Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa
File: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (raw, json)
Hash identifier: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=
Subject key identifier: 65:67:F0:47:3F:52:74:5E:47:95:41:14:FF:14:2C:7E:6D:A9:12:E7
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 01942748391CD5BE638EB46CDA9C7EF1B474
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208145
IP address blocks: 185.227.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:39:1c:d5:be:63:8e:b4:6c:da:9c:7e:f1:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6567f0473f52745e47954114ff142c7e6da912e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:0e:04:dd:29:d1:68:cc:05:98:6a:dc:0c:
48:ec:b7:10:24:e5:e5:89:35:b7:c8:54:6f:b4:9e:
9e:2a:bd:7a:89:b8:66:9b:2e:e0:17:54:fc:15:bf:
23:b8:c9:2b:e5:df:4b:19:99:0c:75:f5:19:42:4d:
1f:9a:a2:d2:f5:da:98:b0:a4:89:7e:d6:5e:71:cc:
86:50:6e:60:97:98:14:58:99:d1:df:8f:a5:e9:31:
40:e2:91:16:1e:9b:78:03:9a:b9:29:03:82:22:e0:
2e:3c:6f:db:c0:f3:fd:e0:c0:2f:81:5e:4a:dd:be:
af:10:39:e7:7b:b7:19:23:47:20:da:12:fc:4e:54:
36:5d:79:8f:87:6e:5b:43:6b:ec:ab:1a:19:1d:20:
90:d2:57:fe:e9:38:83:43:3c:a7:67:1d:e3:39:33:
9e:72:fb:96:0e:68:6d:aa:0e:9a:0d:a2:ea:90:5a:
8b:38:37:58:29:92:73:b3:a5:2d:df:b5:33:cd:e1:
21:65:2e:fc:1c:a9:66:86:3a:6d:32:70:fa:f8:8e:
8e:ce:22:2c:f5:ba:3a:16:8e:29:e7:db:3e:53:6b:
e2:ff:93:ea:da:f5:97:8d:bc:91:c9:fa:06:c1:cf:
66:c8:97:d2:60:ec:7e:b2:b9:65:c4:93:03:e9:bb:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:F0:47:3F:52:74:5E:47:95:41:14:FF:14:2C:7E:6D:A9:12:E7
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.190.0/24
Signature Algorithm: sha256WithRSAEncryption
72:91:68:07:0f:99:9e:85:97:d4:e8:bd:1c:a1:00:a7:7f:e0:
84:61:8b:77:f5:99:47:b0:f0:7f:71:64:70:54:4a:92:77:72:
8f:73:b4:af:f6:b6:ec:37:27:e0:d7:2b:32:74:ca:dd:67:5e:
b3:08:4d:c9:2e:13:27:ab:ee:5a:1b:ce:02:9a:4c:5a:bb:c8:
84:8d:58:c7:26:33:c3:cd:56:33:49:94:f5:95:cf:1e:34:55:
c4:11:52:75:36:1c:b2:3f:b7:69:f1:05:db:a9:90:57:17:fd:
e1:65:35:b4:5f:8d:3d:54:f4:53:23:d0:50:42:0a:f9:a5:08:
94:66:ce:d1:7f:55:76:af:ef:6b:0a:e0:28:37:f4:64:b9:48:
78:81:c7:a0:08:9e:12:e3:10:cc:e9:6e:31:91:2d:0f:85:76:
dd:99:25:1f:22:2f:79:6f:71:25:e6:e2:64:e4:02:68:cc:1a:
c7:51:7f:71:fb:e8:af:57:20:63:a2:be:5b:34:f8:92:6f:97:
88:3e:76:81:ba:51:7a:a7:d4:f2:0f:88:ca:71:c3:71:9b:ac:
f8:7d:93:9b:e7:ef:f5:6a:8a:0a:af:f1:c7:40:84:f7:b0:9d:
5f:b4:e0:82:9a:c5:a4:92:d9:6f:c9:24:a8:bc:f7:4d:30:98:
d2:e4:d8:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSDkc1b5jjrRs2px+8bR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTI5Y2M1MTgwMTBmNzY3NjM1M2ZmMjk2NjQ0ZDliZDRh
MzU1Y2IwHhcNMjUwMTAyMTM1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTY3ZjA0NzNmNTI3NDVlNDc5NTQxMTRmZjE0MmM3ZTZkYTkxMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ0OBN0p0WjMBZhq3AxI7LcQJOXl
iTW3yFRvtJ6eKr16ibhmmy7gF1T8Fb8juMkr5d9LGZkMdfUZQk0fmqLS9dqYsKSJ
ftZeccyGUG5gl5gUWJnR34+l6TFA4pEWHpt4A5q5KQOCIuAuPG/bwPP94MAvgV5K
3b6vEDnne7cZI0cg2hL8TlQ2XXmPh25bQ2vsqxoZHSCQ0lf+6TiDQzynZx3jOTOe
cvuWDmhtqg6aDaLqkFqLODdYKZJzs6Ut37UzzeEhZS78HKlmhjptMnD6+I6OziIs
9bo6Fo4p59s+U2vi/5Pq2vWXjbyRyfoGwc9myJfSYOx+srllxJMD6btnxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVn8Ec/UnReR5VBFP8ULH5tqRLnMB8GA1UdIwQY
MBaAFMKinMUYAQ92djU/8pZkTZvUo1XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMt
N2MxZjBjZGZjZTc3LzEvWldmd1J6OVNkRjVIbFVFVV94UXNmbTJwRXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMtN2MxZjBjZGZjZTc3
LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueO+MA0G
CSqGSIb3DQEBCwUAA4IBAQBykWgHD5mehZfU6L0coQCnf+CEYYt39ZlHsPB/cWRw
VEqSd3KPc7Sv9rbsNyfg1ysydMrdZ16zCE3JLhMnq+5aG84Cmkxau8iEjVjHJjPD
zVYzSZT1lc8eNFXEEVJ1NhyyP7dp8QXbqZBXF/3hZTW0X409VPRTI9BQQgr5pQiU
Zs7Rf1V2r+9rCuAoN/RkuUh4gcegCJ4S4xDM6W4xkS0PhXbdmSUfIi95b3El5uJk
5AJozBrHUX9x++ivVyBjor5bNPiSb5eIPnaBulF6p9TyD4jKccNxm6z4fZOb5+/1
aooKr/HHQIT3sJ1ftOCCmsWkktlvySSovPdNMJjS5NgV
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:48 2025 by rpki-client