Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/zphCyxB7JvvZfrdVh3qU9-FSl5c.roa
File: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (raw, json)
Hash identifier: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=
Subject key identifier: CE:98:42:CB:10:7B:26:FB:D9:7E:B7:55:87:7A:94:F7:E1:52:97:97
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0194228E0D3E449279BA6FAC537BB4508CD9
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/zphCyxB7JvvZfrdVh3qU9-FSl5c.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29470
IP address blocks: 139.45.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0d:3e:44:92:79:ba:6f:ac:53:7b:b4:50:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce9842cb107b26fbd97eb755877a94f7e1529797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:df:7e:ed:48:ad:68:c2:01:71:42:21:ff:
4e:c8:2f:de:1a:96:a4:91:f3:8e:09:9f:c0:c6:a5:
f7:16:cc:5b:a7:ea:0a:21:5a:e3:72:af:16:94:b7:
60:e6:06:f2:e2:f4:02:88:bf:df:dd:ca:f4:f7:b3:
5d:5c:db:de:a1:fb:4d:ba:f4:74:80:81:cf:2c:c6:
cc:e4:34:fe:3e:f0:5f:cd:6d:cc:f7:96:93:ef:64:
5a:86:ea:19:d3:29:7d:d1:6f:77:d1:53:a8:4a:01:
87:fa:de:47:36:78:20:94:5b:62:ba:01:b4:48:45:
ca:c3:e5:bc:ed:ca:86:ed:0d:d8:af:8a:cb:ab:65:
d4:d6:36:ba:bf:f2:bf:ae:c4:3f:dd:ae:db:25:4d:
04:72:5c:cb:9d:76:4c:0d:f1:99:6a:23:ee:92:0c:
0c:73:76:ea:76:be:f7:8c:c6:cc:dc:0e:0b:02:ac:
0e:7d:49:81:ef:2b:c1:1a:30:82:be:81:a0:85:6c:
42:37:6d:87:c7:99:c7:1a:0f:16:a9:1d:f2:d0:fe:
28:6e:71:e9:aa:85:d3:3c:55:a2:20:7f:4a:c3:ef:
ae:7f:35:57:bc:ff:07:61:2e:46:82:68:e7:ab:8b:
6c:60:54:cd:cb:50:81:a4:cc:1e:de:86:5f:34:aa:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:42:CB:10:7B:26:FB:D9:7E:B7:55:87:7A:94:F7:E1:52:97:97
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/zphCyxB7JvvZfrdVh3qU9-FSl5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.45.220.0/22
Signature Algorithm: sha256WithRSAEncryption
06:95:e4:f3:71:7f:4e:86:d1:eb:2e:b3:8d:87:32:be:75:df:
71:bd:34:0d:9b:3a:43:0a:b0:61:ea:14:c4:ad:29:fa:41:81:
3b:a3:a6:86:a8:1e:42:cd:06:e1:ec:0e:79:d5:e0:73:80:67:
a8:7a:29:e9:d0:72:b5:cb:17:48:86:32:7b:1b:d2:4d:99:19:
d2:79:aa:a0:1e:1c:10:7f:21:7d:c3:c7:87:a5:d6:87:49:a8:
20:06:26:1a:ac:82:d0:bd:66:03:c6:5f:85:e0:17:c4:90:0f:
34:bf:b3:f2:b0:6a:dd:3d:46:5a:f5:a9:ac:07:59:65:00:1c:
e0:c6:08:0a:97:e0:ca:8f:c2:42:ce:16:63:dc:1e:52:43:74:
d7:ee:4d:56:dd:8a:e7:a8:cc:96:e3:50:30:e6:c2:f2:a8:90:
86:d5:6b:7d:83:b8:48:4f:e7:d5:c8:ef:5d:da:a6:c1:c8:60:
a5:fa:11:5d:30:dc:ed:38:40:fe:00:5c:41:df:42:8a:63:61:
93:cb:0b:e8:be:37:ef:0f:2e:37:f2:ff:4c:2b:6a:34:d1:b1:
74:ce:f0:aa:b1:98:98:dd:ba:66:5d:af:82:ba:ed:72:c8:dc:
03:69:6b:64:7e:b6:fa:a2:45:b4:ca:d0:d3:bc:b3:7d:58:fc:
5c:b8:ee:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijg0+RJJ5um+sU3u0UIzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3
Y2M2NzIwHhcNMjUwMTAxMTU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTk4NDJjYjEwN2IyNmZiZDk3ZWI3NTU4NzdhOTRmN2UxNTI5Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsarffu1IrWjCAXFCIf9OyC/eGpak
kfOOCZ/AxqX3Fsxbp+oKIVrjcq8WlLdg5gby4vQCiL/f3cr097NdXNveoftNuvR0
gIHPLMbM5DT+PvBfzW3M95aT72RahuoZ0yl90W930VOoSgGH+t5HNngglFtiugG0
SEXKw+W87cqG7Q3Yr4rLq2XU1ja6v/K/rsQ/3a7bJU0EclzLnXZMDfGZaiPukgwM
c3bqdr73jMbM3A4LAqwOfUmB7yvBGjCCvoGghWxCN22Hx5nHGg8WqR3y0P4obnHp
qoXTPFWiIH9Kw++ufzVXvP8HYS5Ggmjnq4tsYFTNy1CBpMwe3oZfNKqkdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6YQssQeyb72X63VYd6lPfhUpeXMB8GA1UdIwQY
MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt
MDAzYTE1NjhiZjNmLzEvenBoQ3l4QjdKdnZaZnJkVmgzcVU5LUZTbDVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm
LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiy3cMA0G
CSqGSIb3DQEBCwUAA4IBAQAGleTzcX9OhtHrLrONhzK+dd9xvTQNmzpDCrBh6hTE
rSn6QYE7o6aGqB5CzQbh7A551eBzgGeoeinp0HK1yxdIhjJ7G9JNmRnSeaqgHhwQ
fyF9w8eHpdaHSaggBiYarILQvWYDxl+F4BfEkA80v7PysGrdPUZa9amsB1llABzg
xggKl+DKj8JCzhZj3B5SQ3TX7k1W3YrnqMyW41Aw5sLyqJCG1Wt9g7hIT+fVyO9d
2qbByGCl+hFdMNztOED+AFxB30KKY2GTywvovjfvDy438v9MK2o00bF0zvCqsZiY
3bpmXa+Cuu1yyNwDaWtkfrb6okW0ytDTvLN9WPxcuO5b
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:51:32 2025 by rpki-client