Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa
File: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (raw, json)
Hash identifier: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=
Subject key identifier: CE:34:FD:13:4D:5E:8F:33:7D:A3:D5:93:3F:97:84:27:BC:EB:29:08
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0194258F79F3F6BE3BB495EFE09B62871190
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 82.193.160.0/19 maxlen: 19
2a02:2580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:79:f3:f6:be:3b:b4:95:ef:e0:9b:62:87:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce34fd134d5e8f337da3d5933f978427bceb2908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:44:3f:93:18:10:1f:87:58:28:91:58:9b:
14:db:77:78:4d:69:ec:7e:e2:93:4e:f1:cc:69:2f:
12:99:14:a7:de:12:c0:91:3f:4d:ed:d3:bc:53:18:
fa:37:4b:69:df:b9:69:bc:f2:7c:f9:55:76:a5:a9:
53:20:2c:eb:06:d4:fc:b2:05:35:28:01:b2:af:03:
1d:fe:3b:96:84:fd:dc:29:29:9e:10:87:a8:bf:fd:
77:22:7e:d4:9b:1c:36:b9:5d:1a:17:62:99:fb:e6:
ef:cc:12:0f:39:50:09:fa:00:ea:02:3e:22:c5:9a:
de:31:c1:a7:c9:3e:71:48:3d:da:3d:e2:87:54:96:
e4:89:ff:d8:e0:f4:de:99:84:f0:23:e4:89:3a:45:
9a:db:d0:8e:52:16:bf:81:0c:94:ba:02:71:be:64:
ef:6b:86:66:f3:59:da:f8:dc:be:6f:f7:7a:be:17:
52:46:5e:b2:ed:8b:90:60:8b:44:3f:53:eb:ce:bb:
29:43:f2:44:12:41:a4:23:2d:e0:07:51:40:e2:c6:
96:ec:90:f6:c0:a8:55:aa:94:44:bc:61:dd:0b:33:
fc:b3:b6:fe:5b:66:8b:e4:7a:7f:4c:f2:9d:48:af:
05:33:25:60:28:44:0f:c2:01:49:c9:f3:49:ef:94:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:FD:13:4D:5E:8F:33:7D:A3:D5:93:3F:97:84:27:BC:EB:29:08
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.160.0/19
IPv6:
2a02:2580::/32
Signature Algorithm: sha256WithRSAEncryption
bb:bc:08:05:15:59:4d:c3:ce:9f:ec:fd:1f:79:6d:a6:e6:cd:
9d:a5:ac:5f:f7:29:21:c3:67:c2:8f:98:f3:f1:02:b6:38:34:
11:65:59:44:31:41:57:41:a8:f9:8f:05:50:53:16:b2:13:01:
9a:f0:17:25:8b:51:81:8a:2a:22:aa:fc:b7:5c:90:b1:ee:ae:
25:b4:54:9c:b0:49:4b:ae:bd:85:e7:f1:03:32:21:a3:10:72:
7a:7b:4c:1d:bd:d9:7c:9c:b1:bf:df:b6:02:9d:fc:5e:f0:ed:
87:dd:d4:94:2b:f3:8b:7a:45:7f:a9:48:c6:70:82:50:51:76:
91:63:2d:60:b0:ad:a9:c1:ae:5b:75:84:84:16:ed:c5:f3:04:
cb:6c:7f:f6:ef:2f:3b:ba:5a:ec:42:d0:dd:2e:79:9b:8e:77:
41:e6:2f:f5:f8:56:7c:53:cd:9f:8d:10:9d:52:96:72:f7:de:
41:4d:c7:ff:ee:4c:55:7f:59:ff:cd:79:77:8e:58:b9:de:b5:
a7:ea:cb:ca:18:15:73:3a:dd:d0:ea:7f:47:18:38:c4:44:d7:
05:33:38:26:0e:b5:41:12:1e:5a:10:f4:96:a9:c4:4f:b1:05:
a2:e6:1f:56:52:c3:0d:eb:72:71:d6:ad:7d:89:fe:d8:b2:81:
eb:1a:1d:d8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj3nz9r47tJXv4JtihxGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUwMTAyMDU0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTM0ZmQxMzRkNWU4ZjMzN2RhM2Q1OTMzZjk3ODQyN2JjZWIyOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph9EP5MYEB+HWCiRWJsU23d4TWns
fuKTTvHMaS8SmRSn3hLAkT9N7dO8Uxj6N0tp37lpvPJ8+VV2palTICzrBtT8sgU1
KAGyrwMd/juWhP3cKSmeEIeov/13In7Umxw2uV0aF2KZ++bvzBIPOVAJ+gDqAj4i
xZreMcGnyT5xSD3aPeKHVJbkif/Y4PTemYTwI+SJOkWa29COUha/gQyUugJxvmTv
a4Zm81na+Ny+b/d6vhdSRl6y7YuQYItEP1PrzrspQ/JEEkGkIy3gB1FA4saW7JD2
wKhVqpREvGHdCzP8s7b+W2aL5Hp/TPKdSK8FMyVgKEQPwgFJyfNJ75TFawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM40/RNNXo8zfaPVkz+XhCe86ykIMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvempUOUUwMWVqek45bzlXVFA1ZUVKN3pyS1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUsGgMA0E
AgACMAcDBQAqAiWAMA0GCSqGSIb3DQEBCwUAA4IBAQC7vAgFFVlNw86f7P0feW2m
5s2dpaxf9ykhw2fCj5jz8QK2ODQRZVlEMUFXQaj5jwVQUxayEwGa8Bcli1GBiioi
qvy3XJCx7q4ltFScsElLrr2F5/EDMiGjEHJ6e0wdvdl8nLG/37YCnfxe8O2H3dSU
K/OLekV/qUjGcIJQUXaRYy1gsK2pwa5bdYSEFu3F8wTLbH/27y87ulrsQtDdLnmb
jndB5i/1+FZ8U82fjRCdUpZy995BTcf/7kxVf1n/zXl3jli53rWn6svKGBVzOt3Q
6n9HGDjERNcFMzgmDrVBEh5aEPSWqcRPsQWi5h9WUsMN63Jx1q19if7YsoHrGh3Y
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:44 2025 by rpki-client