Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZGiCbmtxwQrNxjBUhWBC9rVSgK0.roa
File: ZGiCbmtxwQrNxjBUhWBC9rVSgK0.roa (raw, json)
Hash identifier: BPc9QMclsKH7jFjXemCWeBJyr0yLoBGSRBqxeXVR5Bc=
Subject key identifier: 64:68:82:6E:6B:71:C1:0A:CD:C6:30:54:85:60:42:F6:B5:52:80:AD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2D8D723E1C8325ED6A5319AA194C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZGiCbmtxwQrNxjBUhWBC9rVSgK0.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56746
IP address blocks: 81.180.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2d:8d:72:3e:1c:83:25:ed:6a:53:19:aa:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6468826e6b71c10acdc63054856042f6b55280ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:18:cf:2a:06:9e:1e:b9:43:9e:58:19:61:
77:61:fc:5b:83:ab:b2:2d:8f:83:9d:44:67:8a:c2:
f5:f4:8a:6f:fc:00:f2:ef:50:f8:db:3b:88:d2:6e:
7a:3b:d3:bf:88:1a:26:69:8f:7d:3d:63:8f:65:43:
08:a6:72:a4:a5:b5:ba:6e:fe:48:91:94:61:e6:c2:
8d:fa:70:54:e6:bb:ec:44:9f:95:b4:d9:9e:03:13:
8b:06:03:1d:ec:bd:3e:5e:09:86:6c:ab:ea:50:36:
a5:c5:ba:90:fc:7b:c5:23:2e:b9:31:91:1d:ed:ce:
2f:8d:cc:1c:fa:c3:a6:19:d5:0e:e2:d1:0d:61:5d:
0a:66:4b:28:44:91:83:bd:35:23:86:25:9d:75:f1:
29:dd:04:d4:21:32:6c:fb:f9:09:d2:4f:dd:3d:2b:
6f:5b:2d:e8:4a:98:1a:dd:c1:1d:d0:bf:56:33:9a:
4e:db:fa:45:d2:61:4b:85:59:90:d5:01:99:5e:ee:
c7:f9:ab:c7:7f:cf:12:ca:df:1c:3e:09:5a:e9:e7:
e3:fe:a9:10:13:14:62:ea:f8:1c:42:97:12:64:cc:
30:aa:07:11:2c:c5:09:95:4d:fd:f5:ce:9b:e4:b9:
82:71:e3:13:c9:10:0f:59:53:82:3b:32:09:3a:ff:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:82:6E:6B:71:C1:0A:CD:C6:30:54:85:60:42:F6:B5:52:80:AD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZGiCbmtxwQrNxjBUhWBC9rVSgK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.232.0/23
Signature Algorithm: sha256WithRSAEncryption
15:42:c8:ec:48:81:a0:35:68:88:12:c5:80:b9:69:8a:e7:49:
9d:ae:29:f9:ac:af:e3:c7:7d:f8:16:fc:1f:aa:ab:ec:36:e5:
11:dc:44:79:55:18:55:a2:e5:d9:de:85:e4:a4:98:6e:d2:b0:
35:f4:29:bc:5f:ad:e1:f9:88:e3:42:00:76:09:98:23:23:f7:
1d:1d:1f:fc:95:97:9c:90:75:75:c5:c2:da:16:ad:bd:a4:7b:
9c:97:6b:78:a5:51:85:b5:34:c2:2d:eb:03:de:4a:f5:98:0d:
a7:fa:74:ca:68:ef:13:48:eb:ba:3c:20:d5:82:c4:3a:b1:40:
82:8c:ce:71:7b:68:ba:b2:9c:18:a0:ba:5b:ce:ce:fc:f2:c9:
3a:a5:fa:cd:5c:d6:a9:38:6e:b9:dd:e3:a4:f9:5e:09:01:e7:
0e:c0:dc:86:1d:72:da:04:a3:13:e9:d7:8d:0b:07:20:02:57:
18:23:e8:d8:1d:7e:01:3d:98:83:fe:04:a8:3b:98:a7:14:06:
c2:e4:78:36:8e:69:42:93:4c:82:67:36:84:95:7a:4b:c5:df:
36:87:17:37:96:77:fa:50:a1:2c:ab:65:57:0f:39:79:3a:08:
59:b7:91:93:cc:d9:fe:05:71:63:2f:dd:10:00:3d:74:06:80:
f0:d7:86:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC2Ncj4cgyXtalMZqhlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDY4ODI2ZTZiNzFjMTBhY2RjNjMwNTQ4NTYwNDJmNmI1NTI4MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhoYzyoGnh65Q55YGWF3Yfxbg6uy
LY+DnURnisL19Ipv/ADy71D42zuI0m56O9O/iBomaY99PWOPZUMIpnKkpbW6bv5I
kZRh5sKN+nBU5rvsRJ+VtNmeAxOLBgMd7L0+XgmGbKvqUDalxbqQ/HvFIy65MZEd
7c4vjcwc+sOmGdUO4tENYV0KZksoRJGDvTUjhiWddfEp3QTUITJs+/kJ0k/dPStv
Wy3oSpga3cEd0L9WM5pO2/pF0mFLhVmQ1QGZXu7H+avHf88Syt8cPgla6efj/qkQ
ExRi6vgcQpcSZMwwqgcRLMUJlU399c6b5LmCceMTyRAPWVOCOzIJOv809wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRogm5rccEKzcYwVIVgQva1UoCtMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvWkdpQ2JtdHh3UXJOeGpCVWhXQkM5clZTZ0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUbToMA0G
CSqGSIb3DQEBCwUAA4IBAQAVQsjsSIGgNWiIEsWAuWmK50mdrin5rK/jx334Fvwf
qqvsNuUR3ER5VRhVouXZ3oXkpJhu0rA19Cm8X63h+YjjQgB2CZgjI/cdHR/8lZec
kHV1xcLaFq29pHucl2t4pVGFtTTCLesD3kr1mA2n+nTKaO8TSOu6PCDVgsQ6sUCC
jM5xe2i6spwYoLpbzs788sk6pfrNXNapOG653eOk+V4JAecOwNyGHXLaBKMT6deN
CwcgAlcYI+jYHX4BPZiD/gSoO5inFAbC5Hg2jmlCk0yCZzaElXpLxd82hxc3lnf6
UKEsq2VXDzl5OghZt5GTzNn+BXFjL90QAD10BoDw14bw
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:09:51 2025 by rpki-client