Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/zCtx59_ZwlzRE7DKu9zUivxguyc.roa
File: zCtx59_ZwlzRE7DKu9zUivxguyc.roa (raw, json)
Hash identifier: puOdWgvEY5hDLgK8wcJBY5n9pcVFB81VWlQ827QCG8E=
Subject key identifier: CC:2B:71:E7:DF:D9:C2:5C:D1:13:B0:CA:BB:DC:D4:8A:FC:60:BB:27
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 0194266B9512A2E00B96A0127A114270806F
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/zCtx59_ZwlzRE7DKu9zUivxguyc.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48596
IP address blocks: 45.87.156.0/22 maxlen: 24
185.181.104.0/22 maxlen: 24
2a02:d500::/29 maxlen: 48
2a0a:c980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:95:12:a2:e0:0b:96:a0:12:7a:11:42:70:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2b71e7dfd9c25cd113b0cabbdcd48afc60bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:f4:39:f4:0c:b5:30:d2:a9:94:15:3d:dc:
75:4d:7f:12:4e:0f:3d:9e:0f:56:2c:01:5c:8e:88:
e8:55:a3:99:5f:ee:da:0f:d0:68:08:3c:ae:1d:60:
b0:a1:b2:2c:67:a3:53:b1:09:48:82:c9:e2:6d:93:
6a:5d:d1:28:b2:31:a1:5f:f0:0d:4d:c9:a3:1b:98:
f4:77:9e:3e:98:7e:d5:0b:27:0a:dc:e4:4b:3a:e4:
22:02:9c:12:06:1b:7b:a1:ad:9e:81:95:e5:42:05:
7a:01:34:4f:de:af:c1:5c:45:7a:3d:5e:96:de:9c:
cc:35:6c:88:56:ec:0e:74:6a:53:44:02:4e:1a:ce:
57:7a:6f:7c:55:41:7e:ef:d9:8f:27:51:94:52:a5:
89:24:88:e3:74:9b:22:cb:56:c0:a2:ab:25:b5:a5:
f7:37:ef:e4:70:04:ce:58:c1:67:9f:8b:d8:73:f4:
bc:93:82:bd:d6:a2:cf:11:88:85:ed:72:bf:c1:90:
0a:d8:f9:ed:e8:4a:de:58:05:a0:e0:74:08:26:22:
3e:03:5f:b3:0a:d9:2e:7f:1d:5e:05:20:09:d7:75:
e9:ae:d9:34:0e:0f:4f:02:34:e5:35:48:55:6c:48:
9d:8e:f6:bf:ee:74:f2:77:5b:68:09:61:d8:2b:40:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:71:E7:DF:D9:C2:5C:D1:13:B0:CA:BB:DC:D4:8A:FC:60:BB:27
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/zCtx59_ZwlzRE7DKu9zUivxguyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
IPv6:
2a02:d500::/29
2a0a:c980::/29
Signature Algorithm: sha256WithRSAEncryption
81:d3:ab:23:27:83:51:af:2f:21:75:f2:19:48:8b:ad:4d:24:
a1:a7:00:3b:6d:8a:fd:45:47:7b:24:38:3c:a2:c5:46:c9:be:
95:2f:48:44:cb:85:5d:78:6c:23:b2:1c:ac:25:87:fc:1c:3e:
7e:2d:50:08:cf:ef:66:5c:6a:39:ec:04:b3:04:38:d5:a2:63:
98:d6:82:a9:71:2c:24:ef:2f:fe:21:68:ea:2e:51:fd:6a:15:
38:c6:ff:7a:b4:f4:36:7a:46:bb:50:38:aa:a1:e4:83:a6:16:
86:86:b3:bc:1e:e5:5f:58:14:99:eb:6e:4b:53:ce:28:45:18:
c6:ea:29:8d:d9:94:98:f4:b1:d0:56:b7:99:b5:47:35:fc:13:
97:6f:c7:18:c9:df:88:13:cd:6b:f9:18:64:16:6b:d4:c4:e9:
d4:f3:cf:4a:35:63:ef:98:d4:a2:4d:90:d9:2a:38:a0:16:94:
d7:b2:f1:2c:57:7f:8e:cc:fd:33:11:3c:db:da:70:d3:fc:65:
7a:e3:a9:79:2c:f9:f1:93:bb:17:cc:65:b1:ba:80:0e:7e:37:
3d:d2:58:e8:ce:de:d0:64:67:d7:6b:e6:28:cd:a0:c7:99:09:
4b:76:4a:ec:d5:d7:ab:50:23:33:83:87:d4:13:3b:97:fb:c6:
42:a8:bd:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQma5USouALlqASehFCcIBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MzU2YzZhODMxNjgwZTliOGI3Yzk1NTE0OTUzMDA3YTk0
MDdlODcwHhcNMjUwMTAyMDk0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJiNzFlN2RmZDljMjVjZDExM2IwY2FiYmRjZDQ4YWZjNjBiYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAror0OfQMtTDSqZQVPdx1TX8STg89
ng9WLAFcjojoVaOZX+7aD9BoCDyuHWCwobIsZ6NTsQlIgsnibZNqXdEosjGhX/AN
TcmjG5j0d54+mH7VCycK3ORLOuQiApwSBht7oa2egZXlQgV6ATRP3q/BXEV6PV6W
3pzMNWyIVuwOdGpTRAJOGs5Xem98VUF+79mPJ1GUUqWJJIjjdJsiy1bAoqsltaX3
N+/kcATOWMFnn4vYc/S8k4K91qLPEYiF7XK/wZAK2Pnt6EreWAWg4HQIJiI+A1+z
Ctkufx1eBSAJ13Xprtk0Dg9PAjTlNUhVbEidjva/7nTyd1toCWHYK0D90wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMwrceff2cJc0ROwyrvc1Ir8YLsnMB8GA1UdIwQY
MBaAFHg1bGqDFoDpuLfJVRSVMAepQH6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYt
NWRjMzkyZGU2MzdiLzEvekN0eDU5X1p3bHpSRTdES3U5elVpdnhndXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYtNWRjMzkyZGU2Mzdi
LzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLVecAwQC
ubVoMBQEAgACMA4DBQMqAtUAAwUDKgrJgDANBgkqhkiG9w0BAQsFAAOCAQEAgdOr
IyeDUa8vIXXyGUiLrU0koacAO22K/UVHeyQ4PKLFRsm+lS9IRMuFXXhsI7IcrCWH
/Bw+fi1QCM/vZlxqOewEswQ41aJjmNaCqXEsJO8v/iFo6i5R/WoVOMb/erT0NnpG
u1A4qqHkg6YWhoazvB7lX1gUmetuS1POKEUYxuopjdmUmPSx0Fa3mbVHNfwTl2/H
GMnfiBPNa/kYZBZr1MTp1PPPSjVj75jUok2Q2So4oBaU17LxLFd/jsz9MxE829pw
0/xleuOpeSz58ZO7F8xlsbqADn43PdJY6M7e0GRn12vmKM2gx5kJS3ZK7NXXq1Aj
M4OH1BM7l/vGQqi9PA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:01:13 2025 by rpki-client