Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Z7WkjqluVcJx8TKOWpd-979l9Hs.roa
File: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (raw, json)
Hash identifier: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=
Subject key identifier: 67:B5:A4:8E:A9:6E:55:C2:71:F1:32:8E:5A:97:7E:F7:BF:65:F4:7B
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A1806A41960BA0C92DFE13C5715D7
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Z7WkjqluVcJx8TKOWpd-979l9Hs.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50469
IP address blocks: 82.206.24.0/21 maxlen: 24
82.206.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:18:06:a4:19:60:ba:0c:92:df:e1:3c:57:15:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b5a48ea96e55c271f1328e5a977ef7bf65f47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:cc:c3:3d:d4:01:25:f6:43:3f:e2:a0:d6:
4a:26:47:71:ed:3f:1d:0d:c6:b7:a1:01:a0:89:9b:
0c:90:78:83:ef:68:96:57:52:cd:ee:a6:fc:2b:a8:
2a:5a:24:53:06:6d:9a:78:60:36:8e:99:16:43:24:
1d:a3:e7:06:29:51:52:a5:12:4f:ba:c0:b5:f4:64:
4b:df:7f:a5:e1:23:92:c2:b6:5a:69:fe:09:d2:4c:
0d:e7:aa:ac:4b:9c:16:ab:6e:cc:e3:45:69:25:cd:
55:d7:a6:2d:65:58:fb:de:bc:c1:00:a5:20:6e:e9:
68:7d:f9:7d:5c:0a:ea:12:a3:12:26:59:18:01:15:
af:0e:1c:44:bd:fc:f6:6c:28:bb:c0:1f:8a:01:72:
00:ca:ae:38:42:77:8d:0c:4f:3c:12:54:03:f9:41:
b9:6a:65:b0:3e:0e:e7:ef:f9:27:51:48:c1:fd:57:
49:fb:41:93:65:2c:7c:ed:ea:7e:f5:52:62:7f:8e:
b7:3e:a7:7d:2c:2b:82:94:d4:ac:d4:57:d1:b5:05:
00:0e:04:5c:a1:8e:6b:dd:05:d3:6b:d9:7d:c2:9a:
a0:52:b3:c9:0e:df:8e:7b:9b:14:cd:06:30:8d:85:
41:ed:04:ee:71:25:a5:b8:af:44:15:58:a3:87:06:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B5:A4:8E:A9:6E:55:C2:71:F1:32:8E:5A:97:7E:F7:BF:65:F4:7B
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Z7WkjqluVcJx8TKOWpd-979l9Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.24.0/21
82.206.64.0/21
Signature Algorithm: sha256WithRSAEncryption
19:01:cd:9b:d4:41:f9:32:31:4f:72:32:81:f0:82:54:f1:20:
e2:c6:52:76:08:dc:b1:c0:6e:17:2f:ee:6d:cc:fe:46:98:70:
ab:cd:f1:25:7c:55:20:0d:e5:a7:f3:39:71:99:5c:fe:43:1f:
18:0b:45:a9:30:6a:b1:6c:7b:59:7e:54:35:7c:a4:e0:9c:d9:
bd:f1:bf:ee:6a:84:08:9e:ec:0e:4a:77:07:90:b5:62:fd:da:
0a:5f:91:cf:02:73:92:22:3d:ae:7f:5c:6e:b3:c9:1b:7a:a0:
ae:91:99:38:a4:d2:e9:96:af:df:e7:7f:7e:2f:eb:b1:d3:00:
94:d7:9d:e4:60:a1:fe:46:93:cc:be:e1:ce:2d:07:fb:c3:10:
78:d2:69:90:e4:b9:58:15:a8:ca:05:63:60:5a:a8:57:ec:3e:
2f:1b:48:18:7d:b6:56:9e:7f:2d:c2:bb:cf:37:63:ab:3e:27:
45:92:e4:c1:fb:d6:21:4f:d9:bf:6d:9d:13:2b:e7:62:e3:0b:
df:8b:2f:f8:3d:34:f2:62:0d:3f:c6:0d:aa:d6:8a:51:a1:5d:
b4:c6:2f:53:29:66:65:d8:af:b0:90:02:8c:f0:67:9f:8b:69:
0c:cb:3f:b1:9b:a0:67:a4:fd:97:50:f2:4f:46:51:21:71:13:
3b:0a:9b:71
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjahgGpBlgugyS3+E8VxXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwMTAxMTk0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2I1YTQ4ZWE5NmU1NWMyNzFmMTMyOGU1YTk3N2VmN2JmNjVmNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lHMwz3UASX2Qz/ioNZKJkdx7T8d
Dca3oQGgiZsMkHiD72iWV1LN7qb8K6gqWiRTBm2aeGA2jpkWQyQdo+cGKVFSpRJP
usC19GRL33+l4SOSwrZaaf4J0kwN56qsS5wWq27M40VpJc1V16YtZVj73rzBAKUg
buloffl9XArqEqMSJlkYARWvDhxEvfz2bCi7wB+KAXIAyq44QneNDE88ElQD+UG5
amWwPg7n7/knUUjB/VdJ+0GTZSx87ep+9VJif463Pqd9LCuClNSs1FfRtQUADgRc
oY5r3QXTa9l9wpqgUrPJDt+Oe5sUzQYwjYVB7QTucSWluK9EFVijhwaewwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGe1pI6pblXCcfEyjlqXfve/ZfR7MB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvWjdXa2pxbHVWY0p4OFRLT1dwZC05NzlsOUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUs4YAwQD
Us5AMA0GCSqGSIb3DQEBCwUAA4IBAQAZAc2b1EH5MjFPcjKB8IJU8SDixlJ2CNyx
wG4XL+5tzP5GmHCrzfElfFUgDeWn8zlxmVz+Qx8YC0WpMGqxbHtZflQ1fKTgnNm9
8b/uaoQInuwOSncHkLVi/doKX5HPAnOSIj2uf1xus8kbeqCukZk4pNLplq/f539+
L+ux0wCU153kYKH+RpPMvuHOLQf7wxB40mmQ5LlYFajKBWNgWqhX7D4vG0gYfbZW
nn8twrvPN2OrPidFkuTB+9YhT9m/bZ0TK+di4wvfiy/4PTTyYg0/xg2q1opRoV20
xi9TKWZl2K+wkAKM8Gefi2kMyz+xm6BnpP2XUPJPRlEhcRM7Cptx
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:24 2025 by rpki-client