Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pzyfVcqGqM8oIh9yspKnplAOyo4.roa
File: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (raw, json)
Hash identifier: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=
Subject key identifier: A7:3C:9F:55:CA:86:A8:CF:28:22:1F:72:B2:92:A7:A6:50:0E:CA:8E
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019422FB61767B0203988E4E50708FC2B808
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pzyfVcqGqM8oIh9yspKnplAOyo4.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208971
IP address blocks: 194.183.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:61:76:7b:02:03:98:8e:4e:50:70:8f:c2:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73c9f55ca86a8cf28221f72b292a7a6500eca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:04:2a:9b:be:cc:76:96:7f:df:83:92:56:
92:47:71:59:1a:bb:37:23:26:31:05:e2:9f:a5:7d:
5f:c6:9f:00:2b:43:8a:2a:d4:8b:4e:37:29:d1:de:
2c:c2:24:71:9c:58:f7:c1:3d:eb:27:a3:c6:96:e6:
de:8b:d9:e9:1a:ec:a1:92:23:d6:10:fc:a7:2a:fb:
aa:8d:6c:93:e8:80:ff:a0:89:de:8e:13:3e:83:83:
9a:cd:63:97:5f:ce:8f:e6:2b:2f:86:df:a2:37:3f:
fc:3a:95:6d:f1:27:61:61:9f:74:c3:65:b2:d7:f5:
9b:49:ec:69:68:c5:52:51:51:41:6c:55:3b:c7:fc:
ca:ed:6a:8e:88:28:8e:d0:bd:16:95:b1:be:f6:56:
ed:08:95:bb:00:b6:d6:f6:f9:89:a2:7d:2c:ee:1e:
4b:ed:75:ac:47:82:c1:af:eb:86:ce:43:b4:7b:ec:
2a:bd:53:1c:73:c1:7a:fd:4c:7e:e9:de:9f:7f:54:
2d:83:fc:5a:68:2d:32:1f:e0:a6:6e:ca:7c:f0:c5:
f8:a5:98:03:d8:e4:70:47:7a:61:3e:06:69:a7:a0:
5e:d2:5b:87:fd:b5:5a:6b:9a:28:13:51:30:ef:b9:
67:9a:e3:40:97:bd:27:b1:e8:87:c0:2f:7c:a3:b7:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:9F:55:CA:86:A8:CF:28:22:1F:72:B2:92:A7:A6:50:0E:CA:8E
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/pzyfVcqGqM8oIh9yspKnplAOyo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.162.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f4:b2:1e:3d:7a:eb:82:47:e0:41:9a:a6:cb:e4:c7:18:dc:
e9:5f:86:25:3e:7a:5f:13:5a:cd:6a:c3:16:7a:20:d0:10:97:
ca:24:f6:52:42:3f:12:b7:c0:4a:17:71:2e:7f:f9:a8:b5:0d:
fd:5b:8e:c5:85:c6:90:43:95:1f:17:9d:76:ce:08:95:2c:18:
06:b8:b6:ed:bd:3c:f6:77:dd:36:86:e1:3c:4a:b7:c7:74:61:
f4:21:5b:8f:ef:dd:d7:89:bc:28:26:05:4b:4f:f6:c5:34:92:
f2:e0:f7:5d:88:df:02:6c:45:32:64:1e:11:e9:2e:4d:7b:98:
f1:9d:b7:6a:53:47:60:5c:06:e8:37:07:4e:ed:68:90:91:36:
eb:03:c5:27:0e:88:03:68:33:7e:4e:2f:6a:66:1e:54:fc:66:
52:ae:62:61:c7:74:b4:d1:3d:59:dd:d4:ff:16:69:fd:3a:65:
19:82:d5:5f:b4:49:dd:a2:bd:69:60:0c:41:a4:20:97:c3:d0:
1a:08:c8:3f:bf:04:98:a3:57:af:8f:46:9b:3e:3c:63:f5:bb:
42:ab:2a:8f:91:ba:67:85:40:bd:c1:23:a6:28:de:47:9c:28:
69:51:99:78:23:7e:1c:c5:47:8c:1b:79:7a:5e:39:6f:37:ce:
1f:a8:cd:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+2F2ewIDmI5OUHCPwrgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjUwMTAxMTc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzNjOWY1NWNhODZhOGNmMjgyMjFmNzJiMjkyYTdhNjUwMGVjYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RgEKpu+zHaWf9+DklaSR3FZGrs3
IyYxBeKfpX1fxp8AK0OKKtSLTjcp0d4swiRxnFj3wT3rJ6PGlubei9npGuyhkiPW
EPynKvuqjWyT6ID/oInejhM+g4OazWOXX86P5isvht+iNz/8OpVt8SdhYZ90w2Wy
1/WbSexpaMVSUVFBbFU7x/zK7WqOiCiO0L0WlbG+9lbtCJW7ALbW9vmJon0s7h5L
7XWsR4LBr+uGzkO0e+wqvVMcc8F6/Ux+6d6ff1Qtg/xaaC0yH+Cmbsp88MX4pZgD
2ORwR3phPgZpp6Be0luH/bVaa5ooE1Ew77lnmuNAl70nseiHwC98o7ecIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKc8n1XKhqjPKCIfcrKSp6ZQDsqOMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvcHp5ZlZjcUdxTThvSWg5eXNwS25wbEFPeW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwreiMA0G
CSqGSIb3DQEBCwUAA4IBAQBC9LIePXrrgkfgQZqmy+THGNzpX4YlPnpfE1rNasMW
eiDQEJfKJPZSQj8St8BKF3Euf/motQ39W47FhcaQQ5UfF512zgiVLBgGuLbtvTz2
d902huE8SrfHdGH0IVuP793XibwoJgVLT/bFNJLy4PddiN8CbEUyZB4R6S5Ne5jx
nbdqU0dgXAboNwdO7WiQkTbrA8UnDogDaDN+Ti9qZh5U/GZSrmJhx3S00T1Z3dT/
Fmn9OmUZgtVftEndor1pYAxBpCCXw9AaCMg/vwSYo1evj0abPjxj9btCqyqPkbpn
hUC9wSOmKN5HnChpUZl4I34cxUeMG3l6XjlvN84fqM2S
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:54 2025 by rpki-client