Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zlYt-NU_IsXRuNa1sLxsIcCUUW4.roa
File: zlYt-NU_IsXRuNa1sLxsIcCUUW4.roa (raw, json)
Hash identifier: wYSAeAgo2bdVrftGmAfLXkadC78aMraO3HxtmmTaA5w=
Subject key identifier: CE:56:2D:F8:D5:3F:22:C5:D1:B8:D6:B5:B0:BC:6C:21:C0:94:51:6E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427463294FF3A2E5855E1118FB91AC3F2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zlYt-NU_IsXRuNa1sLxsIcCUUW4.roa
Signing time: Thu 02 Jan 2025 13:48:19 +0000
ROA not before: Thu 02 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208476
IP address blocks: 185.244.26.0/24 maxlen: 24
185.244.29.0/24 maxlen: 24
185.244.30.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:32:94:ff:3a:2e:58:55:e1:11:8f:b9:1a:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce562df8d53f22c5d1b8d6b5b0bc6c21c094516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:b4:a5:36:b1:34:82:98:6d:44:df:df:73:
1a:f1:06:20:1d:43:5a:7b:c7:a3:1d:8c:e5:4e:26:
ec:37:1e:fe:4d:8f:28:f2:52:b9:f9:cf:3e:d9:d1:
ab:7f:f0:0f:a9:11:6a:f9:e0:0a:a4:24:97:59:13:
b9:34:1a:53:48:d8:68:68:71:bd:f6:92:a8:5d:61:
33:68:84:26:e2:d9:6f:46:ec:f3:c5:65:bb:46:8e:
16:85:25:a7:fd:e0:d1:a9:ca:a2:34:38:2f:77:af:
9e:6f:89:52:c7:71:ac:f3:24:07:a5:5a:35:f3:df:
a6:56:12:05:9f:32:79:ac:be:a8:c3:46:f6:cd:25:
c1:f2:7a:0b:7a:7c:da:ed:b6:ba:00:b5:27:e2:17:
f4:ed:b6:ee:46:90:ed:71:fe:c7:d1:04:57:8d:36:
d6:7c:59:c9:a7:96:70:5a:a8:4d:ed:6b:b2:1b:f1:
e4:0f:04:52:0f:4a:d3:a5:d6:55:ac:75:99:93:fe:
b4:e1:a0:a0:56:c0:47:a0:9f:61:86:84:52:d3:55:
b6:10:93:e0:60:7e:96:21:00:1c:13:37:55:33:60:
cc:0f:5b:36:96:b9:05:e1:82:ab:89:75:93:f4:ba:
d7:7e:b5:99:35:ee:f3:52:e7:9e:da:93:90:99:1f:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:2D:F8:D5:3F:22:C5:D1:B8:D6:B5:B0:BC:6C:21:C0:94:51:6E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/zlYt-NU_IsXRuNa1sLxsIcCUUW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.26.0/24
185.244.29.0-185.244.31.255
Signature Algorithm: sha256WithRSAEncryption
b4:e7:4e:0b:7a:d5:9e:05:9c:15:6c:29:33:7a:c3:9b:f5:d4:
3d:06:3d:8d:76:69:15:ed:13:91:50:12:70:2b:8a:32:92:db:
24:f4:ed:0b:4f:de:d0:17:45:7c:11:4f:90:13:38:27:8a:34:
d9:13:8f:d5:3b:57:d9:e6:1e:95:1d:01:f0:b7:38:ac:32:98:
9a:74:28:e3:36:e0:c0:25:f9:8b:27:9f:78:c3:dc:86:2e:64:
f0:4b:77:76:4f:37:48:15:8c:c5:8a:1d:3b:15:89:6b:6c:9b:
b1:60:c9:ef:3b:7e:9f:a2:de:33:63:91:c0:e6:c5:18:7d:72:
e1:aa:c6:3e:0f:62:46:c4:b2:80:8c:76:2b:cd:7c:b8:0f:2c:
c7:3a:02:6e:73:87:51:f7:69:c9:df:45:54:c9:e0:9b:f1:10:
1c:4b:84:67:f2:85:c7:35:56:29:5a:27:65:f2:f1:87:e8:66:
c4:33:2a:1c:0a:47:d1:c2:33:75:cf:1f:bb:7b:ce:61:35:fa:
55:dc:f4:2b:75:2c:29:65:cb:e5:b6:74:34:bc:d1:37:da:ab:
77:50:de:84:3f:9a:e5:85:6a:f4:9b:fe:82:84:be:10:e1:33:
78:87:a1:70:32:42:9d:61:e8:ee:d3:50:5e:50:09:8a:d4:11:
cf:f2:20:87
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQnRjKU/zouWFXhEY+5GsPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjUwMTAyMTM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTU2MmRmOGQ1M2YyMmM1ZDFiOGQ2YjViMGJjNmMyMWMwOTQ1MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk20pTaxNIKYbUTf33Ma8QYgHUNa
e8ejHYzlTibsNx7+TY8o8lK5+c8+2dGrf/APqRFq+eAKpCSXWRO5NBpTSNhoaHG9
9pKoXWEzaIQm4tlvRuzzxWW7Ro4WhSWn/eDRqcqiNDgvd6+eb4lSx3Gs8yQHpVo1
89+mVhIFnzJ5rL6ow0b2zSXB8noLenza7ba6ALUn4hf07bbuRpDtcf7H0QRXjTbW
fFnJp5ZwWqhN7WuyG/HkDwRSD0rTpdZVrHWZk/604aCgVsBHoJ9hhoRS01W2EJPg
YH6WIQAcEzdVM2DMD1s2lrkF4YKriXWT9LrXfrWZNe7zUuee2pOQmR88zQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFM5WLfjVPyLF0bjWtbC8bCHAlFFuMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvemxZdC1OVV9Jc1hSdU5hMXNMeHNJY0NVVVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAufQaMAwD
BAC59B0DBAW59AAwDQYJKoZIhvcNAQELBQADggEBALTnTgt61Z4FnBVsKTN6w5v1
1D0GPY12aRXtE5FQEnArijKS2yT07QtP3tAXRXwRT5ATOCeKNNkTj9U7V9nmHpUd
AfC3OKwymJp0KOM24MAl+Ysnn3jD3IYuZPBLd3ZPN0gVjMWKHTsViWtsm7Fgye87
fp+i3jNjkcDmxRh9cuGqxj4PYkbEsoCMdivNfLgPLMc6Am5zh1H3acnfRVTJ4Jvx
EBxLhGfyhcc1VilaJ2Xy8YfoZsQzKhwKR9HCM3XPH7t7zmE1+lXc9Ct1LClly+W2
dDS80Tfaq3dQ3oQ/muWFavSb/oKEvhDhM3iHoXAyQp1h6O7TUF5QCYrUEc/yIIc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:32 2025 by rpki-client