Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/ZFu4lqiYHSirnX-2qpigJJIGgUY.roa
File: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (raw, json)
Hash identifier: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=
Subject key identifier: 64:5B:B8:96:A8:98:1D:28:AB:9D:7F:B6:AA:98:A0:24:92:06:81:46
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0194274738629673210F0988D110EA7966CE
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/ZFu4lqiYHSirnX-2qpigJJIGgUY.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205112
IP address blocks: 45.157.240.0/22 maxlen: 22
45.157.241.0/24 maxlen: 24
45.157.242.0/24 maxlen: 24
185.65.240.0/22 maxlen: 24
185.232.100.0/22 maxlen: 24
2a0c:1700::/29 maxlen: 48
2a0f:6480::/29 maxlen: 29
2a0f:6480::/32 maxlen: 32
2a0f:6481::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:38:62:96:73:21:0f:09:88:d1:10:ea:79:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=645bb896a8981d28ab9d7fb6aa98a02492068146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:51:0e:b9:b1:7c:0c:37:9c:f7:c5:32:fe:
fc:1c:7c:11:f9:36:f4:ff:45:1e:36:37:ee:f5:89:
db:18:98:60:8d:cd:41:d6:30:ce:98:f8:7a:28:d8:
b5:6f:fd:fa:a7:1d:e5:3d:5b:e9:7a:1e:1a:a9:66:
39:28:1c:4a:31:da:71:46:a4:f2:f9:5b:4e:b2:db:
68:ee:e7:21:d9:ff:4f:3a:8f:cd:8b:e0:1a:e4:51:
94:4e:0e:3d:76:67:f3:8d:f8:57:a6:8e:03:42:41:
76:ae:20:dc:bb:ff:56:04:5d:fb:95:95:71:67:78:
30:f1:9c:e8:9d:18:5f:2b:dd:bd:94:24:5c:63:fa:
7f:6c:92:e3:09:ad:85:ab:2c:77:8f:99:d7:1b:43:
a0:29:e4:d4:17:1c:ec:60:3f:2d:3f:55:5e:3f:bc:
86:16:2c:91:65:5c:f8:c5:62:fc:28:06:35:dc:bc:
d2:71:c9:b3:0c:24:78:94:7d:46:73:f6:d4:07:cb:
a7:47:30:0c:9e:21:09:d6:14:63:11:ef:4a:53:81:
0f:9c:11:2e:a2:d5:7b:08:27:34:92:6d:1e:92:87:
41:18:be:6c:0f:2a:a4:a6:31:ca:16:72:7d:fc:63:
96:be:e6:76:72:14:6b:24:d9:ca:6e:9e:d9:6e:87:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:B8:96:A8:98:1D:28:AB:9D:7F:B6:AA:98:A0:24:92:06:81:46
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/ZFu4lqiYHSirnX-2qpigJJIGgUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.240.0/22
185.65.240.0/22
185.232.100.0/22
IPv6:
2a0c:1700::/29
2a0f:6480::/29
Signature Algorithm: sha256WithRSAEncryption
9f:c1:45:03:96:ef:38:30:16:16:fd:07:01:d2:a4:4c:48:bf:
f6:d2:77:7b:7c:d4:6d:73:2a:77:14:24:69:ae:9d:d8:40:29:
54:36:79:ee:74:4c:d6:71:94:91:a5:aa:86:8e:5b:4c:86:0c:
9c:d1:35:f5:96:51:78:3a:3c:9c:c4:fd:c6:2f:b4:47:bf:01:
7b:29:ce:07:7c:47:d2:a0:4f:ad:0b:38:ad:5c:33:9d:b2:e7:
54:b4:30:12:54:2b:65:22:8c:24:5d:25:e3:fe:b4:4a:e7:2e:
d7:22:1b:56:9d:92:4e:e5:63:c0:8c:02:65:66:2e:fd:96:19:
3a:b8:0b:dc:e2:45:2e:71:04:c5:53:a2:b1:fb:38:c7:83:ca:
1f:2b:5c:07:a1:cd:c9:49:d5:f7:11:b5:1f:bd:de:3d:52:be:
90:5a:b8:c8:cc:17:22:b8:29:53:eb:bb:75:e0:6f:42:2c:37:
1b:a2:73:a3:90:ed:04:38:6e:11:fb:8c:2f:b9:5b:ca:4a:37:
43:e2:10:71:28:a1:cf:ed:af:2e:85:07:47:d7:0f:07:04:45:
e3:5c:73:e6:90:46:eb:de:4d:75:c5:25:cf:46:87:9b:85:21:
c7:a2:98:06:8a:b1:24:bb:ee:5b:46:b9:7d:47:fd:ef:df:6b:
37:c7:fb:cb
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQnRzhilnMhDwmI0RDqeWbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl
NWJkMDEwHhcNMjUwMTAyMTM0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDViYjg5NmE4OTgxZDI4YWI5ZDdmYjZhYTk4YTAyNDkyMDY4MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBRDrmxfAw3nPfFMv78HHwR+Tb0
/0UeNjfu9YnbGJhgjc1B1jDOmPh6KNi1b/36px3lPVvpeh4aqWY5KBxKMdpxRqTy
+VtOstto7uch2f9POo/Ni+Aa5FGUTg49dmfzjfhXpo4DQkF2riDcu/9WBF37lZVx
Z3gw8ZzonRhfK929lCRcY/p/bJLjCa2Fqyx3j5nXG0OgKeTUFxzsYD8tP1VeP7yG
FiyRZVz4xWL8KAY13LzSccmzDCR4lH1Gc/bUB8unRzAMniEJ1hRjEe9KU4EPnBEu
otV7CCc0km0ekodBGL5sDyqkpjHKFnJ9/GOWvuZ2chRrJNnKbp7Zbod9QQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFGRbuJaomB0oq51/tqqYoCSSBoFGMB8GA1UdIwQY
MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt
NzA0ZjI2MzM4OWUyLzEvWkZ1NGxxaVlIU2lyblgtMnFwaWdKSklHZ1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy
LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLZ3wAwQC
uUHwAwQCuehkMBQEAgACMA4DBQMqDBcAAwUDKg9kgDANBgkqhkiG9w0BAQsFAAOC
AQEAn8FFA5bvODAWFv0HAdKkTEi/9tJ3e3zUbXMqdxQkaa6d2EApVDZ57nRM1nGU
kaWqho5bTIYMnNE19ZZReDo8nMT9xi+0R78BeynOB3xH0qBPrQs4rVwznbLnVLQw
ElQrZSKMJF0l4/60Sucu1yIbVp2STuVjwIwCZWYu/ZYZOrgL3OJFLnEExVOisfs4
x4PKHytcB6HNyUnV9xG1H73ePVK+kFq4yMwXIrgpU+u7deBvQiw3G6Jzo5DtBDhu
EfuML7lbyko3Q+IQcSihz+2vLoUHR9cPBwRF41xz5pBG695NdcUlz0aHm4Uhx6KY
BoqxJLvuW0a5fUf9799rN8f7yw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:40 2025 by rpki-client