Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa
File: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (raw, json)
Hash identifier: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=
Subject key identifier: 66:8F:F3:A2:B9:7C:53:A2:26:90:55:2A:63:F7:A3:41:1B:CB:25:CD
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019422200F604D34B4C46F1038E02598B242
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6774
IP address blocks: 80.84.16.0/20 maxlen: 20
80.84.29.0/24 maxlen: 24
80.84.30.0/24 maxlen: 24
80.84.31.0/24 maxlen: 24
94.102.160.0/20 maxlen: 20
94.102.175.0/24 maxlen: 24
195.234.24.0/24 maxlen: 24
213.137.128.0/21 maxlen: 21
213.137.134.0/24 maxlen: 24
213.137.135.0/24 maxlen: 24
213.137.136.0/24 maxlen: 24
213.137.137.0/24 maxlen: 24
213.137.138.0/24 maxlen: 24
213.137.139.0/24 maxlen: 24
213.137.158.0/24 maxlen: 24
2001:9b8::/32 maxlen: 32
2001:9b8:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:60:4d:34:b4:c4:6f:10:38:e0:25:98:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=668ff3a2b97c53a22690552a63f7a3411bcb25cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:a7:ec:ce:87:75:aa:72:26:99:e1:f9:28:
e0:29:ba:3f:20:01:94:a0:40:45:2e:46:29:ef:34:
0d:6c:a7:92:ff:44:59:b7:79:e8:3d:d8:99:cb:35:
32:5d:12:b6:29:78:25:ce:60:35:ff:89:f5:80:91:
b4:ac:8b:66:cf:11:e4:94:d1:7b:0c:f8:36:73:45:
ae:fb:9b:2b:56:51:50:c5:0d:5b:2d:77:76:c9:8a:
dc:9f:4a:72:51:71:ab:c3:af:f2:4b:21:e9:b3:68:
3c:82:8f:a3:8b:f8:d1:4f:10:0d:68:ec:3e:a0:81:
d0:d2:61:c2:c3:7a:e9:c2:fe:4e:48:22:55:73:1f:
32:72:e7:62:bf:77:2c:c5:fd:c8:0f:78:18:59:1d:
2b:59:82:0b:2c:18:c8:f3:97:02:dd:74:a2:93:97:
46:da:d6:b4:d1:86:7d:15:5b:e0:a2:7e:61:6b:6a:
b1:01:81:bb:cb:4f:97:28:8f:4d:05:4a:63:a6:46:
69:18:f5:11:51:cb:6f:15:a7:df:b9:18:4a:6e:4b:
5c:45:b4:05:f5:44:cf:9c:aa:2b:4c:f9:30:f1:ce:
6d:dc:cb:db:19:87:66:23:3f:25:bf:d3:12:85:5f:
bf:b6:e2:8f:4e:5b:84:ef:f7:aa:94:12:38:77:a7:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:F3:A2:B9:7C:53:A2:26:90:55:2A:63:F7:A3:41:1B:CB:25:CD
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.16.0/20
94.102.160.0/20
195.234.24.0/24
213.137.128.0-213.137.139.255
213.137.158.0/24
IPv6:
2001:9b8::/32
Signature Algorithm: sha256WithRSAEncryption
24:a1:a9:4b:35:d3:f1:25:e8:c5:a1:d5:79:14:1e:a3:b2:6f:
7b:5e:c1:cf:2c:0d:ea:85:d1:09:a8:f9:5a:02:db:74:55:52:
1e:31:e5:41:51:83:c7:ef:58:25:07:b8:96:46:47:9e:3e:ad:
