Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa
File: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (raw, json)
Hash identifier: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=
Subject key identifier: 64:A3:30:35:00:A2:A4:65:15:8C:0A:79:83:04:80:02:3B:D7:D1:C3
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 019424B28AD936A3FAA826DDD81D89A15E2A
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210742
IP address blocks: 185.210.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8a:d9:36:a3:fa:a8:26:dd:d8:1d:89:a1:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a3303500a2a465158c0a79830480023bd7d1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:9b:a1:4d:7f:8a:14:e5:8e:94:15:b0:14:
e7:54:06:a4:8e:0b:e6:69:34:6f:07:ec:19:8c:ee:
36:f3:ed:ea:d6:f1:56:b0:0b:96:fb:3f:ca:04:04:
27:bb:76:69:bf:25:e5:07:df:02:ee:06:bb:b1:c2:
ff:5d:6d:67:56:1a:f2:5a:69:09:f2:8c:14:60:6a:
52:39:7d:8c:fb:de:84:e9:2b:67:fd:4c:5e:b2:a3:
45:42:55:e7:50:1b:3f:6a:98:39:48:fb:c4:a0:5e:
ff:f2:6d:24:97:48:62:55:d1:4c:0d:fe:a7:97:21:
63:29:15:5b:9d:4b:6c:bc:09:2e:35:82:97:92:37:
35:aa:55:87:77:a2:10:0a:75:33:12:b0:b3:db:b7:
b6:a0:cd:0d:45:42:fb:87:25:a0:ca:0b:37:c0:8c:
d8:f2:3b:99:de:e0:a1:bb:6d:10:45:7b:fd:ed:57:
eb:18:d7:1d:83:ae:85:19:31:b9:55:02:7e:c8:15:
54:5d:a3:5e:8c:e7:bd:64:26:a6:45:99:2f:65:ca:
d3:0a:7f:e7:03:8f:60:04:28:28:8b:c3:a5:4d:aa:
bd:20:b6:0c:96:65:0d:ee:3d:c1:f9:04:56:4e:2b:
38:30:8c:ba:c4:53:d9:0f:a7:cf:12:69:9c:1f:0a:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:30:35:00:A2:A4:65:15:8C:0A:79:83:04:80:02:3B:D7:D1:C3
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.32.0/22
Signature Algorithm: sha256WithRSAEncryption
37:91:20:26:a6:3d:a9:db:24:05:1a:9a:1e:e7:cd:0f:d0:9b:
59:7d:34:a8:32:68:95:dc:98:04:ac:6e:6e:ff:99:95:d3:86:
e1:1d:87:8a:2f:97:ab:7e:45:60:4d:85:df:d8:d6:ed:b9:67:
2e:bc:37:85:d4:4a:94:cf:ac:5f:bb:5b:95:c2:0d:76:6a:c3:
cf:6e:db:28:e7:d0:77:37:84:4f:3b:0e:55:de:fa:2b:3e:92:
e6:b0:d9:04:f7:e5:ac:07:23:ec:10:c8:ac:42:02:61:49:26:
20:47:0e:12:c7:48:79:42:a8:40:30:75:9f:c0:f9:39:de:28:
f5:2c:e0:9d:00:88:10:25:cd:59:30:a8:9a:c4:e1:ff:8e:3b:
37:a1:f7:d0:a9:23:d0:e6:60:96:5a:93:6d:e9:9b:4b:ab:75:
a9:77:57:bb:b7:82:2e:f9:6d:84:43:45:49:89:9a:b7:a9:bb:
e4:86:70:b1:1c:7c:45:61:54:af:7f:43:9b:c4:dc:d0:71:dc:
db:09:65:bc:8a:c1:a0:cb:29:f3:35:13:a5:f9:b0:5f:21:ff:
4d:11:62:67:3d:4d:e5:74:18:83:75:59:b4:b5:63:28:6f:8d:
09:e6:74:d6:10:4e:b9:54:4b:7a:50:27:e4:ed:f5:83:47:e9:
3d:d4:50:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksorZNqP6qCbd2B2JoV4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy
ZWQ5MzEwHhcNMjUwMTAyMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGEzMzAzNTAwYTJhNDY1MTU4YzBhNzk4MzA0ODAwMjNiZDdkMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GqboU1/ihTljpQVsBTnVAakjgvm
aTRvB+wZjO428+3q1vFWsAuW+z/KBAQnu3ZpvyXlB98C7ga7scL/XW1nVhryWmkJ
8owUYGpSOX2M+96E6Stn/UxesqNFQlXnUBs/apg5SPvEoF7/8m0kl0hiVdFMDf6n
lyFjKRVbnUtsvAkuNYKXkjc1qlWHd6IQCnUzErCz27e2oM0NRUL7hyWgygs3wIzY
8juZ3uChu20QRXv97VfrGNcdg66FGTG5VQJ+yBVUXaNejOe9ZCamRZkvZcrTCn/n
A49gBCgoi8OlTaq9ILYMlmUN7j3B+QRWTis4MIy6xFPZD6fPEmmcHwptowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSjMDUAoqRlFYwKeYMEgAI719HDMB8GA1UdIwQY
MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt
NWU1M2MyM2I1NWIwLzEvWktNd05RQ2lwR1VWakFwNWd3U0FBanZYMGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw
LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudIgMA0G
CSqGSIb3DQEBCwUAA4IBAQA3kSAmpj2p2yQFGpoe580P0JtZfTSoMmiV3JgErG5u
/5mV04bhHYeKL5erfkVgTYXf2NbtuWcuvDeF1EqUz6xfu1uVwg12asPPbtso59B3
N4RPOw5V3vorPpLmsNkE9+WsByPsEMisQgJhSSYgRw4Sx0h5QqhAMHWfwPk53ij1
LOCdAIgQJc1ZMKiaxOH/jjs3offQqSPQ5mCWWpNt6ZtLq3Wpd1e7t4Iu+W2EQ0VJ
iZq3qbvkhnCxHHxFYVSvf0ObxNzQcdzbCWW8isGgyynzNROl+bBfIf9NEWJnPU3l
dBiDdVm0tWMob40J5nTWEE65VEt6UCfk7fWDR+k91FCq
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:07:41 2025 by rpki-client