Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa
File: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (raw, json)
Hash identifier: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=
Subject key identifier: CD:D0:90:97:58:BE:12:B1:7D:8A:47:05:D5:DB:D4:9E:18:85:DD:78
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 0194221FEAAE808A952B5C756A075C7E1B4D
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33846
IP address blocks: 141.91.0.0/16 maxlen: 24
185.223.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ea:ae:80:8a:95:2b:5c:75:6a:07:5c:7e:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdd0909758be12b17d8a4705d5dbd49e1885dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:ed:8c:3a:b2:41:7a:e4:f2:e5:8c:4a:ef:
7d:1e:72:f0:2d:b2:55:fd:7a:44:af:85:7d:5e:0a:
22:aa:9b:c0:1c:38:49:14:d9:36:b6:8f:f1:e1:f9:
fc:e6:0c:58:ab:f1:cc:32:ba:ec:ab:3e:97:59:67:
e0:63:4f:dc:1c:af:3b:51:0d:38:46:d1:f1:3c:87:
59:c3:3f:83:37:78:6b:94:8c:39:63:f2:ab:05:ca:
c4:a2:66:bc:7a:a1:46:c7:3b:4c:9c:a1:10:95:75:
45:f3:4d:88:fe:1f:a8:96:51:cb:84:1f:f1:67:ac:
7a:4f:f3:99:c6:a8:cc:2a:b4:e4:4c:db:39:bb:e0:
0d:10:0e:5a:9a:70:2d:b0:ff:fd:d1:7d:29:55:13:
0d:b3:36:d6:67:a2:df:3f:4c:a9:63:14:7c:36:86:
8b:e8:e6:f2:34:ad:62:57:64:f3:d7:9f:6d:bc:a7:
49:e2:d6:29:b3:83:3f:1f:58:aa:5b:4f:12:52:52:
3d:d0:8e:25:79:ec:d8:2a:28:21:96:1f:2c:1d:40:
a1:11:8a:f3:04:05:63:9f:6d:b6:bf:8a:7e:c9:fa:
06:e8:b4:30:00:e9:d6:66:3c:47:81:92:7f:cf:17:
fa:fc:f9:c2:b7:0d:f0:1f:c7:47:17:57:9a:5d:38:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:90:97:58:BE:12:B1:7D:8A:47:05:D5:DB:D4:9E:18:85:DD:78
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.91.0.0/16
185.223.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:29:07:40:c2:85:ea:ae:e9:16:e7:27:19:61:56:e7:92:cf:
43:b1:73:a1:5d:1f:5b:41:75:fb:80:13:51:7e:ae:06:8e:eb:
e3:7f:5a:b2:87:24:f5:d0:b0:aa:04:4d:92:b3:90:d9:c4:7e:
84:dd:45:74:64:25:41:a6:67:86:21:e9:44:15:8b:47:dc:26:
ff:65:db:66:f3:fa:9f:6e:b1:c7:74:ab:bb:00:82:5f:cf:e8:
58:f6:71:e8:69:56:56:6f:8d:4a:e6:f3:c5:66:a4:22:16:f4:
d7:b5:79:44:87:85:75:4d:ab:b0:e3:0d:76:20:83:20:d5:e2:
67:1f:41:03:ea:2a:5c:34:08:d1:a7:cc:c8:6e:da:27:64:8a:
78:e5:4f:f7:de:27:f4:c6:2e:69:41:5d:16:3c:8b:84:e8:09:
81:1d:84:50:07:ef:21:63:2f:c4:fe:f8:5b:8e:59:53:71:a8:
a1:50:c4:24:67:0c:ad:bc:d6:fd:30:e0:a6:7e:3f:3b:c0:df:
42:65:e6:fc:95:6c:95:21:ed:d0:ea:14:a0:1f:20:8f:68:73:
b5:a7:e3:91:89:c7:6a:35:41:43:d0:13:43:7e:22:f9:cf:60:
38:04:64:89:de:5d:eb:02:c8:f1:67:be:50:24:db:50:51:f2:
1b:7d:a7:f5
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQiH+qugIqVK1x1agdcfhtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk
OTJkOGIwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGQwOTA5NzU4YmUxMmIxN2Q4YTQ3MDVkNWRiZDQ5ZTE4ODVkZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w3tjDqyQXrk8uWMSu99HnLwLbJV
/XpEr4V9XgoiqpvAHDhJFNk2to/x4fn85gxYq/HMMrrsqz6XWWfgY0/cHK87UQ04
RtHxPIdZwz+DN3hrlIw5Y/KrBcrEoma8eqFGxztMnKEQlXVF802I/h+ollHLhB/x
Z6x6T/OZxqjMKrTkTNs5u+ANEA5amnAtsP/90X0pVRMNszbWZ6LfP0ypYxR8NoaL
6ObyNK1iV2Tz159tvKdJ4tYps4M/H1iqW08SUlI90I4leezYKighlh8sHUChEYrz
BAVjn222v4p+yfoG6LQwAOnWZjxHgZJ/zxf6/PnCtw3wH8dHF1eaXTjAVwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFM3QkJdYvhKxfYpHBdXb1J4Yhd14MB8GA1UdIwQY
MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt
ODE5YTI1MzIyNWNjLzEvemRDUWwxaS1FckY5aWtjRjFkdlVuaGlGM1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj
LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAjVsDBAK5
32gwDQYJKoZIhvcNAQELBQADggEBAI0pB0DChequ6RbnJxlhVueSz0Oxc6FdH1tB
dfuAE1F+rgaO6+N/WrKHJPXQsKoETZKzkNnEfoTdRXRkJUGmZ4Yh6UQVi0fcJv9l
22bz+p9uscd0q7sAgl/P6Fj2cehpVlZvjUrm88VmpCIW9Ne1eUSHhXVNq7DjDXYg
gyDV4mcfQQPqKlw0CNGnzMhu2idkinjlT/feJ/TGLmlBXRY8i4ToCYEdhFAH7yFj
L8T++FuOWVNxqKFQxCRnDK281v0w4KZ+PzvA30Jl5vyVbJUh7dDqFKAfII9oc7Wn
45GJx2o1QUPQE0N+IvnPYDgEZIneXesCyPFnvlAk21BR8ht9p/U=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:20 2025 by rpki-client