Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa
File: ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa (raw, json)
Hash identifier: NJNpHFqU3eZdkh0S0In7det3e4nV9b6dbPyoIemJGSM=
Subject key identifier: 65:39:A4:F7:10:8A:13:BE:06:2D:7F:12:A5:46:F0:0F:48:99:32:5F
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 0194266BB2567722FE00AE6E35AE14E166C0
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 78.40.200.0/21 maxlen: 21
82.119.192.0/19 maxlen: 19
88.81.160.0/19 maxlen: 19
185.155.164.0/22 maxlen: 22
217.22.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:56:77:22:fe:00:ae:6e:35:ae:14:e1:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6539a4f7108a13be062d7f12a546f00f4899325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:39:7d:93:7a:48:38:fc:40:fb:cd:4c:b6:
1f:14:c6:34:dc:98:aa:5f:c1:ed:64:ac:97:e2:b2:
e2:7c:22:71:b1:39:3c:eb:4f:16:4f:cc:41:73:07:
37:c0:26:25:6e:36:de:7f:5b:3e:d8:20:9d:1e:2e:
47:d1:96:47:c4:c0:7c:22:b5:6b:9a:c4:8f:3a:0c:
94:71:f4:4a:4c:d5:99:e8:99:f0:88:90:60:45:13:
1d:1f:35:38:0b:ee:0f:fc:1b:ab:57:8a:c6:9e:37:
99:4c:b0:ab:95:06:11:82:33:a6:8c:c1:bf:d2:c3:
cd:fe:0b:95:c9:42:1a:65:5f:fa:d2:2f:9b:11:c5:
21:fc:07:68:a6:06:32:ee:f4:8d:5f:a9:39:6b:3d:
98:cd:c3:a4:ec:b9:6d:c3:24:a5:f5:a4:1f:16:cf:
8e:38:d2:9d:58:0e:f9:89:00:a4:cd:f5:df:18:88:
50:2a:f2:1b:61:83:39:65:75:c0:a9:69:f7:40:1e:
c2:65:c2:b9:0a:1b:7e:b1:77:c4:f0:db:28:73:6b:
d8:0e:5d:42:48:6d:c1:0d:7c:d1:50:09:2c:3b:b3:
49:ac:bd:11:a6:66:cc:df:ed:44:5b:6a:b6:48:5f:
8d:04:62:f1:fa:a3:0f:ec:cb:bb:60:9e:8a:7d:66:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:A4:F7:10:8A:13:BE:06:2D:7F:12:A5:46:F0:0F:48:99:32:5F
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.200.0/21
82.119.192.0/19
88.81.160.0/19
185.155.164.0/22
217.22.224.0/19
Signature Algorithm: sha256WithRSAEncryption
32:b0:5d:0e:1d:77:5b:82:83:ee:f8:43:a4:ad:39:c8:44:1f:
2b:e9:ea:e9:10:83:04:5d:77:db:fa:79:2e:54:68:a0:3f:17:
d5:6a:f9:f3:6f:a0:b9:80:a3:08:5a:e9:69:bb:76:8b:44:20:
ca:c6:c7:f7:35:4e:7c:41:d8:6e:6c:e8:90:c8:c6:09:ac:80:
9b:4a:07:e6:7c:46:27:6d:53:98:47:4a:0e:ac:b5:e1:ee:7a:
d4:3b:e5:26:81:a0:9e:bd:e9:aa:20:67:80:e0:c8:2c:91:50:
9d:88:94:89:df:00:fe:b3:dc:06:b0:a1:ca:5a:a9:74:b1:4d:
85:f5:aa:c2:fe:ba:95:12:6e:86:94:6f:55:02:87:6e:9f:02:
87:f3:b2:61:c6:dc:7a:22:4f:0c:57:22:13:8e:ba:ef:8b:ca:
3a:b5:b1:49:c2:4a:a6:b6:e6:f0:54:74:80:10:d9:59:d9:02:
29:40:d7:97:f6:c5:c5:39:de:1a:65:68:a7:2c:56:47:0c:8c:
fe:64:01:5d:27:f2:4e:67:e8:8d:eb:cc:19:0e:a5:9a:4a:0c:
be:89:a0:8b:bf:66:13:19:b9:15:3d:19:ca:74:33:31:6c:74:
65:50:60:77:ac:25:c3:55:8c:04:fd:35:0c:20:e9:ee:53:bd:
af:e2:2b:9f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQma7JWdyL+AK5uNa4U4WbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjUwMTAyMDk0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTM5YTRmNzEwOGExM2JlMDYyZDdmMTJhNTQ2ZjAwZjQ4OTkzMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8o5fZN6SDj8QPvNTLYfFMY03Jiq
X8HtZKyX4rLifCJxsTk8608WT8xBcwc3wCYlbjbef1s+2CCdHi5H0ZZHxMB8IrVr
msSPOgyUcfRKTNWZ6JnwiJBgRRMdHzU4C+4P/BurV4rGnjeZTLCrlQYRgjOmjMG/
0sPN/guVyUIaZV/60i+bEcUh/AdopgYy7vSNX6k5az2YzcOk7LltwySl9aQfFs+O
ONKdWA75iQCkzfXfGIhQKvIbYYM5ZXXAqWn3QB7CZcK5Cht+sXfE8Nsoc2vYDl1C
SG3BDXzRUAksO7NJrL0RpmbM3+1EW2q2SF+NBGLx+qMP7Mu7YJ6KfWaGqQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGU5pPcQihO+Bi1/EqVG8A9ImTJfMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvWlRtazl4Q0tFNzRHTFg4U3BVYndEMGlaTWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDTijIAwQF
UnfAAwQFWFGgAwQCuZukAwQF2RbgMA0GCSqGSIb3DQEBCwUAA4IBAQAysF0OHXdb
goPu+EOkrTnIRB8r6erpEIMEXXfb+nkuVGigPxfVavnzb6C5gKMIWulpu3aLRCDK
xsf3NU58QdhubOiQyMYJrICbSgfmfEYnbVOYR0oOrLXh7nrUO+UmgaCevemqIGeA
4MgskVCdiJSJ3wD+s9wGsKHKWql0sU2F9arC/rqVEm6GlG9VAodunwKH87Jhxtx6
Ik8MVyITjrrvi8o6tbFJwkqmtubwVHSAENlZ2QIpQNeX9sXFOd4aZWinLFZHDIz+
ZAFdJ/JOZ+iN68wZDqWaSgy+iaCLv2YTGbkVPRnKdDMxbHRlUGB3rCXDVYwE/TUM
IOnuU72v4iuf
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:53 2025 by rpki-client