Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa
File: RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa (raw, json)
Hash identifier: mHTuz89sEZswLAvVyf4aCavMINMyLcZOi1mRW8tq0vE=
Subject key identifier: 45:93:26:02:89:89:AE:AB:34:C8:25:3E:4A:5E:A9:48:5B:79:94:B4
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 0194221FC3DA067418468CFEF123C026678C
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 195.242.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:da:06:74:18:46:8c:fe:f1:23:c0:26:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=459326028989aeab34c8253e4a5ea9485b7994b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:cf:c6:6b:e2:62:e0:7e:64:b9:66:94:41:
8d:38:8d:18:80:6d:ee:48:3b:d7:48:f2:68:56:15:
ec:e3:53:fe:9e:04:94:5a:00:af:12:5f:96:0c:2f:
ea:78:ba:22:cd:c8:2b:09:2d:b3:c9:b9:28:29:b1:
87:bb:12:66:d6:51:38:a7:61:86:65:84:fd:e5:3f:
84:0a:aa:16:9a:6c:5a:eb:81:27:5d:66:b3:76:de:
ed:41:47:eb:63:e8:55:ed:bc:18:38:5b:db:c6:d9:
25:20:2b:03:59:5a:a1:f9:dd:1d:ea:d6:f5:a5:e1:
b2:b6:01:4d:08:7e:27:81:00:0a:f3:9f:32:04:1c:
2b:1f:0a:77:6a:4f:0b:bc:41:ae:f5:83:b5:51:24:
f8:e3:5c:5a:76:46:68:d9:f5:9d:95:49:21:59:33:
62:53:40:93:39:a4:69:33:05:f4:8f:d4:46:78:34:
7f:7f:44:96:2f:57:b9:1a:cc:b0:d1:84:dd:26:28:
95:90:09:27:d8:ca:81:a5:e7:9c:ab:2a:f3:35:01:
57:12:0b:a8:98:c5:58:bc:69:f0:8a:ff:c5:b6:d7:
9e:0a:4e:d2:b1:f4:28:9b:f8:47:7c:62:ce:a2:11:
a0:aa:c2:6e:a8:0f:21:52:b9:70:fc:83:69:f2:96:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:26:02:89:89:AE:AB:34:C8:25:3E:4A:5E:A9:48:5B:79:94:B4
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.140.0/23
Signature Algorithm: sha256WithRSAEncryption
89:27:d9:0c:eb:be:72:3d:d0:51:7c:d7:74:cc:92:42:ac:7b:
ab:60:0d:af:c4:f7:41:5f:c0:da:e6:71:f5:9a:3c:ad:c4:e4:
f7:28:ef:25:5f:41:8f:c9:01:88:13:79:55:c9:40:6a:ed:7d:
d3:ea:e7:c1:2e:9e:df:1f:31:79:4c:e4:34:40:12:c6:bc:2e:
97:f2:3e:29:d3:3d:12:77:c7:c3:29:72:ec:4f:bd:ba:f0:76:
86:4f:a2:1e:ba:f3:ef:41:9c:93:bf:d5:89:49:4a:59:fe:2f:
e7:11:ab:60:17:cc:cf:08:60:be:64:a1:d8:f9:c2:95:8b:76:
99:5b:cd:ea:90:fc:b5:03:c2:64:bf:ef:fd:12:96:dc:29:2c:
1c:f8:9b:62:df:fe:a0:00:65:a7:eb:43:b8:e7:c2:60:dd:63:
59:8b:71:b8:b9:83:2f:0f:36:95:27:5d:f7:30:d5:7f:76:9e:
49:af:bd:6e:3e:f4:4d:b1:3e:08:2b:46:4e:e0:6f:37:ca:b2:
b9:a8:cf:da:1a:89:39:fc:3c:15:bb:a5:24:97:52:26:fa:42:
13:c2:61:22:d0:84:fb:6a:84:6a:7e:59:f5:6d:36:2c:09:0c:
aa:ff:8f:6c:82:90:59:25:4c:20:88:66:26:db:95:e4:0d:0e:
2b:23:db:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH8PaBnQYRoz+8SPAJmeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZjdmMzJkMzNmNjY0Njc3OWE1MWZiMjMyMDFjNjQ0MmQx
NDUxY2EwHhcNMjUwMTAxMTM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkzMjYwMjg5ODlhZWFiMzRjODI1M2U0YTVlYTk0ODViNzk5NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZzPxmviYuB+ZLlmlEGNOI0YgG3u
SDvXSPJoVhXs41P+ngSUWgCvEl+WDC/qeLoizcgrCS2zybkoKbGHuxJm1lE4p2GG
ZYT95T+ECqoWmmxa64EnXWazdt7tQUfrY+hV7bwYOFvbxtklICsDWVqh+d0d6tb1
peGytgFNCH4ngQAK858yBBwrHwp3ak8LvEGu9YO1UST441xadkZo2fWdlUkhWTNi
U0CTOaRpMwX0j9RGeDR/f0SWL1e5Gsyw0YTdJiiVkAkn2MqBpeecqyrzNQFXEguo
mMVYvGnwiv/FtteeCk7SsfQom/hHfGLOohGgqsJuqA8hUrlw/INp8pYgXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWTJgKJia6rNMglPkpeqUhbeZS0MB8GA1UdIwQY
MBaAFIr38y0z9mRneaUfsjIBxkQtFFHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZmekxUUDJaR2Q1cFIteU1nSEdSQzBVVWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hZmZjYmItYzFiMy00NDRhLTg3NmMt
NWI3MmZiOTI3ZDFjLzEvUlpNbUFvbUpycXMweUNVLVNsNnBTRnQ1bExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hZmZjYmItYzFiMy00NDRhLTg3NmMtNWI3MmZiOTI3ZDFj
LzEvaXZmekxUUDJaR2Q1cFIteU1nSEdSQzBVVWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/KMMA0G
CSqGSIb3DQEBCwUAA4IBAQCJJ9kM675yPdBRfNd0zJJCrHurYA2vxPdBX8Da5nH1
mjytxOT3KO8lX0GPyQGIE3lVyUBq7X3T6ufBLp7fHzF5TOQ0QBLGvC6X8j4p0z0S
d8fDKXLsT7268HaGT6IeuvPvQZyTv9WJSUpZ/i/nEatgF8zPCGC+ZKHY+cKVi3aZ
W83qkPy1A8Jkv+/9EpbcKSwc+Jti3/6gAGWn60O458Jg3WNZi3G4uYMvDzaVJ133
MNV/dp5Jr71uPvRNsT4IK0ZO4G83yrK5qM/aGok5/DwVu6Ukl1Im+kITwmEi0IT7
aoRqfln1bTYsCQyq/49sgpBZJUwgiGYm25XkDQ4rI9tO
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:09 2025 by rpki-client