Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa
File: 1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa (raw, json)
Hash identifier: NHkVAtdEjUnA2SCcMg/CpdPj8emXX0V3c3ArPmZsQPo=
Subject key identifier: F9:94:D7:77:A3:E6:4E:62:0C:10:C7:B5:D3:45:B9:34:60:D1:8F:77
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0194266C3C074EF8C6E1D97030889F899DC2
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.11.0/24 maxlen: 24
185.50.206.0/24 maxlen: 24
185.50.207.0/24 maxlen: 24
188.119.104.0/24 maxlen: 24
193.43.75.0/24 maxlen: 24
193.43.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:07:4e:f8:c6:e1:d9:70:30:88:9f:89:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f994d777a3e64e620c10c7b5d345b93460d18f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:1a:3f:95:fb:2c:c3:cc:c4:1a:af:17:9d:
15:88:89:9a:23:45:1b:c6:ae:d5:05:b4:87:60:63:
f1:17:42:d8:ae:61:3c:fb:bb:bd:38:e6:7e:41:69:
2a:f0:e7:4f:99:90:6f:99:1f:c4:73:c0:df:c0:ff:
0a:3d:97:31:5b:63:ab:2a:80:4f:d8:2c:d0:00:97:
21:fd:f2:37:c6:ab:b2:39:4b:1c:8a:36:86:f1:06:
47:7f:82:eb:f0:65:6f:ac:07:b7:62:5c:4c:15:95:
ee:db:ef:06:80:6d:a6:7d:60:02:d5:e7:96:46:f1:
ee:d3:2f:bf:04:50:1a:1c:24:47:af:3f:ed:bf:a9:
28:a0:95:07:f5:df:38:9e:ca:93:c7:97:6b:6d:36:
5f:d9:ed:36:ce:34:41:31:d7:60:d9:3e:5f:a8:f9:
1e:7f:6c:34:a8:a3:d9:db:e2:7a:7d:ed:78:20:a8:
13:a2:bf:7f:c0:07:26:5e:41:d7:39:53:9c:f7:96:
ff:64:0e:9d:14:28:0f:78:39:f6:96:7c:cd:e3:2f:
3e:36:84:d4:8d:64:01:08:53:82:6f:8b:24:71:7f:
8f:e7:cd:eb:2d:ba:e3:54:93:da:3a:0e:00:54:bf:
4c:93:d1:99:74:8d:d5:16:30:78:ad:ff:18:1f:76:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:D7:77:A3:E6:4E:62:0C:10:C7:B5:D3:45:B9:34:60:D1:8F:77
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.11.0/24
185.50.206.0/23
188.119.104.0/24
193.43.75.0/24
193.43.98.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e2:a0:66:2c:b5:8f:9b:1f:ac:33:7e:e8:21:6f:db:cb:f9:
93:52:84:19:d0:c0:04:e1:a5:7d:67:bd:b9:c2:bc:c7:54:59:
16:36:a6:39:84:6e:a4:6b:bf:29:b0:72:e0:36:ab:fa:20:a0:
af:81:fc:9c:59:03:d7:e1:75:5c:33:e1:3c:b8:22:f7:80:d8:
4a:60:97:1e:33:7f:5e:dd:0d:29:7a:68:b2:20:27:67:b3:c2:
d2:d4:a6:66:66:95:e4:4c:6a:18:2b:0e:8f:be:07:ea:40:d1:
d7:3b:cb:85:67:f0:15:79:ba:6b:b5:b7:55:7d:91:6b:9c:09:
66:97:1f:74:52:1b:cc:36:ef:60:de:7a:73:c0:14:46:7a:31:
25:ab:2f:ae:5b:10:e3:4d:e4:59:03:73:23:ee:1d:5e:1c:fc:
46:30:42:eb:9b:3f:e7:8a:40:7c:e1:ea:e8:2e:f4:62:2b:69:
fc:89:c2:d3:e7:21:8b:77:6d:94:1b:52:46:9a:94:ff:ab:67:
aa:7c:26:07:69:9b:c9:61:25:b1:a9:45:cc:5a:bd:5e:94:e5:
90:d6:a5:c1:04:87:22:2e:bf:77:9a:ae:42:31:6b:9f:14:64:
88:eb:d9:ef:01:12:7c:65:0f:79:f2:b3:23:3d:aa:57:c3:70:
97:e3:b4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQmbDwHTvjG4dlwMIifiZ3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjBkNTM1ZWViY2YyOGU2MGFjOThhZTQ5NWIzNDk4MWI1
YTkzZWMwHhcNMjUwMTAyMDk1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTk0ZDc3N2EzZTY0ZTYyMGMxMGM3YjVkMzQ1YjkzNDYwZDE4Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB0aP5X7LMPMxBqvF50ViImaI0Ub
xq7VBbSHYGPxF0LYrmE8+7u9OOZ+QWkq8OdPmZBvmR/Ec8DfwP8KPZcxW2OrKoBP
2CzQAJch/fI3xquyOUscijaG8QZHf4Lr8GVvrAe3YlxMFZXu2+8GgG2mfWAC1eeW
RvHu0y+/BFAaHCRHrz/tv6kooJUH9d84nsqTx5drbTZf2e02zjRBMddg2T5fqPke
f2w0qKPZ2+J6fe14IKgTor9/wAcmXkHXOVOc95b/ZA6dFCgPeDn2lnzN4y8+NoTU
jWQBCFOCb4skcX+P583rLbrjVJPaOg4AVL9Mk9GZdI3VFjB4rf8YH3ajKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmU13ej5k5iDBDHtdNFuTRg0Y93MB8GA1UdIwQY
MBaAFMOw1TXuvPKOYKyYrklbNJgbWpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmIt
OTUxOTY5M2VhYTdiLzEvMS1aVFhkNlBtVG1JTUVNZTEwMFc1TkdEUmozYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmUvNTUxZTkyLTk5MmQtNDFkYS05ODZiLTk1MTk2OTNlYWE3
Yi8xL3c3RFZOZTY4OG81Z3JKaXVTVnMwbUJ0YWstdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAC0NCwME
AbkyzgMEALx3aAMEAMErSwMEAMErYjANBgkqhkiG9w0BAQsFAAOCAQEAGOKgZiy1
j5sfrDN+6CFv28v5k1KEGdDABOGlfWe9ucK8x1RZFjamOYRupGu/KbBy4Dar+iCg
r4H8nFkD1+F1XDPhPLgi94DYSmCXHjN/Xt0NKXposiAnZ7PC0tSmZmaV5ExqGCsO
j74H6kDR1zvLhWfwFXm6a7W3VX2Ra5wJZpcfdFIbzDbvYN56c8AURnoxJasvrlsQ
403kWQNzI+4dXhz8RjBC65s/54pAfOHq6C70Yitp/InC0+chi3dtlBtSRpqU/6tn
qnwmB2mbyWElsalFzFq9XpTlkNalwQSHIi6/d5quQjFrnxRkiOvZ7wESfGUPefKz
Iz2qV8Nwl+O0uw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:06 2025 by rpki-client