Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa
File: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (raw, json)
Hash identifier: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=
Subject key identifier: CF:6C:10:36:4C:C3:91:97:DA:00:A8:7F:B2:C2:D9:7F:16:E1:62:07
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0194221FC16BF6E1224683E16935DB38DA4B
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60772
IP address blocks: 185.32.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c1:6b:f6:e1:22:46:83:e1:69:35:db:38:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6c10364cc39197da00a87fb2c2d97f16e16207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:2a:41:c8:57:9e:5a:dd:e0:2d:cc:f4:14:
45:10:0c:e8:e8:5f:3e:09:a2:6b:42:60:d9:cc:7f:
42:f9:29:0f:7d:f1:20:40:7a:e0:22:34:a4:fd:4c:
cd:d7:ac:84:74:37:a7:ee:c7:68:47:ab:7c:8e:c7:
a6:f4:c5:f7:82:5f:7e:e6:20:dc:9d:d8:1d:08:dc:
c8:74:1d:af:48:39:79:1d:72:65:f5:57:bb:a8:9b:
a4:b8:31:65:36:bf:86:7d:f5:85:c6:b0:fa:11:f9:
6a:86:bd:5c:70:eb:b8:a3:4a:12:d3:b7:58:d5:3b:
7f:75:6e:31:3b:29:0b:27:c8:ce:8f:25:bf:d1:a5:
94:8c:29:2e:a6:d7:85:ba:24:ae:e0:a1:0b:db:78:
a1:9b:10:c5:11:80:9a:46:08:58:b7:f5:25:c9:f8:
bf:07:d8:32:be:d9:c9:28:d9:b9:0c:d0:43:0e:38:
0c:e7:e7:d8:b6:19:8b:d1:8c:1d:60:b1:b8:d3:18:
03:74:43:53:16:b2:02:f2:f5:f7:c3:14:2c:14:3a:
dd:a7:8b:79:65:a8:08:29:1d:e3:8c:7d:0a:7f:fb:
1e:31:12:9e:77:fd:d7:5a:ce:10:a9:91:8a:fe:77:
8a:29:53:e9:12:3d:8d:38:db:63:fb:3e:b8:f9:ec:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:10:36:4C:C3:91:97:DA:00:A8:7F:B2:C2:D9:7F:16:E1:62:07
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.40.0/22
Signature Algorithm: sha256WithRSAEncryption
45:db:28:2a:11:c2:8b:f4:60:13:6b:7a:88:c2:b6:dd:b8:e2:
82:b1:ef:c5:b5:b2:5e:23:eb:b5:75:cb:a3:c3:d6:0c:1c:a7:
dd:ee:32:ce:82:ef:d2:6c:fb:80:ea:42:d1:c6:83:33:6e:93:
73:8e:78:03:c0:48:67:48:3b:e1:a2:e3:45:53:e5:7c:04:e5:
57:71:56:b3:cd:fb:c4:3f:df:a6:ba:e6:8c:53:74:4b:30:87:
83:2d:55:12:fc:48:9c:a3:e6:ec:b5:c9:ab:fc:9c:86:0d:45:
72:ff:27:ef:6a:26:93:b2:90:e1:08:54:36:82:3e:22:48:93:
c3:13:08:8c:ad:1f:e8:98:43:f5:f4:75:b3:32:df:26:b3:ac:
fa:73:f4:31:3a:38:12:dc:c7:b0:8d:10:1d:51:55:5c:66:63:
83:03:26:55:98:d9:df:f4:8d:eb:27:7c:77:99:a9:cb:dd:43:
5e:ce:64:e6:2c:2f:2c:cc:46:d9:59:61:ad:20:5a:96:6d:9c:
f5:ac:79:e0:aa:76:5c:95:47:cc:0b:48:5e:ca:ec:c7:2f:97:
2f:a3:17:b2:71:c0:38:1f:a5:b8:ec:b7:89:e0:f5:0c:11:8f:
40:2c:2f:23:b3:ca:25:26:be:b1:e8:03:fc:29:38:f0:de:b6:
77:65:40:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH8Fr9uEiRoPhaTXbONpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx
ZGFjODIwHhcNMjUwMTAxMTM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjZjMTAzNjRjYzM5MTk3ZGEwMGE4N2ZiMmMyZDk3ZjE2ZTE2MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZcqQchXnlrd4C3M9BRFEAzo6F8+
CaJrQmDZzH9C+SkPffEgQHrgIjSk/UzN16yEdDen7sdoR6t8jsem9MX3gl9+5iDc
ndgdCNzIdB2vSDl5HXJl9Ve7qJukuDFlNr+GffWFxrD6Eflqhr1ccOu4o0oS07dY
1Tt/dW4xOykLJ8jOjyW/0aWUjCkupteFuiSu4KEL23ihmxDFEYCaRghYt/Ulyfi/
B9gyvtnJKNm5DNBDDjgM5+fYthmL0YwdYLG40xgDdENTFrIC8vX3wxQsFDrdp4t5
ZagIKR3jjH0Kf/seMRKed/3XWs4QqZGK/neKKVPpEj2NONtj+z64+ezM/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9sEDZMw5GX2gCof7LC2X8W4WIHMB8GA1UdIwQY
MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt
ZTlhYzJiMDAzMTZhLzEvejJ3UU5rekRrWmZhQUtoX3NzTFpmeGJoWWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh
LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSAoMA0G
CSqGSIb3DQEBCwUAA4IBAQBF2ygqEcKL9GATa3qIwrbduOKCse/FtbJeI+u1dcuj
w9YMHKfd7jLOgu/SbPuA6kLRxoMzbpNzjngDwEhnSDvhouNFU+V8BOVXcVazzfvE
P9+muuaMU3RLMIeDLVUS/Eico+bstcmr/JyGDUVy/yfvaiaTspDhCFQ2gj4iSJPD
EwiMrR/omEP19HWzMt8ms6z6c/QxOjgS3MewjRAdUVVcZmODAyZVmNnf9I3rJ3x3
manL3UNezmTmLC8szEbZWWGtIFqWbZz1rHngqnZclUfMC0heyuzHL5cvoxeyccA4
H6W47LeJ4PUMEY9ALC8js8olJr6x6AP8KTjw3rZ3ZUAA
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client