Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZUBMVbD6DQFgXmXEvlniMBqyscE.roa
File: ZUBMVbD6DQFgXmXEvlniMBqyscE.roa (raw, json)
Hash identifier: kxysAJA5I6GbLI/ojtyYJY8/ptPOFyV0UghU4MDYu9E=
Subject key identifier: 65:40:4C:55:B0:FA:0D:01:60:5E:65:C4:BE:59:E2:30:1A:B2:B1:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D70E24D01735BD6A2FC099421886CAEF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZUBMVbD6DQFgXmXEvlniMBqyscE.roa
Signing time: Wed 05 Feb 2025 17:00:15 +0000
ROA not before: Wed 05 Feb 2025 17:00:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 77.90.47.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:0e:24:d0:17:35:bd:6a:2f:c0:99:42:18:86:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 5 17:00:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65404c55b0fa0d01605e65c4be59e2301ab2b1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:1a:08:6a:5b:47:cf:96:8f:50:92:d8:fb:
64:57:7f:eb:0d:da:5f:7b:32:09:a1:4c:f6:dc:40:
1d:f9:9f:1e:a2:bd:9d:f9:1a:33:91:e3:64:63:08:
0b:1d:22:da:50:f0:e6:89:01:45:ea:c7:80:f1:e5:
c9:b4:9f:4e:fb:c7:3a:84:6a:bd:14:59:e6:db:d3:
84:32:15:8a:6b:4f:f0:21:9e:c5:6a:50:2b:97:f5:
21:2c:e6:bc:4b:e1:d2:fb:66:30:7e:f2:77:fd:7d:
5e:a0:84:e6:b4:da:86:1f:12:8b:e9:f6:d4:f5:89:
15:26:73:76:37:d8:f8:d5:c7:67:6e:d8:c6:d0:65:
2e:f8:15:06:40:c5:f6:89:75:a4:10:f2:d2:e5:5a:
b5:85:b0:bd:b8:78:f3:66:5c:33:82:08:79:86:cc:
6c:2f:4f:8c:db:2b:a8:95:d7:73:05:0e:c4:32:ae:
2d:0c:a1:c6:f0:71:7c:e2:1e:7a:da:0b:35:57:d8:
d7:28:4e:03:8b:07:3e:6f:e1:94:8f:e3:9a:a6:97:
45:1c:68:0a:b9:b6:d5:77:23:69:8e:8e:32:a4:b7:
a7:f7:00:25:28:34:7c:c2:e7:8c:40:c9:f3:c1:de:
25:1c:82:22:24:d7:4f:96:b4:f3:6d:79:89:a3:13:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:4C:55:B0:FA:0D:01:60:5E:65:C4:BE:59:E2:30:1A:B2:B1:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZUBMVbD6DQFgXmXEvlniMBqyscE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.47.0/24
94.249.168.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a8:33:7c:c2:c1:08:8a:da:a8:b3:31:90:1b:ce:78:4e:42:
7a:e9:3a:51:e7:a5:d1:02:d0:3d:69:de:17:6a:27:b1:7b:7f:
24:1f:3e:96:32:20:6c:f2:2e:f1:5c:c9:65:04:de:31:fd:c8:
bd:33:e9:23:75:62:1e:ad:2e:5b:ff:1c:06:d2:d9:8f:8d:35:
a4:b9:1b:20:29:e1:b5:e4:83:f8:d0:27:d8:91:66:5d:d7:41:
15:3b:38:22:ad:d1:a5:62:b9:3a:a6:9b:eb:ee:65:b3:54:52:
d9:27:3f:d3:63:53:55:ff:bf:da:66:52:5e:95:1b:8e:d7:bf:
5d:4c:10:77:8f:d0:c5:93:b5:df:21:b2:a7:18:7b:a3:64:5b:
af:7b:b5:cb:a4:ee:41:45:dd:74:88:30:5a:3f:68:b5:7d:4d:
8e:55:9d:cd:f1:50:00:61:d8:6a:b0:9d:d0:d1:69:dd:39:a3:
83:b6:0a:98:b8:c6:f8:cb:78:3c:f4:a1:81:f4:fb:25:ab:92:
63:a2:e0:43:31:57:30:b5:7d:6e:6e:de:76:1d:9b:b1:be:ec:
a9:64:79:25:c5:e8:25:1f:8c:f7:f4:43:10:d8:c2:05:b7:ae:
59:6d:d6:6d:d1:3d:39:61:42:48:6f:fb:40:f8:5d:ad:25:89:
0f:5e:ec:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTXDiTQFzW9ai/AmUIYhsrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjA1MTcwMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTQwNGM1NWIwZmEwZDAxNjA1ZTY1YzRiZTU5ZTIzMDFhYjJiMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOoaCGpbR8+Wj1CS2PtkV3/rDdpf
ezIJoUz23EAd+Z8eor2d+RozkeNkYwgLHSLaUPDmiQFF6seA8eXJtJ9O+8c6hGq9
FFnm29OEMhWKa0/wIZ7FalArl/UhLOa8S+HS+2YwfvJ3/X1eoITmtNqGHxKL6fbU
9YkVJnN2N9j41cdnbtjG0GUu+BUGQMX2iXWkEPLS5Vq1hbC9uHjzZlwzggh5hsxs
L0+M2yuolddzBQ7EMq4tDKHG8HF84h562gs1V9jXKE4Diwc+b+GUj+OappdFHGgK
ubbVdyNpjo4ypLen9wAlKDR8wueMQMnzwd4lHIIiJNdPlrTzbXmJoxO2lwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGVATFWw+g0BYF5lxL5Z4jAasrHBMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWlVCTVZiRDZEUUZnWG1YRXZsbmlNQnF5c2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVovAwQA
XvmoAwQAuXlFMA0GCSqGSIb3DQEBCwUAA4IBAQC4qDN8wsEIitqoszGQG854TkJ6
6TpR56XRAtA9ad4Xaiexe38kHz6WMiBs8i7xXMllBN4x/ci9M+kjdWIerS5b/xwG
0tmPjTWkuRsgKeG15IP40CfYkWZd10EVOzgirdGlYrk6ppvr7mWzVFLZJz/TY1NV
/7/aZlJelRuO179dTBB3j9DFk7XfIbKnGHujZFuve7XLpO5BRd10iDBaP2i1fU2O
VZ3N8VAAYdhqsJ3Q0WndOaODtgqYuMb4y3g89KGB9Pslq5JjouBDMVcwtX1ubt52
HZuxvuypZHklxeglH4z39EMQ2MIFt65ZbdZt0T05YUJIb/tA+F2tJYkPXuyD
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:50 2025 by rpki-client