Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z98EF_9FuPpbe9iYtNCvAwDu9wg.roa
File: Z98EF_9FuPpbe9iYtNCvAwDu9wg.roa (raw, json)
Hash identifier: iZrkQqDp3Q8dR5vN6QJqHp4K+mXukNyh75nUNKrwAzA=
Subject key identifier: 67:DF:04:17:FF:45:B8:FA:5B:7B:D8:98:B4:D0:AF:03:00:EE:F7:08
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019549B34465A5500310F1B316251102CD40
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z98EF_9FuPpbe9iYtNCvAwDu9wg.roa
Signing time: Thu 27 Feb 2025 23:17:19 +0000
ROA not before: Thu 27 Feb 2025 23:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 5.175.136.0/24 maxlen: 24
89.144.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:49:b3:44:65:a5:50:03:10:f1:b3:16:25:11:02:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 23:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67df0417ff45b8fa5b7bd898b4d0af0300eef708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:bd:f0:35:6e:25:b3:e8:e0:cc:f6:e5:55:
66:e4:6b:06:ba:dd:b9:83:c3:98:d8:9c:3f:bd:c9:
18:c3:4c:95:69:6d:09:8f:9a:c9:ea:78:50:57:25:
a1:a7:dd:65:4a:1b:e1:9a:f7:d1:b7:18:b3:fe:b5:
fd:f1:c3:67:1e:89:32:1b:8f:0c:cc:75:54:8d:bc:
4e:5b:02:50:df:0a:85:88:bf:f0:d8:24:db:e4:c4:
e9:ab:89:52:35:5a:28:20:3f:03:85:8a:f6:15:d5:
7e:b1:c8:3f:25:18:61:1e:d5:9d:00:0b:37:38:4d:
37:2b:2d:51:bd:bd:df:26:6f:e3:b1:cd:26:05:9b:
5c:33:89:01:fe:5a:9a:28:05:30:2b:7f:ea:82:75:
60:d3:7c:c9:6e:fc:a6:e8:0e:de:a3:db:bb:cc:b6:
cd:91:fe:21:2c:f8:4c:99:e2:35:31:f7:83:f4:fa:
a7:df:49:9a:7e:7e:c7:91:b4:11:3a:31:42:31:4b:
dc:1a:90:ad:96:82:7f:82:f0:d3:c6:c0:ae:6d:d9:
79:58:0d:9e:5d:8b:ad:be:c7:a0:03:08:08:a4:61:
83:2a:3b:c8:cb:9d:06:0a:d0:77:bb:60:aa:64:3d:
fc:78:1e:69:c5:39:a9:c7:60:c8:41:b7:46:52:76:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:04:17:FF:45:B8:FA:5B:7B:D8:98:B4:D0:AF:03:00:EE:F7:08
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z98EF_9FuPpbe9iYtNCvAwDu9wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.136.0/24
89.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
76:16:0f:44:93:eb:29:c9:20:0c:f0:d8:43:74:ec:6c:c6:6e:
e2:40:45:12:d7:a0:ec:05:90:22:22:80:18:91:b7:17:7f:f4:
4d:62:85:04:c5:6c:82:94:6e:7e:89:56:d3:f3:e3:44:39:60:
1b:9e:da:f8:16:46:1a:4d:21:62:95:2e:c9:a2:1c:3c:be:bc:
5f:bb:4c:48:a1:f4:14:ef:82:4f:15:25:55:17:a5:68:24:6a:
5e:13:41:a2:bc:c4:0a:1a:76:1a:05:f5:0a:48:29:f5:3b:4f:
83:15:17:eb:a0:19:5a:2f:49:eb:30:e0:f9:19:09:53:4b:05:
d2:66:37:fa:9b:7b:c2:f4:68:08:cf:df:cb:bd:c1:a2:be:7e:
b9:27:88:d9:6c:0f:ad:9e:4c:1f:cb:a9:dc:8c:7b:17:96:68:
0e:8f:44:66:d2:07:ed:80:12:e6:1d:05:43:61:ad:e8:27:7f:
ef:4f:7f:aa:18:46:f7:cd:a8:cd:ac:a4:83:9a:0e:ef:a3:11:
c9:bc:40:34:3e:da:2c:42:f8:9b:e2:5d:1d:18:4b:3c:3a:a8:
00:e2:9a:73:f4:49:e0:87:34:65:b9:16:83:aa:da:ca:3c:61:
82:07:07:ee:ee:41:14:b5:bf:77:89:73:d6:61:29:5b:ea:77:
1f:8f:f1:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVJs0RlpVADEPGzFiURAs1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjI3MjMxNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2RmMDQxN2ZmNDViOGZhNWI3YmQ4OThiNGQwYWYwMzAwZWVmNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/298DVuJbPo4Mz25VVm5GsGut25
g8OY2Jw/vckYw0yVaW0Jj5rJ6nhQVyWhp91lShvhmvfRtxiz/rX98cNnHokyG48M
zHVUjbxOWwJQ3wqFiL/w2CTb5MTpq4lSNVooID8DhYr2FdV+scg/JRhhHtWdAAs3
OE03Ky1Rvb3fJm/jsc0mBZtcM4kB/lqaKAUwK3/qgnVg03zJbvym6A7eo9u7zLbN
kf4hLPhMmeI1MfeD9Pqn30mafn7HkbQROjFCMUvcGpCtloJ/gvDTxsCubdl5WA2e
XYutvsegAwgIpGGDKjvIy50GCtB3u2CqZD38eB5pxTmpx2DIQbdGUna5kwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGffBBf/Rbj6W3vYmLTQrwMA7vcIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWjk4RUZfOUZ1UHBiZTlpWXROQ3ZBd0R1OXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+IAwQA
WZAUMA0GCSqGSIb3DQEBCwUAA4IBAQB2Fg9Ek+spySAM8NhDdOxsxm7iQEUS16Ds
BZAiIoAYkbcXf/RNYoUExWyClG5+iVbT8+NEOWAbntr4FkYaTSFilS7Johw8vrxf
u0xIofQU74JPFSVVF6VoJGpeE0GivMQKGnYaBfUKSCn1O0+DFRfroBlaL0nrMOD5
GQlTSwXSZjf6m3vC9GgIz9/LvcGivn65J4jZbA+tnkwfy6ncjHsXlmgOj0Rm0gft
gBLmHQVDYa3oJ3/vT3+qGEb3zajNrKSDmg7voxHJvEA0PtosQvib4l0dGEs8OqgA
4ppz9EnghzRluRaDqtrKPGGCBwfu7kEUtb93iXPWYSlb6ncfj/FI
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:19:59 2025 by rpki-client