Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZDWi8X9SmWmbAKCwE55Pm2H1s3Q.roa
File: ZDWi8X9SmWmbAKCwE55Pm2H1s3Q.roa (raw, json)
Hash identifier: j4Bd1zsOhh9D77jUeZ1o5ZusSCW9cs9P4TtpELqNqCQ=
Subject key identifier: 64:35:A2:F1:7F:52:99:69:9B:00:A0:B0:13:9E:4F:9B:61:F5:B3:74
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 019428270E856B14F7FEDA424B3CE108ACB9
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZDWi8X9SmWmbAKCwE55Pm2H1s3Q.roa
Signing time: Thu 02 Jan 2025 17:53:55 +0000
ROA not before: Thu 02 Jan 2025 17:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202914
IP address blocks: 84.246.240.0/22 maxlen: 24
84.246.240.0/23 maxlen: 23
84.246.242.0/24 maxlen: 24
91.210.56.0/22 maxlen: 24
141.98.12.0/22 maxlen: 24
141.98.12.0/24 maxlen: 24
141.98.13.0/24 maxlen: 24
141.98.14.0/23 maxlen: 24
185.121.172.0/22 maxlen: 22
185.121.172.0/23 maxlen: 24
185.121.174.0/23 maxlen: 23
185.121.174.0/24 maxlen: 24
185.121.175.0/24 maxlen: 24
185.150.196.0/22 maxlen: 24
2a0d:3e80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0e:85:6b:14:f7:fe:da:42:4b:3c:e1:08:ac:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 17:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6435a2f17f5299699b00a0b0139e4f9b61f5b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:59:54:d5:b3:a7:6a:6b:2a:1c:07:67:63:
6d:a3:8c:c1:06:1a:d7:df:03:16:73:3b:1d:66:4c:
31:ec:36:04:df:65:38:65:c2:41:32:24:e6:cb:e0:
7e:3f:0f:3a:3a:31:1b:c5:de:ca:16:ff:fc:25:a2:
08:28:7b:2b:09:da:d8:05:9d:e0:ed:f3:1c:c4:99:
31:98:8b:8c:06:8b:39:6a:d0:be:14:43:a3:26:ac:
c8:20:de:cf:0c:67:33:8e:2d:b7:8f:7b:18:73:cd:
5b:41:9d:27:59:11:6f:38:e5:8c:7d:48:20:8e:11:
c3:5b:e0:16:dc:9c:d3:d8:52:4c:48:9d:2c:e5:02:
e6:6a:ee:39:6b:c8:8a:2b:66:83:e8:a4:2b:d2:f2:
51:fe:4c:44:eb:7f:61:28:e1:44:e1:1b:30:5f:ee:
3b:01:d2:4b:9c:1b:1e:b9:60:60:9a:26:81:17:41:
34:0a:d3:cd:4a:0e:4f:d0:73:fd:d7:5f:9e:a0:be:
60:51:63:39:53:d2:74:8f:94:36:87:ca:90:56:f6:
6e:45:c4:cb:10:72:1b:24:71:ea:5f:c4:ff:da:0e:
7d:ea:f5:41:84:5d:85:2b:bf:a5:3a:60:c7:0c:cd:
bf:83:d4:92:56:2e:2b:d6:69:b3:4e:20:99:f4:5f:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:A2:F1:7F:52:99:69:9B:00:A0:B0:13:9E:4F:9B:61:F5:B3:74
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZDWi8X9SmWmbAKCwE55Pm2H1s3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.240.0/22
91.210.56.0/22
141.98.12.0/22
