Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/zWwWyLKfCmRpNmwFBTvojnygc1I.roa
File: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (raw, json)
Hash identifier: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=
Subject key identifier: CD:6C:16:C8:B2:9F:0A:64:69:36:6C:05:05:3B:E8:8E:7C:A0:73:52
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 01942748644A4F0D9F70D9E36A8047981428
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/zWwWyLKfCmRpNmwFBTvojnygc1I.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56953
IP address blocks: 31.132.200.0/21 maxlen: 24
91.229.152.0/23 maxlen: 24
2001:67c:2340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:64:4a:4f:0d:9f:70:d9:e3:6a:80:47:98:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6c16c8b29f0a6469366c05053be88e7ca07352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:5f:18:7e:36:95:12:82:8e:5b:54:37:75:
56:4a:3b:d1:cb:e2:13:81:20:7f:53:01:4b:8b:e6:
17:44:ef:1a:ce:11:ab:ff:51:2c:42:d6:6d:98:89:
ed:6a:17:02:ce:1b:93:38:7c:2b:b6:47:77:69:63:
8d:96:c3:3d:cf:96:9f:10:de:cc:89:a4:53:ec:6b:
56:09:71:80:b4:a5:e5:33:c3:f0:e5:de:ef:d3:ca:
6a:5f:bf:29:5e:4b:e2:c0:85:86:d4:d4:19:b5:14:
ec:86:a9:b9:78:11:71:b1:cd:4b:64:a9:51:c2:12:
de:17:a6:2d:04:2b:fb:e1:ff:d8:7e:c3:31:b9:d8:
09:ab:24:a1:92:e3:b5:dc:7c:d7:c6:a8:8b:80:17:
35:a1:21:b5:f3:6c:f1:09:42:54:c9:5b:5f:f2:1f:
45:22:38:93:f1:c1:52:c2:75:3d:8f:c0:45:fe:0a:
d9:ce:87:d7:75:f7:f5:9d:c9:a8:cb:84:4e:aa:04:
ab:cd:e2:65:52:ad:1d:e3:7c:cc:4b:fb:e4:5c:32:
e0:44:d5:70:25:df:3c:7d:61:cc:9f:1e:c0:fd:ef:
71:1b:b0:1a:5e:a6:09:e0:e7:ef:89:86:80:bb:12:
aa:7e:5b:36:47:57:0b:59:8e:23:a2:34:70:72:60:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:16:C8:B2:9F:0A:64:69:36:6C:05:05:3B:E8:8E:7C:A0:73:52
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/zWwWyLKfCmRpNmwFBTvojnygc1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.200.0/21
91.229.152.0/23
IPv6:
2001:67c:2340::/48
Signature Algorithm: sha256WithRSAEncryption
92:56:99:17:c9:c6:9c:82:f4:62:50:ad:bf:37:31:be:6f:1e:
31:02:7f:dd:da:fa:ae:9f:be:14:ed:f8:e9:41:bc:27:90:35:
f6:f4:c9:e4:29:14:10:8a:04:79:45:91:bc:c5:90:e0:ac:c1:
9b:50:e6:09:ad:f8:1c:5f:6c:18:ca:24:60:6b:25:18:2a:0f:
54:d9:60:a8:f4:46:c0:e4:da:59:5e:36:6e:fe:96:ee:1c:16:
98:65:10:47:1f:36:ea:7d:97:93:3b:15:da:c3:50:58:c9:19:
fb:88:67:88:9a:3e:98:69:2b:4c:a9:17:20:d6:90:2d:2c:d1:
8f:55:88:45:5a:98:ed:4b:c8:d0:e1:d2:d7:d1:25:74:a0:66:
87:aa:13:c4:67:0c:ca:34:89:e0:ca:6e:68:6d:6e:02:0a:1e:
7e:ce:2a:a5:0d:fc:fb:5d:ff:13:92:c2:a6:b0:82:e3:87:ee:
bc:be:fa:23:aa:5a:49:4c:f7:f2:76:ce:69:c0:f5:95:92:63:
bf:34:65:46:2d:e6:85:a9:d4:d4:1e:73:68:32:fc:08:7a:7f:
e3:c1:f1:6c:ae:4f:7f:b9:4c:73:8c:a0:59:cc:d9:f0:15:c5:
d3:93:44:bb:13:c6:a9:e9:d7:d5:fb:47:de:85:8d:72:5b:0e:
0e:30:28:4a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQnSGRKTw2fcNnjaoBHmBQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWUxYTI2OTY3ZGZlMjg3ZWI2MDI3NDllYzJjNmYwNWFm
YmI1N2MwHhcNMjUwMTAyMTM1MDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDZjMTZjOGIyOWYwYTY0NjkzNjZjMDUwNTNiZTg4ZTdjYTA3MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DRfGH42lRKCjltUN3VWSjvRy+IT
gSB/UwFLi+YXRO8azhGr/1EsQtZtmIntahcCzhuTOHwrtkd3aWONlsM9z5afEN7M
iaRT7GtWCXGAtKXlM8Pw5d7v08pqX78pXkviwIWG1NQZtRTshqm5eBFxsc1LZKlR
whLeF6YtBCv74f/YfsMxudgJqyShkuO13HzXxqiLgBc1oSG182zxCUJUyVtf8h9F
IjiT8cFSwnU9j8BF/grZzofXdff1ncmoy4ROqgSrzeJlUq0d43zMS/vkXDLgRNVw
Jd88fWHMnx7A/e9xG7AaXqYJ4OfviYaAuxKqfls2R1cLWY4jojRwcmCVQQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFM1sFsiynwpkaTZsBQU76I58oHNSMB8GA1UdIwQY
MBaAFByuGiaWff4ofrYCdJ7CxvBa+7V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt
NzQ5OTA1YzMyN2IxLzEveld3V3lMS2ZDbVJwTm13RkJUdm9qbnlnYzFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix
LzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDH4TIAwQB
W+WYMA8EAgACMAkDBwAgAQZ8I0AwDQYJKoZIhvcNAQELBQADggEBAJJWmRfJxpyC
9GJQrb83Mb5vHjECf93a+q6fvhTt+OlBvCeQNfb0yeQpFBCKBHlFkbzFkOCswZtQ
5gmt+BxfbBjKJGBrJRgqD1TZYKj0RsDk2lleNm7+lu4cFphlEEcfNup9l5M7FdrD
UFjJGfuIZ4iaPphpK0ypFyDWkC0s0Y9ViEVamO1LyNDh0tfRJXSgZoeqE8RnDMo0
ieDKbmhtbgIKHn7OKqUN/Ptd/xOSwqawguOH7ry++iOqWklM9/J2zmnA9ZWSY780
ZUYt5oWp1NQec2gy/Ah6f+PB8WyuT3+5THOMoFnM2fAVxdOTRLsTxqnp19X7R96F
jXJbDg4wKEo=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:52 2025 by rpki-client