Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZEltVn27Wr_tDWWUDsnoIPSexys.roa
File: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (raw, json)
Hash identifier: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=
Subject key identifier: 64:49:6D:56:7D:BB:5A:BF:ED:0D:65:94:0E:C9:E8:20:F4:9E:C7:2B
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 01942521ACB6D1F0A1D71090C01BA2CC9B57
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZEltVn27Wr_tDWWUDsnoIPSexys.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203011
IP address blocks: 80.75.209.0/24 maxlen: 24
193.28.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ac:b6:d1:f0:a1:d7:10:90:c0:1b:a2:cc:9b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64496d567dbb5abfed0d65940ec9e820f49ec72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:9a:eb:dc:00:18:bd:af:4f:0d:4a:cf:0b:
57:48:d8:30:ff:8e:a3:8a:5a:78:a5:7d:70:5e:16:
fa:34:a4:20:51:1a:6d:7c:75:c3:98:fc:3c:00:9e:
54:5a:2a:0f:bd:4b:b9:ee:34:d1:d5:91:5b:06:86:
fa:52:73:7c:e9:2f:97:f6:09:bb:5c:60:85:30:a9:
5c:14:fe:db:ac:95:19:45:5b:41:0a:1e:7d:c4:99:
d0:26:e5:b3:56:ed:73:5a:a8:3f:57:a2:1d:f9:a1:
4e:2c:27:45:7f:e5:05:f6:bc:57:b9:a2:2c:b4:5c:
56:70:d7:09:12:3d:bd:0a:7b:71:51:82:14:c5:b4:
a8:82:80:c7:14:1d:94:c1:3d:e9:97:d9:5f:8d:87:
bb:29:5f:95:0a:31:7d:a7:21:03:4a:29:49:2d:4c:
f2:15:5c:6c:bb:c3:28:68:54:25:c9:29:23:fe:86:
5c:a6:7b:44:7c:de:04:49:a1:d5:c4:09:7b:3b:38:
93:f4:02:98:26:69:a1:b9:c2:ac:15:a9:4c:ee:a7:
51:96:52:70:a7:4c:05:d2:66:3d:d8:4f:3b:07:4c:
5e:94:b8:f9:68:70:6a:5b:a5:7c:46:0e:42:fe:4c:
1f:94:71:33:fe:0d:98:93:73:41:e1:64:f9:d1:9c:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:6D:56:7D:BB:5A:BF:ED:0D:65:94:0E:C9:E8:20:F4:9E:C7:2B
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZEltVn27Wr_tDWWUDsnoIPSexys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.209.0/24
193.28.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bb:32:6f:89:7c:da:33:88:87:95:0a:05:d9:64:67:4e:3e:
b2:3a:fb:ba:a3:4b:c7:f2:e0:a8:f2:7a:97:93:2a:60:9d:6a:
43:1c:2a:34:f2:68:0f:9e:c3:53:f9:85:42:5b:3b:8d:91:21:
7e:ca:1f:da:08:1c:91:ae:d6:24:21:e8:31:cc:44:0f:fa:c2:
ae:17:fc:b2:2b:74:61:b6:e0:2c:2f:9b:aa:83:fb:b7:a1:59:
ef:e1:fb:6b:b7:c9:51:22:38:10:c5:49:4b:00:92:45:e9:e1:
f8:27:b2:72:a1:3f:04:2e:65:69:b3:0b:aa:4d:ec:6c:86:a5:
e8:b0:22:c4:e2:39:61:b9:99:eb:92:f7:98:e7:08:f1:8e:71:
52:38:f5:e3:90:7d:a3:5a:52:e0:69:35:e9:f3:78:ac:79:f4:
70:0f:a5:e1:21:a3:84:d6:08:f4:76:af:43:a2:ba:c0:bd:5f:
68:03:05:3e:c1:19:54:64:5d:65:79:db:9a:3d:68:10:22:b6:
80:90:fe:bd:98:2f:97:03:3f:bc:b5:54:fd:22:8c:25:31:25:
ba:55:27:c0:e0:76:c0:9a:13:13:67:9d:b8:0b:f8:d1:34:e1:
cf:67:12:ff:0f:f7:d5:bf:7b:85:62:cf:7c:d6:27:ee:93:98:
b5:92:a0:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIay20fCh1xCQwBuizJtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5
MDY4Y2IwHhcNMjUwMTAyMDM0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDQ5NmQ1NjdkYmI1YWJmZWQwZDY1OTQwZWM5ZTgyMGY0OWVjNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uua69wAGL2vTw1KzwtXSNgw/46j
ilp4pX1wXhb6NKQgURptfHXDmPw8AJ5UWioPvUu57jTR1ZFbBob6UnN86S+X9gm7
XGCFMKlcFP7brJUZRVtBCh59xJnQJuWzVu1zWqg/V6Id+aFOLCdFf+UF9rxXuaIs
tFxWcNcJEj29CntxUYIUxbSogoDHFB2UwT3pl9lfjYe7KV+VCjF9pyEDSilJLUzy
FVxsu8MoaFQlySkj/oZcpntEfN4ESaHVxAl7OziT9AKYJmmhucKsFalM7qdRllJw
p0wF0mY92E87B0xelLj5aHBqW6V8Rg5C/kwflHEz/g2Yk3NB4WT50ZzKuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGRJbVZ9u1q/7Q1llA7J6CD0nscrMB8GA1UdIwQY
MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt
MDNmYTdhOWMzNzFlLzEvWkVsdFZuMjdXcl90RFdXVURzbm9JUFNleHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl
LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEvRAwQA
wRywMA0GCSqGSIb3DQEBCwUAA4IBAQA8uzJviXzaM4iHlQoF2WRnTj6yOvu6o0vH
8uCo8nqXkypgnWpDHCo08mgPnsNT+YVCWzuNkSF+yh/aCByRrtYkIegxzEQP+sKu
F/yyK3RhtuAsL5uqg/u3oVnv4ftrt8lRIjgQxUlLAJJF6eH4J7JyoT8ELmVpswuq
TexshqXosCLE4jlhuZnrkveY5wjxjnFSOPXjkH2jWlLgaTXp83isefRwD6XhIaOE
1gj0dq9DorrAvV9oAwU+wRlUZF1leduaPWgQIraAkP69mC+XAz+8tVT9IowlMSW6
VSfA4HbAmhMTZ524C/jRNOHPZxL/D/fVv3uFYs981ifuk5i1kqDQ
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:12 2025 by rpki-client