Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zUEFatqyx1IZKzX2t06sZD8CpVU.roa
File: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (raw, json)
Hash identifier: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=
Subject key identifier: CD:41:05:6A:DA:B2:C7:52:19:2B:35:F6:B7:4E:AC:64:3F:02:A5:55
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282416AD29F0F3DAB39BA9231E697BF4
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zUEFatqyx1IZKzX2t06sZD8CpVU.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211432
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:16:ad:29:f0:f3:da:b3:9b:a9:23:1e:69:7b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd41056adab2c752192b35f6b74eac643f02a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:93:23:eb:ef:92:da:a8:7c:dd:55:22:db:
2c:ac:3e:7e:f4:69:5b:39:e9:70:fa:81:71:c9:6d:
20:cb:90:ea:7c:28:17:a9:80:c9:3c:ae:69:97:af:
fe:1a:e4:6b:6e:e5:a3:2b:3c:02:ed:9e:3b:03:49:
a1:72:77:ac:19:f6:27:09:9e:6a:a1:e5:24:23:19:
13:39:5b:36:e9:7e:07:0a:fe:77:f6:91:94:78:64:
b7:30:8d:d0:6a:98:92:70:cc:d1:97:99:55:14:24:
4b:c1:cb:02:a0:88:b3:4f:ef:f4:96:b6:4f:32:22:
d0:fa:87:d6:7e:f2:e6:75:9d:82:42:49:96:bd:62:
7a:61:0e:e8:5b:3c:33:30:8e:9c:74:3d:94:a3:57:
19:df:df:df:a7:2e:ce:d0:47:06:6c:69:6c:65:52:
e2:e9:32:b9:c3:26:f4:03:63:67:ae:17:b8:8e:89:
8e:4d:df:2e:fc:19:94:46:d1:47:92:07:07:5b:8d:
6c:15:6e:4f:68:e7:84:c2:a2:8b:93:3a:7d:66:13:
ab:38:50:41:37:7b:d0:c4:11:fe:ce:bd:92:a7:57:
b4:49:87:13:a2:f2:ee:82:d0:01:9f:cd:c0:0c:ae:
62:cc:9d:1d:a4:3f:77:71:21:20:f0:02:ec:fe:4e:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:05:6A:DA:B2:C7:52:19:2B:35:F6:B7:4E:AC:64:3F:02:A5:55
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/zUEFatqyx1IZKzX2t06sZD8CpVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
11:6e:a8:96:79:8a:3a:1d:ae:89:77:18:ac:34:43:69:94:64:
b2:20:a9:04:84:54:8b:44:ca:ff:4f:59:e0:36:98:f6:2d:66:
dc:23:94:f1:43:65:ac:5e:c4:e2:fd:eb:85:c9:23:45:b7:ed:
13:c2:c9:7c:81:16:0a:2b:89:39:cf:b8:a6:16:df:1c:26:16:
43:fe:18:1b:71:be:6b:2c:03:aa:ba:e0:8b:d7:b3:81:23:4a:
da:d0:8e:c0:33:c6:5c:f6:98:e5:12:1b:51:9a:cf:5d:88:dd:
6e:c0:eb:4d:8d:07:61:3c:d0:ba:22:a0:63:27:50:8c:dd:22:
6f:55:34:5c:85:41:c5:ef:73:18:c2:6f:1d:b9:81:49:49:b1:
c1:cb:5a:2e:ff:3e:f0:89:5d:f4:18:5d:2d:15:a7:1f:ef:49:
d9:66:27:fa:1c:c0:fc:f6:3b:3b:04:22:2e:4f:02:7e:5f:98:
30:29:57:e6:fc:33:e1:a4:6a:4b:af:5d:b5:19:d5:7c:d7:15:
33:e8:e6:ed:7a:45:90:df:52:7c:7a:2e:dc:79:d3:5a:5c:53:
5e:bd:15:73:b1:59:d4:5f:af:ec:08:36:28:b7:c8:bd:90:b2:
21:18:fb:b1:fa:b4:b5:be:de:c9:3a:c7:9a:c8:94:66:f1:2a:
a8:61:5c:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJBatKfDz2rObqSMeaXv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwMTAyMTc1MDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQxMDU2YWRhYjJjNzUyMTkyYjM1ZjZiNzRlYWM2NDNmMDJhNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSCTI+vvktqofN1VItssrD5+9Glb
Oelw+oFxyW0gy5DqfCgXqYDJPK5pl6/+GuRrbuWjKzwC7Z47A0mhcnesGfYnCZ5q
oeUkIxkTOVs26X4HCv539pGUeGS3MI3QapiScMzRl5lVFCRLwcsCoIizT+/0lrZP
MiLQ+ofWfvLmdZ2CQkmWvWJ6YQ7oWzwzMI6cdD2Uo1cZ39/fpy7O0EcGbGlsZVLi
6TK5wyb0A2Nnrhe4jomOTd8u/BmURtFHkgcHW41sFW5PaOeEwqKLkzp9ZhOrOFBB
N3vQxBH+zr2Sp1e0SYcTovLugtABn83ADK5izJ0dpD93cSEg8ALs/k6KdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1BBWrassdSGSs19rdOrGQ/AqVVMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvelVFRmF0cXl4MUlaS3pYMnQwNnNaRDhDcFZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWrCMA0G
CSqGSIb3DQEBCwUAA4IBAQARbqiWeYo6Ha6JdxisNENplGSyIKkEhFSLRMr/T1ng
Npj2LWbcI5TxQ2WsXsTi/euFySNFt+0Twsl8gRYKK4k5z7imFt8cJhZD/hgbcb5r
LAOquuCL17OBI0ra0I7AM8Zc9pjlEhtRms9diN1uwOtNjQdhPNC6IqBjJ1CM3SJv
VTRchUHF73MYwm8duYFJSbHBy1ou/z7wiV30GF0tFacf70nZZif6HMD89js7BCIu
TwJ+X5gwKVfm/DPhpGpLr121GdV81xUz6ObtekWQ31J8ei7cedNaXFNevRVzsVnU
X6/sCDYot8i9kLIhGPux+rS1vt7JOseayJRm8SqoYVyM
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:53 2025 by rpki-client