Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa
File: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (raw, json)
Hash identifier: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=
Subject key identifier: 65:2A:65:36:6F:FD:19:E3:09:F8:E6:8E:19:7C:18:29:0C:62:C4:13
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 019421B17222FC53FC106815EDECFDC435DD
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa
Signing time: Wed 01 Jan 2025 11:47:44 +0000
ROA not before: Wed 01 Jan 2025 11:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211846
IP address blocks: 159.151.255.0/24 maxlen: 24
192.109.142.0/24 maxlen: 24
2a07:8147:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:72:22:fc:53:fc:10:68:15:ed:ec:fd:c4:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 11:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=652a65366ffd19e309f8e68e197c18290c62c413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:37:dd:87:7d:0f:2c:6f:1f:c6:39:84:1d:
3c:87:15:00:38:c2:ad:91:df:8b:4f:e9:64:a5:99:
06:ec:5b:0a:82:8b:63:64:e0:87:e5:59:e4:d8:c5:
dc:e4:73:7a:fb:9a:f0:4c:55:b4:89:19:8d:44:93:
ef:cb:99:b6:51:3d:ba:f9:6a:84:30:d5:62:c5:5d:
22:ff:ec:a5:1a:d0:a2:6b:e0:b8:65:56:59:20:8e:
72:96:1b:76:9d:58:66:3c:0d:cc:ce:34:eb:79:f1:
00:3f:01:86:7c:ca:b5:74:dc:97:8a:f4:3c:39:20:
9b:a7:99:bb:6e:7f:fc:36:f6:1d:25:c0:65:2d:1e:
2c:06:66:50:a0:89:ec:37:a5:ec:49:5b:f4:e4:dc:
c7:6c:1b:57:cd:f6:4e:0a:df:19:0c:9b:eb:9d:82:
03:7e:e2:26:dd:90:da:d1:75:ce:6f:52:bd:fd:67:
b7:a2:78:a1:48:2d:1a:8e:31:48:76:07:6c:d6:61:
85:79:d7:5d:9c:10:eb:c7:01:6b:b5:03:65:64:b4:
31:42:45:eb:dc:20:b2:04:62:c0:13:00:25:7d:dd:
21:08:05:3a:90:c1:bc:38:83:25:8c:fd:f7:af:9a:
ad:bd:8a:aa:06:4c:aa:31:1c:9e:cb:b0:71:7a:24:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:65:36:6F:FD:19:E3:09:F8:E6:8E:19:7C:18:29:0C:62:C4:13
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.255.0/24
192.109.142.0/24
IPv6:
2a07:8147:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3e:73:a5:3e:2c:dc:bb:05:94:df:e8:e3:ea:37:6c:25:5d:ec:
88:1a:f0:ad:b3:65:69:2a:12:a6:eb:9e:f8:be:2a:22:76:87:
ca:39:03:97:47:00:53:e4:c2:9e:fa:de:57:51:22:47:50:e2:
0e:c3:d9:2d:b1:81:d9:22:13:50:09:c3:8b:6f:bc:da:4f:b7:
e0:c3:cc:64:d3:b2:90:8a:32:b8:aa:e7:dd:41:34:26:aa:fc:
00:63:79:44:e0:c9:94:42:10:17:00:d7:9b:6a:06:7c:36:8b:
12:ef:d9:35:f7:ad:fa:73:67:53:5a:e4:c8:93:8b:32:10:9d:
a7:d0:f3:95:7e:f5:b4:56:ed:76:cb:32:2f:00:f7:66:e1:1c:
f1:af:b0:08:9d:03:75:10:47:06:ce:42:b6:c4:c6:a5:ca:9d:
eb:f2:db:01:99:17:31:20:be:42:af:e2:2e:43:5b:e4:2e:70:
29:ca:a0:54:83:0d:08:45:7e:2e:71:3e:48:75:b5:a4:f7:d4:
12:55:2f:7d:aa:c5:f7:ae:e0:37:25:b6:c0:76:e7:5e:7b:41:
bb:db:72:35:f4:26:b5:b3:0c:1f:3d:36:bb:e3:e8:ed:f2:76:
5f:9e:44:07:c9:90:c2:68:7b:2e:65:1f:24:e3:f5:ce:91:f0:
3b:2a:4e:60
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQhsXIi/FP8EGgV7ez9xDXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2
MDkwZjEwHhcNMjUwMTAxMTE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTJhNjUzNjZmZmQxOWUzMDlmOGU2OGUxOTdjMTgyOTBjNjJjNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowI33Yd9DyxvH8Y5hB08hxUAOMKt
kd+LT+lkpZkG7FsKgotjZOCH5Vnk2MXc5HN6+5rwTFW0iRmNRJPvy5m2UT26+WqE
MNVixV0i/+ylGtCia+C4ZVZZII5ylht2nVhmPA3MzjTrefEAPwGGfMq1dNyXivQ8
OSCbp5m7bn/8NvYdJcBlLR4sBmZQoInsN6XsSVv05NzHbBtXzfZOCt8ZDJvrnYID
fuIm3ZDa0XXOb1K9/We3onihSC0ajjFIdgds1mGFedddnBDrxwFrtQNlZLQxQkXr
3CCyBGLAEwAlfd0hCAU6kMG8OIMljP33r5qtvYqqBkyqMRyey7BxeiQFGQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGUqZTZv/RnjCfjmjhl8GCkMYsQTMB8GA1UdIwQY
MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt
ODAwZWRhMmNmYjM2LzEvWlNwbE5tXzlHZU1KLU9hT0dYd1lLUXhpeEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2
LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAn5f/AwQA
wG2OMA8EAgACMAkDBwAqB4FH//8wDQYJKoZIhvcNAQELBQADggEBAD5zpT4s3LsF
lN/o4+o3bCVd7Iga8K2zZWkqEqbrnvi+KiJ2h8o5A5dHAFPkwp763ldRIkdQ4g7D
2S2xgdkiE1AJw4tvvNpPt+DDzGTTspCKMriq591BNCaq/ABjeUTgyZRCEBcA15tq
Bnw2ixLv2TX3rfpzZ1Na5MiTizIQnafQ85V+9bRW7XbLMi8A92bhHPGvsAidA3UQ
RwbOQrbExqXKnevy2wGZFzEgvkKv4i5DW+QucCnKoFSDDQhFfi5xPkh1taT31BJV
L32qxfeu4DcltsB25157QbvbcjX0JrWzDB89Nrvj6O3ydl+eRAfJkMJoey5lHyTj
9c6R8DsqTmA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:25 2025 by rpki-client