Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Zpw5BQwIodYMXStEoStZw2m1NHQ.roa
File: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (raw, json)
Hash identifier: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=
Subject key identifier: 66:9C:39:05:0C:08:A1:D6:0C:5D:2B:44:A1:2B:59:C3:69:B5:34:74
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019422200580353E3869D3F392C2D6760A08
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Zpw5BQwIodYMXStEoStZw2m1NHQ.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211014
IP address blocks: 46.38.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:80:35:3e:38:69:d3:f3:92:c2:d6:76:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=669c39050c08a1d60c5d2b44a12b59c369b53474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:8d:b1:2f:76:f4:e9:b0:08:fa:e7:c0:de:
90:1e:95:c7:09:69:9f:c8:08:6b:47:90:fc:62:d1:
eb:d2:57:d3:0b:e6:a1:e6:0d:17:4a:07:4d:b9:39:
ab:6c:d2:8f:86:3c:ee:df:94:3d:b6:ea:28:de:8d:
e9:38:37:b9:54:c4:7e:6d:c1:a5:c9:ad:cb:df:0c:
75:05:07:d3:f8:45:37:27:f6:71:aa:90:42:5c:4d:
83:e9:b8:7e:fe:44:98:ff:21:71:cb:1b:d5:c5:d7:
b9:d3:56:19:31:2c:86:43:d5:05:fe:87:0a:7d:45:
9a:46:f8:7e:04:2a:d0:b1:b2:85:b1:54:00:1e:8b:
54:c4:af:47:2f:cf:56:24:e3:43:6d:b2:1b:29:fb:
6a:bd:45:28:00:a8:84:8b:c0:07:1b:d7:b8:9b:13:
93:39:7a:9c:b0:7f:e0:91:9f:27:40:ca:2b:f2:3f:
f4:50:56:a1:f9:a4:e8:9a:73:bf:71:03:4b:6a:43:
5b:63:1e:ca:b1:07:f2:a7:c7:88:ad:92:47:4d:8f:
ca:de:36:83:54:ad:ba:44:f1:ba:23:2d:7c:99:d4:
0b:4d:89:fe:25:5d:2d:7f:c2:4b:99:b3:70:19:c0:
62:fb:26:29:56:a1:b8:89:e8:31:29:58:07:0a:b6:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9C:39:05:0C:08:A1:D6:0C:5D:2B:44:A1:2B:59:C3:69:B5:34:74
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Zpw5BQwIodYMXStEoStZw2m1NHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.155.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7b:f6:d5:32:ca:e3:24:c6:db:18:c6:7c:17:49:4c:e9:33:
aa:69:df:3d:43:58:28:48:1b:0b:77:40:18:18:05:4a:93:8d:
9b:80:82:86:2c:9e:4a:48:24:c2:f3:f6:71:0e:a7:11:fa:d3:
29:e3:5c:ce:94:bd:fe:34:e6:3e:60:c5:bc:51:05:2c:af:93:
2e:e5:f9:ff:4e:e7:66:4e:81:bf:f5:41:cb:e8:66:93:c7:17:
4a:67:a4:e3:43:40:18:f2:23:dc:e6:65:f2:5b:82:de:6a:19:
b3:aa:8a:90:ef:f9:5c:bb:dd:c5:07:2b:6d:1a:c8:cd:4f:f0:
fc:a3:e1:21:2f:8a:79:f7:d3:cd:b0:3c:d2:fe:3d:66:c7:62:
a0:b4:63:7c:d8:b2:b1:42:1e:0e:c8:c6:a3:f5:75:e5:ab:1d:
e7:eb:9d:aa:2a:70:a4:a1:b5:b8:bd:c1:e8:b4:d6:19:f0:79:
63:31:3c:7e:dc:ba:c6:15:e4:70:15:89:b7:6b:74:15:7e:d1:
3b:ce:46:ac:a9:ba:52:dc:a0:5b:60:bd:7e:7d:6b:3b:8a:e2:
2b:97:1c:bc:f9:50:0c:3f:4a:b0:f0:06:fb:b7:3f:c9:91:04:
d0:03:c9:8b:4f:6c:23:4b:98:de:ec:53:32:4f:70:b0:1c:76:
e3:28:c5:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAWANT44adPzksLWdgoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjljMzkwNTBjMDhhMWQ2MGM1ZDJiNDRhMTJiNTljMzY5YjUzNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0niNsS929OmwCPrnwN6QHpXHCWmf
yAhrR5D8YtHr0lfTC+ah5g0XSgdNuTmrbNKPhjzu35Q9tuoo3o3pODe5VMR+bcGl
ya3L3wx1BQfT+EU3J/ZxqpBCXE2D6bh+/kSY/yFxyxvVxde501YZMSyGQ9UF/ocK
fUWaRvh+BCrQsbKFsVQAHotUxK9HL89WJONDbbIbKftqvUUoAKiEi8AHG9e4mxOT
OXqcsH/gkZ8nQMor8j/0UFah+aTomnO/cQNLakNbYx7KsQfyp8eIrZJHTY/K3jaD
VK26RPG6Iy18mdQLTYn+JV0tf8JLmbNwGcBi+yYpVqG4iegxKVgHCrbapQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGacOQUMCKHWDF0rRKErWcNptTR0MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvWnB3NUJRd0lvZFlNWFN0RW9TdFp3Mm0xTkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiabMA0G
CSqGSIb3DQEBCwUAA4IBAQCZe/bVMsrjJMbbGMZ8F0lM6TOqad89Q1goSBsLd0AY
GAVKk42bgIKGLJ5KSCTC8/ZxDqcR+tMp41zOlL3+NOY+YMW8UQUsr5Mu5fn/Tudm
ToG/9UHL6GaTxxdKZ6TjQ0AY8iPc5mXyW4LeahmzqoqQ7/lcu93FByttGsjNT/D8
o+EhL4p599PNsDzS/j1mx2KgtGN82LKxQh4OyMaj9XXlqx3n652qKnCkobW4vcHo
tNYZ8HljMTx+3LrGFeRwFYm3a3QVftE7zkasqbpS3KBbYL1+fWs7iuIrlxy8+VAM
P0qw8Ab7tz/JkQTQA8mLT2wjS5je7FMyT3CwHHbjKMWH
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:16:57 2025 by rpki-client