20:0c:2d:a6:d0:a7:44:7c:da:e0:2d:ed:7a:e8:16:be:10:01:
2b:6c:af:80:3d:8d:14:e0:e8:fc:ef:62:af:0a:5a:34:e1:d5:
9e:3c:40:21:64:3d:85:49:c7:cf:34:92:13:e0:5f:38:bc:6f:
76:03:a9:c1:38:ea:c0:c3:60:23:21:5c:68:6c:04:5b:71:0e:
0b:18:bc:54:2e:c0:ef:b4:40:6d:80:84:08:01:d1:eb:eb:61:
24:58:04:66:7c:71:76:16:44:08:53:85:ff:c7:7b:fe:fa:97:
62:09:13:73:2b:4b:4d:e0:18:73:a1:b8:f8:85:79:74:91:32:
93:2a:cc:f7:b8:d3:13:68:60:56:6c:87:54:3b:f5:6d:62:12:
0c:56:31:83:29:3c:75:7b:c3:9c:c0:10:78:c0:23:f7:79:ec:
d6:ea:cb:bf:04:f5:24:90:28:ab:63:56:0c:b7:0f:40:3d:d5:
c3:e6:0d:41:ec:4c:30:a9:c4:1b:bd:88:a1:8a:51:e7:bb:5f:
49:a3:17:c2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZQiIA9gTTS0xG8QOOAlmLJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhM2NlNWM1YTczMGNkOGUyZmYxZjU1ZDE4MGYxYTgxYjMw
MDBjYzgwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjhmZjNhMmI5N2M1M2EyMjY5MDU1MmE2M2Y3YTM0MTFiY2IyNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc2n7M6HdapyJpnh+SjgKbo/IAGU
oEBFLkYp7zQNbKeS/0RZt3noPdiZyzUyXRK2KXglzmA1/4n1gJG0rItmzxHklNF7
DPg2c0Wu+5srVlFQxQ1bLXd2yYrcn0pyUXGrw6/ySyHps2g8go+ji/jRTxANaOw+
oIHQ0mHCw3rpwv5OSCJVcx8ycudiv3csxf3ID3gYWR0rWYILLBjI85cC3XSik5dG
2ta00YZ9FVvgon5ha2qxAYG7y0+XKI9NBUpjpkZpGPURUctvFaffuRhKbktcRbQF
9UTPnKorTPkw8c5t3MvbGYdmIz8lv9MShV+/tuKPTluE7/eqlBI4d6d0AwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFGaP86K5fFOiJpBVKmP3o0EbyyXNMB8GA1UdIwQY
MBaAFJo85cWnMM2OL/H1XRgPGoGzAAzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWp6bHhhY3d6WTR2OGZWZEdBOGFnYk1BRE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTgwYjItZjZhNC00ZGU2LTkxMDMt
YTAxZDcyOWIwYTIxLzEvWm9fem9ybDhVNklta0ZVcVlfZWpRUnZMSmMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNTgwYjItZjZhNC00ZGU2LTkxMDMtYTAxZDcyOWIwYTIx
LzEvbWp6bHhhY3d6WTR2OGZWZEdBOGFnYk1BRE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQEUFQQAwQE
XmagAwQAw+oYMAwDBAfViYADBALViYgDBADViZ4wDQQCAAIwBwMFACABCbgwDQYJ
KoZIhvcNAQELBQADggEBACShqUs10/El6MWh1XkUHqOyb3tewc8sDeqF0Qmo+VoC
23RVUh4x5UFRg8fvWCUHuJZGR54+rSAMLabQp0R82uAt7XroFr4QAStsr4A9jRTg
6PzvYq8KWjTh1Z48QCFkPYVJx880khPgXzi8b3YDqcE46sDDYCMhXGhsBFtxDgsY
vFQuwO+0QG2AhAgB0evrYSRYBGZ8cXYWRAhThf/He/76l2IJE3MrS03gGHOhuPiF
eXSRMpMqzPe40xNoYFZsh1Q79W1iEgxWMYMpPHV7w5zAEHjAI/d57Nbqy78E9SSQ
KKtjVgy3D0A91cPmDUHsTDCpxBu9iKGKUee7X0mjF8I=
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:38:22 2025 by rpki-client