:3c:bb:be:a2:d8:
f6:50:ec:f2:99:5c:4c:28:36:ab:e0:67:7d:ef:3f:f6:08:36:
65:9d:90:f9:73:41:e4:a2:02:9a:4b:aa:c3:07:19:ef:22:7f:
58:e2:ad:71:e4:81:1a:27:25:2a:d2:f2:fd:36:9e:4d:15:58:
c6:10:b2:1f:8b:ee:02:47:49:c7:9a:7e:ac:f2:45:bc:06:14:
4b:88:95:44:cd:51:4b:c6:f7:fd:38:69:9d:43:b2:5d:e3:34:
46:1d:5d:28:37:a5:90:0a:1c:3e:c3:e3:59:bf:63:fe:42:a8:
05:de:4e:ab:ff:08:78:5e:cf:d5:04:bb:1a:30:19:b3:10:63:
61:36:13:aa:4c:d4:73:3a:72:bc:c8:f7:80:6f:db:a5:80:d0:
85:33:a1:69:3f:2d:86:e8:35:a2:8a:86:af:cd:87:37:98:8d:
04:88:55:71:0f:18:fa:ae:c1:0f:e5:f6:04:83:fd:07:8e:d3:
eb:75:bf:f0:77:13:01:40:e5:82:25:38:9c:51:58:72:76:34:
8f:69:c6:b4:b1:f4:25:ce:31:cc:b3:6d:34:35:91:ec:68:36:
6d:ee:3b:01:91:05:70:c4:96:e1:9b:b2:5e:90:eb:07:53:60:
08:5d:91:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksuwkQFwqNigDhRPzVjqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjMyMDY4NTc4MjQxM2ZhNGQxYTk4ODMwZGY0YWRjYTIxNzJmNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQEUPKd4I8awndqkzd+D0N+WyZD3
CCC0Ni90fSjKezFoU2OICjDfFWaqWmyP58THzxsFXFi8/FgXEqt7Oaln1v065p/j
BiS6r9gMQjjM1hZ43suEEA1KjA7f4xVBQX0cWKIvnYbumbJUDmvS76Bbfx/MepEu
Foy6pF4KDR4E/BnMJUfwmUTbvdmh4rwThr3Z+/Wl8iMeEN8Ez5A3rvaL3L+yVqLq
u6IM0qBi+LbysOi5cjbnGXueQVWm7etKJNZZzLls+9EA4J006U0Na3PofaV7ptgx
QVMcMOQ3pJjmX/djk8K+kn1zj/UJ4NDcth6DZoBOttaVeo7f4ACZpWWIzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYyBoV4JBP6TRqYgw30rcohcvTIMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvWmpJR2hYZ2tFX3BOR3BpRERmU3R5aUZ5OU1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf6WMA0G
CSqGSIb3DQEBCwUAA4IBAQBq1c88Qf0NFQbZSTghPLu+otj2UOzymVxMKDar4Gd9
7z/2CDZlnZD5c0HkogKaS6rDBxnvIn9Y4q1x5IEaJyUq0vL9Np5NFVjGELIfi+4C
R0nHmn6s8kW8BhRLiJVEzVFLxvf9OGmdQ7Jd4zRGHV0oN6WQChw+w+NZv2P+QqgF
3k6r/wh4Xs/VBLsaMBmzEGNhNhOqTNRzOnK8yPeAb9ulgNCFM6FpPy2G6DWiioav
zYc3mI0EiFVxDxj6rsEP5fYEg/0HjtPrdb/wdxMBQOWCJTicUVhydjSPaca0sfQl
zjHMs200NZHsaDZt7jsBkQVwxJbhm7JekOsHU2AIXZFB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:17 2025 by rpki-client