185.121.172.0/22
185.150.196.0/22
IPv6:
2a0d:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
b5:3e:d5:af:fe:6f:f8:45:63:c9:0b:9e:72:c5:36:bd:a6:bd:
05:c2:13:de:66:df:e0:53:70:d4:ef:a4:71:51:72:41:93:8c:
7d:5a:71:02:50:57:59:40:2e:d9:ff:ef:3c:22:b0:16:f9:2b:
ee:af:5a:e9:3f:dd:82:24:d6:82:c5:a4:27:60:03:45:e6:4b:
11:b9:74:ea:36:35:36:a2:bf:fc:94:11:c2:88:87:72:0c:d0:
d4:52:d9:bd:02:b3:f4:78:9c:66:ec:25:8a:c5:cb:66:0d:15:
42:5e:56:bd:de:0e:b6:58:2d:e9:f8:5b:92:34:d1:26:fb:d2:
74:bc:12:f0:98:c4:1f:e7:90:d2:74:6e:fd:c8:e3:9a:b1:fb:
a9:5f:c7:ee:25:af:93:6a:29:96:f2:f9:e3:0c:73:91:dd:2c:
f5:31:6b:cd:4d:9f:36:7a:34:97:dc:41:1c:20:26:67:52:15:
61:a8:1d:6d:88:85:b0:a5:ec:26:d1:b9:6a:cb:54:98:f8:2d:
19:e5:10:af:b1:99:b7:a5:57:78:86:31:13:7f:40:52:07:be:
3b:b4:b4:f2:38:23:2c:5b:db:31:a1:96:08:c7:1c:ee:b6:a8:
c3:a8:1d:3c:24:27:7f:a6:5e:db:3b:a3:1d:f2:e7:5b:b2:b9:
98:4f:01:87
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQoJw6FaxT3/tpCSzzhCKy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk
ZWRhZTQwHhcNMjUwMTAyMTc1MzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDM1YTJmMTdmNTI5OTY5OWIwMGEwYjAxMzllNGY5YjYxZjViMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqipZVNWzp2prKhwHZ2Nto4zBBhrX
3wMWczsdZkwx7DYE32U4ZcJBMiTmy+B+Pw86OjEbxd7KFv/8JaIIKHsrCdrYBZ3g
7fMcxJkxmIuMBos5atC+FEOjJqzIIN7PDGczji23j3sYc81bQZ0nWRFvOOWMfUgg
jhHDW+AW3JzT2FJMSJ0s5QLmau45a8iKK2aD6KQr0vJR/kxE639hKOFE4RswX+47
AdJLnBseuWBgmiaBF0E0CtPNSg5P0HP911+eoL5gUWM5U9J0j5Q2h8qQVvZuRcTL
EHIbJHHqX8T/2g596vVBhF2FK7+lOmDHDM2/g9SSVi4r1mmzTiCZ9F/pEwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGQ1ovF/UplpmwCgsBOeT5th9bN0MB8GA1UdIwQY
MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt
NjIzZTE5OWZkYmU5LzEvWkRXaThYOVNtV21iQUtDd0U1NVBtMkgxczNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5
LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCVPbwAwQC
W9I4AwQCjWIMAwQCuXmsAwQCuZbEMA0EAgACMAcDBQMqDT6AMA0GCSqGSIb3DQEB
CwUAA4IBAQC1PtWv/m/4RWPJC55yxTa9pr0FwhPeZt/gU3DU76RxUXJBk4x9WnEC
UFdZQC7Z/+88IrAW+Svur1rpP92CJNaCxaQnYANF5ksRuXTqNjU2or/8lBHCiIdy
DNDUUtm9ArP0eJxm7CWKxctmDRVCXla93g62WC3p+FuSNNEm+9J0vBLwmMQf55DS
dG79yOOasfupX8fuJa+TaimW8vnjDHOR3Sz1MWvNTZ82ejSX3EEcICZnUhVhqB1t
iIWwpewm0blqy1SY+C0Z5RCvsZm3pVd4hjETf0BSB747tLTyOCMsW9sxoZYIxxzu
tqjDqB08JCd/pl7bO6Md8udbsrmYTwGH
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:07 2025 by rpki-client