Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZCBuvFzddC1aEq7LaHN61cL09t8.roa
File: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (raw, json)
Hash identifier: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=
Subject key identifier: 64:20:6E:BC:5C:DD:74:2D:5A:12:AE:CB:68:73:7A:D5:C2:F4:F6:DF
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01942445662C169D019F329CCFAA33B94426
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZCBuvFzddC1aEq7LaHN61cL09t8.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 185.170.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:66:2c:16:9d:01:9f:32:9c:cf:aa:33:b9:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64206ebc5cdd742d5a12aecb68737ad5c2f4f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e6:74:5d:ec:04:c2:38:75:ce:3d:d9:4a:1b:
a6:00:04:8a:27:cb:b2:d2:2e:14:2f:4e:05:f4:5d:
40:ca:98:0f:a1:b5:39:7a:53:f3:7a:9e:0a:ea:aa:
11:6b:0c:a6:ac:b6:56:b5:d2:5d:0e:30:57:f2:c9:
0e:13:cd:5b:ce:0f:c8:8e:f5:da:63:42:9e:5f:ea:
6c:34:2d:d2:21:44:42:72:63:56:c9:44:9c:82:74:
93:56:b2:1f:26:de:96:64:6a:2f:6e:87:30:ca:b1:
5a:14:15:81:fc:00:1f:23:62:86:0c:a7:ff:56:78:
1e:ae:25:01:75:23:2b:d1:65:00:09:b7:74:ff:2d:
43:80:67:fe:b6:d2:ff:c8:01:45:8b:58:05:65:79:
e5:2c:12:b5:b2:12:33:52:02:75:4d:78:4a:93:3d:
da:56:8e:64:90:40:6f:a4:6e:dd:f0:b3:44:7d:99:
93:38:98:6d:e0:c8:81:e8:4e:df:5d:30:c7:0e:68:
40:ce:a9:22:72:38:38:92:1e:ca:cb:72:51:91:f1:
7f:ff:57:10:40:61:7e:b7:14:65:34:7b:9f:83:ac:
f9:3c:e8:62:8e:6c:6d:9b:1b:10:1a:63:7f:52:21:
4f:19:36:c9:4e:eb:30:ce:8f:ca:8e:a8:61:61:cb:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:6E:BC:5C:DD:74:2D:5A:12:AE:CB:68:73:7A:D5:C2:F4:F6:DF
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZCBuvFzddC1aEq7LaHN61cL09t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ba:f8:87:ff:fb:c1:90:1e:e7:bf:f9:69:45:4c:3b:78:8f:
fa:48:8c:cd:4a:61:c3:9f:86:3e:2b:8e:da:d0:b0:68:bf:9e:
81:9b:90:49:ef:5c:4e:65:e0:47:bf:d7:ca:a2:db:82:e4:a6:
a0:f3:dc:f9:79:5a:97:71:0f:58:7a:fa:71:bd:df:41:45:d3:
de:72:5b:cb:ad:82:8f:a1:71:ba:66:d7:f3:b8:03:ac:41:34:
f7:b5:4c:75:aa:f1:54:9d:3a:a8:bf:df:0e:0b:72:57:de:02:
7b:23:8a:fb:b0:20:cc:ae:b5:ac:46:b3:a0:ce:2f:43:0d:5d:
40:b5:fd:d3:6b:00:a9:f4:41:fa:64:b9:ca:56:42:cc:db:ea:
c5:8b:52:ef:0f:d0:4a:cb:54:f3:8b:c9:5a:04:53:d7:6d:f5:
a8:d6:d5:c4:00:aa:3c:b6:a9:96:46:15:6e:f5:b0:06:ba:d6:
a9:7c:1e:ba:5e:83:a9:1a:4b:23:91:96:60:83:e9:03:bb:5f:
50:99:da:be:b0:38:67:ff:c6:b6:c0:a9:82:c1:41:60:69:b5:
2e:82:48:8b:18:c5:35:28:3e:6b:28:bc:ce:78:9c:0a:81:60:
57:39:0b:82:4a:cc:6c:24:83:e8:5d:41:99:99:bc:38:68:ef:
50:15:24:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWYsFp0BnzKcz6ozuUQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjUwMTAxMjM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDIwNmViYzVjZGQ3NDJkNWExMmFlY2I2ODczN2FkNWMyZjRmNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eZ0XewEwjh1zj3ZShumAASKJ8uy
0i4UL04F9F1AypgPobU5elPzep4K6qoRawymrLZWtdJdDjBX8skOE81bzg/IjvXa
Y0KeX+psNC3SIURCcmNWyUScgnSTVrIfJt6WZGovbocwyrFaFBWB/AAfI2KGDKf/
VngeriUBdSMr0WUACbd0/y1DgGf+ttL/yAFFi1gFZXnlLBK1shIzUgJ1TXhKkz3a
Vo5kkEBvpG7d8LNEfZmTOJht4MiB6E7fXTDHDmhAzqkicjg4kh7Ky3JRkfF//1cQ
QGF+txRlNHufg6z5POhijmxtmxsQGmN/UiFPGTbJTuswzo/KjqhhYcvL2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQgbrxc3XQtWhKuy2hzetXC9PbfMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvWkNCdXZGemRkQzFhRXE3TGFITjYxY0wwOXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuapEMA0G
CSqGSIb3DQEBCwUAA4IBAQBtuviH//vBkB7nv/lpRUw7eI/6SIzNSmHDn4Y+K47a
0LBov56Bm5BJ71xOZeBHv9fKotuC5Kag89z5eVqXcQ9Yevpxvd9BRdPeclvLrYKP
oXG6ZtfzuAOsQTT3tUx1qvFUnTqov98OC3JX3gJ7I4r7sCDMrrWsRrOgzi9DDV1A
tf3TawCp9EH6ZLnKVkLM2+rFi1LvD9BKy1Tzi8laBFPXbfWo1tXEAKo8tqmWRhVu
9bAGutapfB66XoOpGksjkZZgg+kDu19Qmdq+sDhn/8a2wKmCwUFgabUugkiLGMU1
KD5rKLzOeJwKgWBXOQuCSsxsJIPoXUGZmbw4aO9QFSRi
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:54 2025 by rpki-client