Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa
File: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (raw, json)
Hash identifier: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=
Subject key identifier: 65:C3:16:BC:19:13:34:59:10:8B:3D:B2:03:41:BC:0C:D1:A5:AA:9F
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 019422FC4D277519BBBDA468C862C7999019
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21373
IP address blocks: 193.53.48.0/24 maxlen: 24
193.53.49.0/24 maxlen: 24
193.53.50.0/24 maxlen: 24
193.53.51.0/24 maxlen: 24
193.53.52.0/24 maxlen: 24
193.53.53.0/24 maxlen: 24
193.53.54.0/24 maxlen: 24
193.53.55.0/24 maxlen: 24
193.53.56.0/23 maxlen: 24
193.53.58.0/23 maxlen: 24
193.53.60.0/24 maxlen: 24
193.53.61.0/24 maxlen: 24
193.53.62.0/24 maxlen: 24
193.53.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4d:27:75:19:bb:bd:a4:68:c8:62:c7:99:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65c316bc19133459108b3db20341bc0cd1a5aa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:b0:a4:51:a3:7c:07:43:58:5b:aa:77:0d:
e9:29:f2:93:40:bf:a0:9d:a6:f5:9f:88:d4:cf:af:
c0:ea:ed:ef:2c:66:33:08:0f:43:66:21:12:88:11:
83:f2:62:b6:39:80:80:a0:48:2f:b6:57:b9:d0:b6:
28:3b:89:30:d2:18:02:9c:3d:55:0c:f3:d8:82:09:
6e:33:68:d9:43:5b:ef:46:92:6e:b1:b2:e3:71:70:
1e:e1:3f:f3:5c:5d:68:36:1d:65:bd:de:1a:c1:de:
fa:8e:63:c6:02:62:a3:71:7e:6a:66:0e:65:c1:c5:
f1:04:a9:77:ec:db:ae:1b:83:eb:95:52:1a:a8:ca:
7b:02:d6:f8:7f:50:15:23:c2:bf:ae:c1:6b:e1:3b:
56:a1:d5:0c:84:aa:5e:2c:7b:fd:11:64:05:c1:5f:
8b:d8:82:b5:89:1b:a1:54:1d:a0:81:ec:32:df:27:
34:b4:08:09:c3:83:70:11:d4:ea:33:fa:04:1e:5a:
23:10:5a:a6:05:0d:dd:4d:5c:7f:08:17:cb:49:92:
f5:6c:b3:59:20:10:a1:f3:d1:8b:7d:02:06:a6:1e:
cf:6d:ba:fe:d3:c4:8b:ea:b4:6d:fb:23:44:02:90:
3b:5c:18:3a:d2:b0:01:72:5a:7e:a6:ae:ec:2a:51:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:16:BC:19:13:34:59:10:8B:3D:B2:03:41:BC:0C:D1:A5:AA:9F
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.48.0/20
Signature Algorithm: sha256WithRSAEncryption
46:5a:15:65:f5:bb:19:0d:db:f4:d7:5e:5c:7c:51:60:89:a3:
fc:03:82:bc:92:99:4e:4b:83:52:f6:75:10:28:ca:cc:3d:be:
a8:8f:4a:de:dc:5d:14:cc:c3:db:ff:52:e8:8e:c9:45:48:ed:
3f:94:a9:c2:fb:71:0f:6c:ca:b3:0f:17:88:eb:b0:b1:bc:b6:
c1:b5:36:42:5c:20:00:69:62:9a:80:b8:5a:1d:4c:a8:32:8a:
69:44:62:d2:d2:50:95:69:62:13:7b:d8:44:77:f7:8b:76:6f:
3d:cb:95:f7:7e:f5:1f:26:d5:ac:07:f5:14:55:91:70:68:3a:
f4:69:b2:4d:f7:40:4b:3b:19:40:64:20:48:a4:dd:17:a3:fd:
12:d2:8f:ae:be:1c:bc:e6:20:7b:d5:fe:7d:ee:69:20:ea:26:
23:55:59:35:61:d9:03:9e:a0:eb:8f:d4:58:16:7c:e1:30:fa:
c7:cd:f1:c1:d7:2a:52:66:f0:99:27:d7:b4:50:c5:fd:83:ea:
2b:26:57:73:9e:cf:b5:5e:8b:74:74:3c:45:a1:3a:e1:c8:3a:
f0:e2:da:42:31:56:24:d4:35:09:6b:13:79:2f:b6:ac:dd:e5:
eb:ba:61:9f:f8:49:0c:b9:97:b6:fd:a1:30:18:d0:0d:97:c6:
de:ba:09:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/E0ndRm7vaRoyGLHmZAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmJlYzQzZGQxYWZlOTdhNjRmNTZlYjg1NGM3OWYxNjNm
YTRlZTYwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWMzMTZiYzE5MTMzNDU5MTA4YjNkYjIwMzQxYmMwY2QxYTVhYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCywpFGjfAdDWFuqdw3pKfKTQL+g
nab1n4jUz6/A6u3vLGYzCA9DZiESiBGD8mK2OYCAoEgvtle50LYoO4kw0hgCnD1V
DPPYggluM2jZQ1vvRpJusbLjcXAe4T/zXF1oNh1lvd4awd76jmPGAmKjcX5qZg5l
wcXxBKl37NuuG4PrlVIaqMp7Atb4f1AVI8K/rsFr4TtWodUMhKpeLHv9EWQFwV+L
2IK1iRuhVB2ggewy3yc0tAgJw4NwEdTqM/oEHlojEFqmBQ3dTVx/CBfLSZL1bLNZ
IBCh89GLfQIGph7Pbbr+08SL6rRt+yNEApA7XBg60rABclp+pq7sKlGAZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXDFrwZEzRZEIs9sgNBvAzRpaqfMB8GA1UdIwQY
MBaAFDgr7EPdGv6Xpk9W64VMefFj+k7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2Qt
Mjc1MDk3MTFlMzdmLzEvWmNNV3ZCa1RORmtRaXoyeUEwRzhETkdscXA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2QtMjc1MDk3MTFlMzdm
LzEvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwTUwMA0G
CSqGSIb3DQEBCwUAA4IBAQBGWhVl9bsZDdv0115cfFFgiaP8A4K8kplOS4NS9nUQ
KMrMPb6oj0re3F0UzMPb/1LojslFSO0/lKnC+3EPbMqzDxeI67CxvLbBtTZCXCAA
aWKagLhaHUyoMoppRGLS0lCVaWITe9hEd/eLdm89y5X3fvUfJtWsB/UUVZFwaDr0
abJN90BLOxlAZCBIpN0Xo/0S0o+uvhy85iB71f597mkg6iYjVVk1YdkDnqDrj9RY
FnzhMPrHzfHB1ypSZvCZJ9e0UMX9g+orJldzns+1Xot0dDxFoTrhyDrw4tpCMVYk
1DUJaxN5L7as3eXrumGf+EkMuZe2/aEwGNANl8beugkg
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:10 2025 by rpki-client