Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/ZZIDCIv8-GccnsBYJt5xKtntjOQ.roa
File: ZZIDCIv8-GccnsBYJt5xKtntjOQ.roa (raw, json)
Hash identifier: ap49oW7G881Kt0INkjiskZ/mpP9C38OyqUyPASpvmms=
Subject key identifier: 65:92:03:08:8B:FC:F8:67:1C:9E:C0:58:26:DE:71:2A:D9:ED:8C:E4
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 01962163D1508EF3D7C761B0D6024CCB92F1
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/ZZIDCIv8-GccnsBYJt5xKtntjOQ.roa
Signing time: Thu 10 Apr 2025 20:28:31 +0000
ROA not before: Thu 10 Apr 2025 20:28:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41998
IP address blocks: 185.7.68.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:63:d1:50:8e:f3:d7:c7:61:b0:d6:02:4c:cb:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: Apr 10 20:28:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659203088bfcf8671c9ec05826de712ad9ed8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:51:b2:ed:cd:ff:49:bc:0b:e6:a5:2c:3b:
c0:f8:30:fc:b8:18:40:4f:dc:f9:d2:f0:47:f8:2a:
3c:b5:8d:91:d4:e5:d9:57:70:e6:5c:ee:b7:03:95:
38:55:72:1e:a7:10:77:8c:df:63:60:fd:5c:b0:6e:
3b:8b:60:35:05:b1:97:e0:eb:9a:f2:7e:59:23:2e:
10:72:58:8f:d9:a6:f1:be:d6:55:48:bb:6f:2c:44:
00:54:95:f0:c8:9c:f7:5e:2c:11:b8:04:13:05:8a:
fc:e6:30:b4:ce:3f:ee:63:43:1a:6f:06:83:6f:cd:
d0:5b:f4:e7:37:4b:7d:0a:c2:b4:0e:c7:6b:7a:c2:
98:07:94:6a:47:57:d8:47:7c:b3:83:51:79:67:23:
77:e2:5e:55:ce:c2:c2:a1:82:ef:26:73:7d:d4:de:
87:1a:4e:5f:6f:46:e1:a2:0e:39:cf:bf:a1:48:11:
b0:18:72:57:b2:9f:9a:dc:0b:49:f4:b6:1f:ff:55:
d3:dc:ff:0f:5d:ae:1c:19:9e:ae:82:f0:39:a5:f8:
48:bb:ef:84:c6:94:5c:0d:54:0d:6a:a8:bc:b5:16:
4e:52:0c:19:22:da:20:5c:c4:6e:79:86:68:72:d0:
3a:91:f4:69:de:ca:89:e6:d7:c4:71:81:31:df:11:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:03:08:8B:FC:F8:67:1C:9E:C0:58:26:DE:71:2A:D9:ED:8C:E4
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/ZZIDCIv8-GccnsBYJt5xKtntjOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.68.0/24
Signature Algorithm: sha256WithRSAEncryption
40:99:a1:19:c0:c8:de:fa:b4:49:66:16:87:11:66:23:b0:e6:
a3:e5:06:9a:00:e4:37:d0:cc:6a:6b:bb:44:26:9f:c6:1a:ea:
17:1b:56:52:2d:94:27:7a:cc:90:d2:f2:33:de:da:57:76:03:
80:8a:39:51:90:de:a9:ef:8d:73:9c:19:3c:44:13:6d:1c:03:
66:97:5c:12:c2:cb:a9:b0:07:c7:70:60:64:e2:3e:d1:28:13:
74:ef:4a:fa:77:22:83:56:41:e4:7c:99:ac:3c:82:a3:43:f5:
0f:e0:e7:7c:50:d8:88:1c:83:02:73:df:40:dc:dd:65:d2:55:
ea:eb:4f:1d:97:f2:3e:64:3b:b3:cd:9e:48:24:37:ad:43:5d:
a0:4c:16:38:08:a4:35:18:24:d1:04:ca:b5:a9:75:2d:55:91:
d3:e0:3d:2f:0a:0c:fa:7b:6e:af:32:69:dd:ed:d6:a1:f3:ca:
22:ea:0d:1d:fe:e8:4f:cd:6c:9d:e8:7d:45:0c:ad:32:ba:77:
e6:d4:c4:e5:1e:32:73:ef:e7:76:59:c6:c0:ef:ec:5b:f0:46:
1b:47:03:f1:6d:da:cb:d2:71:ad:4d:f6:dc:81:ce:fb:4a:0c:
c9:04:17:bb:90:87:4d:5d:fa:44:a7:f5:f2:84:63:6a:46:fe:
1b:ee:0d:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYhY9FQjvPXx2Gw1gJMy5LxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMTcwNmI5MTViYWI4ZGFjMmI1NTQ3ZmJjODdhZGViNjFl
NmFlZGUwHhcNMjUwNDEwMjAyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTkyMDMwODhiZmNmODY3MWM5ZWMwNTgyNmRlNzEyYWQ5ZWQ4Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrNRsu3N/0m8C+alLDvA+DD8uBhA
T9z50vBH+Co8tY2R1OXZV3DmXO63A5U4VXIepxB3jN9jYP1csG47i2A1BbGX4Oua
8n5ZIy4QcliP2abxvtZVSLtvLEQAVJXwyJz3XiwRuAQTBYr85jC0zj/uY0MabwaD
b83QW/TnN0t9CsK0DsdresKYB5RqR1fYR3yzg1F5ZyN34l5VzsLCoYLvJnN91N6H
Gk5fb0bhog45z7+hSBGwGHJXsp+a3AtJ9LYf/1XT3P8PXa4cGZ6ugvA5pfhIu++E
xpRcDVQNaqi8tRZOUgwZItogXMRueYZoctA6kfRp3sqJ5tfEcYEx3xFZxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWSAwiL/PhnHJ7AWCbecSrZ7YzkMB8GA1UdIwQY
MBaAFDMXBrkVurjawrVUf7yHreth5q7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAt
ZWM5NTE0OGZkMjM2LzEvWlpJRENJdjgtR2NjbnNCWUp0NXhLdG50ak9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAtZWM5NTE0OGZkMjM2
LzEvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQdEMA0G
CSqGSIb3DQEBCwUAA4IBAQBAmaEZwMje+rRJZhaHEWYjsOaj5QaaAOQ30Mxqa7tE
Jp/GGuoXG1ZSLZQnesyQ0vIz3tpXdgOAijlRkN6p741znBk8RBNtHANml1wSwsup
sAfHcGBk4j7RKBN070r6dyKDVkHkfJmsPIKjQ/UP4Od8UNiIHIMCc99A3N1l0lXq
608dl/I+ZDuzzZ5IJDetQ12gTBY4CKQ1GCTRBMq1qXUtVZHT4D0vCgz6e26vMmnd
7dah88oi6g0d/uhPzWyd6H1FDK0yunfm1MTlHjJz7+d2WcbA7+xb8EYbRwPxbdrL
0nGtTfbcgc77SgzJBBe7kIdNXfpEp/XyhGNqRv4b7g01
-----END CERTIFICATE-----
Generated at Mon Apr 14 00:13:49 2025 by rpki-client