Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa
File: ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa (raw, json)
Hash identifier: 4Yk1QA2QugshfW9geeysUTQ4Sub4Aja/bv1m3JJnrLU=
Subject key identifier: 65:60:B9:E1:43:EB:30:7C:99:EA:0B:61:D8:80:C3:9D:16:2C:30:36
Certificate issuer: /CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Certificate serial: 019424453EA73BA13D6B57CCA272CA8C4472
Authority key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214165
IP address blocks: 83.175.143.0/24 maxlen: 24
2001:67c:260::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3e:a7:3b:a1:3d:6b:57:cc:a2:72:ca:8c:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6560b9e143eb307c99ea0b61d880c39d162c3036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:96:c2:ed:f5:51:71:6d:43:98:79:1f:54:
55:ab:35:34:7b:68:8e:e9:90:40:6f:dd:5f:e5:09:
83:ae:50:06:17:3d:af:4b:ae:62:cd:11:a1:9f:e3:
55:69:43:bf:08:c4:89:ac:b9:d1:82:d3:87:39:5b:
af:f5:8c:b9:23:03:c0:7a:c3:3c:76:ef:9d:b2:8b:
c9:05:dd:49:e2:6a:d3:6d:d6:c3:f1:fd:2e:01:a8:
85:70:a6:16:db:14:05:8e:b8:49:ab:27:ba:6e:99:
81:28:ff:0b:29:13:eb:22:e7:e1:ac:9a:2f:38:11:
ea:b6:79:ef:0f:19:b2:9a:cf:74:b1:ab:88:55:56:
80:a2:f8:37:8d:d3:c6:a9:3d:21:9a:5e:ff:73:26:
53:f0:9d:98:94:da:12:2d:09:e5:64:ba:95:c7:61:
7e:21:35:6f:65:b0:8d:88:bc:4d:d3:05:7e:49:5c:
fb:8a:0d:e3:93:09:c3:80:93:3b:d6:7b:2f:b4:75:
e2:30:d5:6a:08:01:89:59:7e:d9:ab:9f:e2:29:cb:
eb:a7:03:b0:d6:56:65:a5:d9:c3:a2:bd:1d:c2:bd:
5c:e2:95:c5:b1:fb:54:76:ad:f8:67:26:af:22:6e:
a3:c0:47:65:01:76:5b:4f:5d:be:08:c8:75:7b:98:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:B9:E1:43:EB:30:7C:99:EA:0B:61:D8:80:C3:9D:16:2C:30:36
X509v3 Authority Key Identifier:
keyid:B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.143.0/24
IPv6:
2001:67c:260::/48
Signature Algorithm: sha256WithRSAEncryption
09:43:24:f0:e2:fc:ee:db:24:7b:45:54:e8:5d:29:f8:3b:7f:
8a:d0:c4:f6:75:65:f8:18:76:9c:2e:98:38:03:a2:ad:9a:d2:
5d:e3:9a:56:cc:7f:f0:62:ed:6c:b4:1f:c8:7e:c2:f9:23:df:
e3:ff:e9:4e:d2:c6:18:64:59:a4:6a:68:3b:d8:89:af:f9:49:
96:56:6c:8d:30:6c:db:31:d2:3f:1f:7a:ca:68:95:d4:c5:72:
be:9b:3f:74:a2:f8:b4:99:12:0c:6c:6f:44:cd:ff:74:81:46:
56:f5:f5:2e:a8:41:36:7a:0a:e3:b3:7e:a0:8c:c5:01:09:90:
e9:89:e9:2d:ca:48:a5:6d:2f:3d:b6:2f:55:4c:90:7b:8c:6f:
9c:85:7c:40:f8:bc:99:a6:53:02:16:8b:e7:1b:a0:88:91:dc:
4b:86:63:c6:7c:7b:3c:e2:69:5e:c2:13:4e:43:d4:72:64:ae:
20:6f:6a:a1:bc:6a:88:fb:9b:47:ac:60:59:6d:7c:fc:f8:34:
cb:6c:7c:4a:94:e6:69:52:67:89:d2:4e:0e:1b:a2:5a:b9:95:
60:0f:21:2d:5a:23:a3:8b:53:36:b4:84:33:b9:48:dc:3d:e3:
53:6a:84:f9:59:6d:9b:fb:f7:9f:07:d5:67:e6:ee:67:ee:e3:
67:85:4a:5e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRT6nO6E9a1fMonLKjERyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOGVmMWY0Zjg4Mjc4ZjRkZjE5ZTczZTMzODFjZWNkNzhl
MDY5YzEwHhcNMjUwMTAxMjM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTYwYjllMTQzZWIzMDdjOTllYTBiNjFkODgwYzM5ZDE2MmMzMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w2Wwu31UXFtQ5h5H1RVqzU0e2iO
6ZBAb91f5QmDrlAGFz2vS65izRGhn+NVaUO/CMSJrLnRgtOHOVuv9Yy5IwPAesM8
du+dsovJBd1J4mrTbdbD8f0uAaiFcKYW2xQFjrhJqye6bpmBKP8LKRPrIufhrJov
OBHqtnnvDxmyms90sauIVVaAovg3jdPGqT0hml7/cyZT8J2YlNoSLQnlZLqVx2F+
ITVvZbCNiLxN0wV+SVz7ig3jkwnDgJM71nsvtHXiMNVqCAGJWX7Zq5/iKcvrpwOw
1lZlpdnDor0dwr1c4pXFsftUdq34ZyavIm6jwEdlAXZbT12+CMh1e5g5PwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGVgueFD6zB8meoLYdiAw50WLDA2MB8GA1UdIwQY
MBaAFLKO8fT4gnj03xnnPjOBzs144GnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQt
OWVmMGE1OTkyN2IxLzEvWldDNTRVUHJNSHlaNmd0aDJJRERuUllzTURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8xZjA1MWItZTczNS00OWI4LWJjNmQtOWVmMGE1OTkyN2Ix
LzEvc283eDlQaUNlUFRmR2VjLU00SE96WGpnYWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAU6+PMA8E
AgACMAkDBwAgAQZ8AmAwDQYJKoZIhvcNAQELBQADggEBAAlDJPDi/O7bJHtFVOhd
Kfg7f4rQxPZ1ZfgYdpwumDgDoq2a0l3jmlbMf/Bi7Wy0H8h+wvkj3+P/6U7Sxhhk
WaRqaDvYia/5SZZWbI0wbNsx0j8fespoldTFcr6bP3Si+LSZEgxsb0TN/3SBRlb1
9S6oQTZ6CuOzfqCMxQEJkOmJ6S3KSKVtLz22L1VMkHuMb5yFfED4vJmmUwIWi+cb
oIiR3EuGY8Z8ezziaV7CE05D1HJkriBvaqG8aoj7m0esYFltfPz4NMtsfEqU5mlS
Z4nSTg4bolq5lWAPIS1aI6OLUza0hDO5SNw941NqhPlZbZv7958H1Wfm7mfu42eF
Sl4=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:07 2025 by rpki-client