Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vzf1Bzri64t_z2iTPyTt0k9rSoo.roa
File: vzf1Bzri64t_z2iTPyTt0k9rSoo.roa (raw, json)
Hash identifier: ol1Bx+xt6eTw/vWnNYU8q6BcsklhTWmLuEhieRPdxBg=
Subject key identifier: BF:37:F5:07:3A:E2:EB:8B:7F:CF:68:93:3F:24:ED:D2:4F:6B:4A:8A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019623080C9DB82D6D42AB8FE2179B82091B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vzf1Bzri64t_z2iTPyTt0k9rSoo.roa
Signing time: Fri 11 Apr 2025 04:07:32 +0000
ROA not before: Fri 11 Apr 2025 04:07:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 31.14.10.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:08:0c:9d:b8:2d:6d:42:ab:8f:e2:17:9b:82:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 11 04:07:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf37f5073ae2eb8b7fcf68933f24edd24f6b4a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:8e:f1:0d:ba:47:b5:8d:48:de:e1:3b:59:
8c:f9:6e:57:a1:b4:ba:1c:ac:e3:4d:c7:9c:17:e0:
2b:78:fe:db:3f:71:62:e4:f3:00:e6:e9:a9:0b:59:
c6:4c:24:0e:f3:a4:64:ca:35:c9:5d:a4:15:33:c1:
cf:c6:64:09:b1:b1:26:f1:69:61:12:86:aa:85:68:
f7:96:80:0d:ea:66:9c:cf:60:c4:4d:23:f6:82:11:
02:11:ac:04:a2:fc:5d:f3:29:b9:58:6e:cf:81:33:
4d:04:56:f1:e3:32:32:65:70:37:6e:c0:0f:38:c5:
a7:16:45:cd:b4:58:29:b2:78:81:d2:06:4d:21:0f:
2e:5b:d8:0d:3f:8c:25:c6:37:ec:49:5a:d2:9e:f2:
51:19:be:12:d1:27:6f:61:dd:6c:b1:9e:2d:7f:1c:
45:89:e4:11:d7:ed:3b:02:a3:6f:db:cb:02:0a:e7:
5d:47:24:8e:49:60:60:0a:77:c8:d5:1a:6c:23:c5:
9b:6e:53:54:37:c2:f1:a8:44:55:f6:ef:14:1f:d8:
22:1f:d0:1d:3b:b7:e2:d6:4a:52:49:08:43:ff:c7:
a2:05:e2:b9:5d:61:9b:02:25:08:d1:4d:f7:c0:19:
c2:14:99:84:f5:c8:b3:1d:4c:ff:e9:15:e3:8c:18:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:37:F5:07:3A:E2:EB:8B:7F:CF:68:93:3F:24:ED:D2:4F:6B:4A:8A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vzf1Bzri64t_z2iTPyTt0k9rSoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
176.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f9:39:0b:7c:f6:ab:9b:e9:59:f8:7c:8f:6a:62:63:ae:68:
4e:d8:ca:cf:e5:84:14:56:90:f9:42:08:b1:0e:c3:c9:fb:2e:
6b:7c:4e:6f:00:d3:7f:20:6e:9f:76:6d:c9:df:b9:da:94:da:
a6:e9:e5:67:0a:6a:98:db:97:03:07:71:2c:05:2a:23:44:3f:
17:63:1a:f1:86:67:df:fb:ab:8f:b0:28:55:a1:78:3b:01:7b:
45:db:b6:20:61:41:4f:6d:88:77:2d:07:fa:d2:25:0a:1d:42:
89:62:36:89:09:9b:09:5f:28:18:f3:88:ee:0b:b6:75:a6:80:
23:f1:2a:a9:2a:db:4c:50:ae:5c:f1:80:23:a9:69:a7:f1:a3:
9a:d8:79:84:6b:4c:0c:d2:a1:29:9e:07:d7:e3:f8:cc:4f:ea:
77:4b:ee:ac:1d:58:80:90:68:af:af:08:93:e9:a2:70:26:fc:
68:96:7c:a6:e3:22:93:56:5d:62:44:3a:7d:2a:3a:c8:b0:f7:
01:af:e1:13:0c:90:95:8f:18:65:26:c7:5b:59:a9:5c:47:45:
25:3a:11:69:53:8a:52:aa:1e:3d:b8:64:ed:80:67:82:19:87:
ee:04:98:34:30:53:7d:dc:7c:16:05:de:6a:51:07:07:cc:53:
1c:36:c9:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYjCAyduC1tQquP4hebggkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwNDExMDQwNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjM3ZjUwNzNhZTJlYjhiN2ZjZjY4OTMzZjI0ZWRkMjRmNmI0YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ViO8Q26R7WNSN7hO1mM+W5XobS6
HKzjTcecF+AreP7bP3Fi5PMA5umpC1nGTCQO86RkyjXJXaQVM8HPxmQJsbEm8Wlh
EoaqhWj3loAN6macz2DETSP2ghECEawEovxd8ym5WG7PgTNNBFbx4zIyZXA3bsAP
OMWnFkXNtFgpsniB0gZNIQ8uW9gNP4wlxjfsSVrSnvJRGb4S0SdvYd1ssZ4tfxxF
ieQR1+07AqNv28sCCuddRySOSWBgCnfI1RpsI8WbblNUN8LxqERV9u8UH9giH9Ad
O7fi1kpSSQhD/8eiBeK5XWGbAiUI0U33wBnCFJmE9cizHUz/6RXjjBg//wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL839Qc64uuLf89okz8k7dJPa0qKMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvdnpmMUJ6cmk2NHRfejJpVFB5VHQwazlyU29vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw4KAwQA
sN9CMA0GCSqGSIb3DQEBCwUAA4IBAQAb+TkLfParm+lZ+HyPamJjrmhO2MrP5YQU
VpD5QgixDsPJ+y5rfE5vANN/IG6fdm3J37nalNqm6eVnCmqY25cDB3EsBSojRD8X
Yxrxhmff+6uPsChVoXg7AXtF27YgYUFPbYh3LQf60iUKHUKJYjaJCZsJXygY84ju
C7Z1poAj8SqpKttMUK5c8YAjqWmn8aOa2HmEa0wM0qEpngfX4/jMT+p3S+6sHViA
kGivrwiT6aJwJvxolnym4yKTVl1iRDp9KjrIsPcBr+ETDJCVjxhlJsdbWalcR0Ul
OhFpU4pSqh49uGTtgGeCGYfuBJg0MFN93HwWBd5qUQcHzFMcNskm
-----END CERTIFICATE-----
Generated at Sat Apr 19 09:55:54 2025 by rpki-client