Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa
File: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (raw, json)
Hash identifier: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=
Subject key identifier: 66:6A:66:12:3F:2D:4C:29:6C:7D:20:69:9A:C9:78:18:97:37:C0:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 0194228D0D24A41D4EF6DAECCA53D0B14CF6
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa
Signing time: Wed 01 Jan 2025 15:47:36 +0000
ROA not before: Wed 01 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 193.247.196.0/23 maxlen: 23
2a05:b2c0::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0d:24:a4:1d:4e:f6:da:ec:ca:53:d0:b1:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666a66123f2d4c296c7d20699ac978189737c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:23:e1:cc:f9:35:cf:0d:8e:85:1a:8f:8f:
ee:9e:9d:50:c7:db:f0:31:18:69:62:94:36:bb:a9:
a7:99:68:d8:48:0d:47:53:87:74:1f:81:1e:b1:2f:
66:79:d3:f5:5d:f6:02:d3:a5:a8:ba:b2:7d:19:4b:
0c:1c:67:e0:f3:d9:36:40:3e:dd:ed:31:6a:e8:ec:
bf:62:08:0a:eb:b8:cd:3a:52:c0:ff:37:5a:e0:81:
b7:31:50:19:37:dc:64:a7:a7:82:34:e0:58:e6:88:
b4:33:40:ef:1d:44:b5:17:15:df:f1:d0:e8:a2:d9:
06:e7:cf:14:e6:69:85:32:bd:9f:bb:ca:7d:8a:44:
1f:16:dd:d8:c7:98:e0:69:4c:85:e0:a1:01:31:6f:
c6:6d:96:b9:31:33:1d:d8:f3:41:a3:99:93:95:80:
c3:59:89:47:d4:8f:cd:d1:49:16:46:17:1c:06:b0:
a2:c4:bf:2a:98:36:34:07:7f:60:e1:c4:02:8c:2a:
af:50:16:d0:16:26:9c:ac:96:94:9b:a7:5b:a7:ec:
2f:3f:8a:e5:04:fa:b2:b7:16:b2:cc:b5:a6:69:b5:
8a:35:e4:70:4b:a9:78:0a:ec:05:6e:87:eb:1c:c2:
e3:83:80:3d:7a:f2:4b:64:bf:b7:8f:e7:35:aa:a3:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:66:12:3F:2D:4C:29:6C:7D:20:69:9A:C9:78:18:97:37:C0:62
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.196.0/23
IPv6:
2a05:b2c0::/31
Signature Algorithm: sha256WithRSAEncryption
38:aa:8e:46:36:8f:8e:54:e6:0d:47:3e:cf:3b:86:30:59:39:
88:f1:ec:72:05:2a:12:5f:21:1f:c5:96:f3:ff:3f:92:eb:fd:
60:0c:70:df:81:3e:f4:a2:89:8c:c6:11:4a:ac:21:03:c9:48:
00:20:73:f1:07:ec:1b:1f:5a:f9:62:87:98:22:b7:ad:f5:68:
46:8f:38:57:f5:fc:50:4f:25:9f:4b:df:d2:f4:dd:df:62:63:
31:67:48:bb:60:5a:c1:a2:de:97:21:a4:44:90:3b:04:ba:61:
83:54:c1:94:4c:4b:73:d4:78:4c:2f:69:52:8f:71:86:a3:c6:
88:78:c2:15:19:c4:d5:ea:50:d2:ee:7b:a0:89:02:a0:90:54:
17:01:ef:3c:c2:07:5c:6c:b9:a0:28:f5:0b:a9:78:b4:cf:f6:
01:02:65:5c:85:5b:6b:42:c2:aa:b2:54:e5:af:bc:75:1a:0c:
7d:35:a6:a0:ab:93:ea:bd:a0:f5:7e:03:aa:23:87:e4:3c:00:
c8:99:96:5a:5d:ea:48:f8:4d:25:6c:25:56:10:ac:90:64:db:
f8:88:c4:2b:b1:6d:f3:4d:dd:32:e3:df:fa:24:0d:9e:87:e4:
82:d0:49:e0:d0:8f:3e:aa:fa:5f:47:b3:e2:45:d9:d9:d3:b1:
55:b4:0e:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijQ0kpB1O9trsylPQsUz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh
ODkyNjIwHhcNMjUwMTAxMTU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjZhNjYxMjNmMmQ0YzI5NmM3ZDIwNjk5YWM5NzgxODk3MzdjMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd4j4cz5Nc8NjoUaj4/unp1Qx9vw
MRhpYpQ2u6mnmWjYSA1HU4d0H4EesS9medP1XfYC06WourJ9GUsMHGfg89k2QD7d
7TFq6Oy/YggK67jNOlLA/zda4IG3MVAZN9xkp6eCNOBY5oi0M0DvHUS1FxXf8dDo
otkG588U5mmFMr2fu8p9ikQfFt3Yx5jgaUyF4KEBMW/GbZa5MTMd2PNBo5mTlYDD
WYlH1I/N0UkWRhccBrCixL8qmDY0B39g4cQCjCqvUBbQFiacrJaUm6dbp+wvP4rl
BPqytxayzLWmabWKNeRwS6l4CuwFbofrHMLjg4A9evJLZL+3j+c1qqPVzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGZqZhI/LUwpbH0gaZrJeBiXN8BiMB8GA1UdIwQY
MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt
ZGYxZTk1ZDdlZGQ5LzEvWm1wbUVqOHRUQ2xzZlNCcG1zbDRHSmMzd0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5
LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwffEMA0E
AgACMAcDBQEqBbLAMA0GCSqGSIb3DQEBCwUAA4IBAQA4qo5GNo+OVOYNRz7PO4Yw
WTmI8exyBSoSXyEfxZbz/z+S6/1gDHDfgT70oomMxhFKrCEDyUgAIHPxB+wbH1r5
YoeYIret9WhGjzhX9fxQTyWfS9/S9N3fYmMxZ0i7YFrBot6XIaREkDsEumGDVMGU
TEtz1HhML2lSj3GGo8aIeMIVGcTV6lDS7nugiQKgkFQXAe88wgdcbLmgKPULqXi0
z/YBAmVchVtrQsKqslTlr7x1Ggx9Naagq5PqvaD1fgOqI4fkPADImZZaXepI+E0l
bCVWEKyQZNv4iMQrsW3zTd0y49/6JA2eh+SC0Eng0I8+qvpfR7PiRdnZ07FVtA66
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:39 2025 by rpki-client