Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa
File: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (raw, json)
Hash identifier: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=
Subject key identifier: 64:2B:F5:06:F8:31:61:CE:DE:B3:48:47:5C:3F:D9:D1:BF:87:B7:4B
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 019422FB72FCA2B82E84A5CD7BB50B542FDF
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.46.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:fc:a2:b8:2e:84:a5:cd:7b:b5:0b:54:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=642bf506f83161cedeb348475c3fd9d1bf87b74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:de:3d:d2:70:4f:12:7a:20:f5:a0:ec:7c:
fe:77:9a:24:88:99:e2:6d:9f:5f:90:0f:fa:af:58:
51:70:3c:fc:41:72:3d:66:15:8f:e2:70:dc:74:7c:
b6:32:af:4f:06:d5:fd:d4:60:23:e2:22:6f:97:d1:
0b:31:34:41:32:77:d3:25:a6:b1:f3:3e:d5:b9:ae:
08:94:71:95:d5:69:a5:5d:f9:f0:c0:ea:bc:84:11:
46:3f:af:4b:49:2b:e5:ca:6a:be:77:7c:61:b1:b3:
73:61:11:4c:40:d3:69:9f:fe:72:1b:32:83:5f:10:
98:bb:7f:d2:21:88:3a:b4:f7:a7:ce:dc:43:5d:48:
70:a4:2d:8f:e5:a7:5e:65:b8:89:4e:53:6c:3b:ab:
ac:d5:7b:00:19:17:47:0c:1d:88:6b:b8:22:5a:6c:
9d:4b:cb:4e:12:91:93:41:75:29:eb:49:99:d4:17:
d0:ec:b8:e9:3f:e9:24:a4:72:9c:21:c8:33:01:6b:
1a:1e:cf:ab:9a:dc:8d:3c:0b:72:11:56:2b:3b:43:
b9:5d:77:f6:70:fe:b0:1d:c7:ee:2e:ef:e2:e2:c4:
94:cf:eb:2a:e1:6b:a4:a6:5c:35:51:a6:5b:1c:2a:
ed:db:1c:ed:7b:c6:b3:75:16:4b:0c:89:59:71:bb:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:F5:06:F8:31:61:CE:DE:B3:48:47:5C:3F:D9:D1:BF:87:B7:4B
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5e:f2:52:fd:02:2a:92:da:b4:c4:66:4c:9c:8d:4e:ad:76:
53:01:d4:e7:b8:44:10:8f:14:98:4b:fd:20:c3:c8:b3:c0:a5:
a2:1b:51:9a:0a:15:ba:9a:2d:0e:32:b0:97:5f:8a:cf:3e:41:
4e:16:4c:35:6a:bc:2f:2b:c9:04:78:1a:43:a8:a7:d9:c9:5f:
f4:89:47:5a:a9:b7:94:55:30:ee:55:86:da:ed:07:a8:1b:0a:
04:81:b1:d3:a4:2a:5f:fa:22:2c:8c:73:24:9f:48:d4:43:d3:
05:59:f1:17:46:42:e0:4b:da:9d:4f:90:2d:de:61:a0:5f:d0:
66:9e:06:cd:04:4a:d4:69:5a:58:f2:ae:e4:8c:55:31:1e:54:
13:03:6e:79:3e:b7:88:45:89:d2:95:e8:28:50:bb:5b:3b:fb:
e5:53:76:cf:86:aa:2f:c3:c1:95:1c:1d:31:4a:61:bf:6b:fe:
bc:d4:21:0c:f9:56:3b:d1:2d:7c:07:04:da:8e:59:cf:e7:9c:
68:e1:b1:1e:1f:1f:ba:66:b6:0d:d8:3a:a5:fe:cd:8a:7d:09:
4c:a7:d5:3b:b9:55:f2:26:86:19:de:dd:cc:ea:f7:31:71:04:
2e:db:a8:56:22:69:81:66:7a:2a:be:fb:18:d7:32:5f:bf:4b:
d1:e9:d9:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3L8orguhKXNe7ULVC/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjUwMTAxMTc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDJiZjUwNmY4MzE2MWNlZGViMzQ4NDc1YzNmZDlkMWJmODdiNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13PePdJwTxJ6IPWg7Hz+d5okiJni
bZ9fkA/6r1hRcDz8QXI9ZhWP4nDcdHy2Mq9PBtX91GAj4iJvl9ELMTRBMnfTJaax
8z7Vua4IlHGV1WmlXfnwwOq8hBFGP69LSSvlymq+d3xhsbNzYRFMQNNpn/5yGzKD
XxCYu3/SIYg6tPenztxDXUhwpC2P5adeZbiJTlNsO6us1XsAGRdHDB2Ia7giWmyd
S8tOEpGTQXUp60mZ1BfQ7LjpP+kkpHKcIcgzAWsaHs+rmtyNPAtyEVYrO0O5XXf2
cP6wHcfuLu/i4sSUz+sq4Wukplw1UaZbHCrt2xzte8azdRZLDIlZcbsszwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQr9Qb4MWHO3rNIR1w/2dG/h7dLMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvWkN2MUJ2Z3hZYzdlczBoSFhEX1owYi1IdDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS4+MA0G
CSqGSIb3DQEBCwUAA4IBAQAsXvJS/QIqktq0xGZMnI1OrXZTAdTnuEQQjxSYS/0g
w8izwKWiG1GaChW6mi0OMrCXX4rPPkFOFkw1arwvK8kEeBpDqKfZyV/0iUdaqbeU
VTDuVYba7QeoGwoEgbHTpCpf+iIsjHMkn0jUQ9MFWfEXRkLgS9qdT5At3mGgX9Bm
ngbNBErUaVpY8q7kjFUxHlQTA255PreIRYnSlegoULtbO/vlU3bPhqovw8GVHB0x
SmG/a/681CEM+VY70S18BwTajlnP55xo4bEeHx+6ZrYN2Dql/s2KfQlMp9U7uVXy
JoYZ3t3M6vcxcQQu26hWImmBZnoqvvsY1zJfv0vR6dk+
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:24 2025 by rpki-client