Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJ0YE0xYkHrRBXMr-O6ggmEhmSY.roa
File: ZJ0YE0xYkHrRBXMr-O6ggmEhmSY.roa (raw, json)
Hash identifier: sw1imK5kj38sONcnAzVU90A6Akv0kyp+nDd4XwX8ajo=
Subject key identifier: 64:9D:18:13:4C:58:90:7A:D1:05:73:2B:F8:EE:A0:82:61:21:99:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443E338385F491D9DC1519C4E7198D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJ0YE0xYkHrRBXMr-O6ggmEhmSY.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 77.93.150.0/23 maxlen: 24
82.153.32.0/24 maxlen: 24
89.213.124.0/23 maxlen: 23
89.213.224.0/23 maxlen: 23
109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3e:33:83:85:f4:91:d9:dc:15:19:c4:e7:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=649d18134c58907ad105732bf8eea08261219926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:25:58:5d:50:b7:43:c6:af:6d:06:96:fa:
da:a2:8a:db:d4:0b:81:45:40:8c:65:a8:ce:32:4b:
b0:2c:54:21:91:f3:69:6f:c0:bc:c5:0c:22:b0:92:
6f:a8:10:17:52:b5:94:b4:79:ad:7c:33:a8:57:ca:
e6:4b:82:82:96:1c:92:64:f5:5d:3f:ac:65:4a:16:
b3:5d:1e:9e:e0:e2:18:dc:39:05:cd:92:b6:3d:73:
a6:2b:20:ba:64:cb:7d:c7:4b:d9:9f:9d:2b:4a:7e:
f1:07:c6:20:97:0c:c2:45:bf:8c:9f:02:b3:4e:4f:
b4:6f:c1:b4:5b:b1:79:e7:92:93:7e:99:5d:05:72:
b3:ac:7a:e9:31:06:24:76:53:e5:a9:16:18:08:c4:
84:d4:37:2c:f9:bb:18:e1:95:da:0b:df:ac:e2:a1:
82:1b:7e:7f:7e:fc:bd:29:4c:d1:47:48:f1:dc:05:
20:e7:2c:3b:70:0c:ae:d0:bb:82:c4:e5:35:63:5e:
56:03:93:4d:6c:4b:7f:45:a4:05:cb:c7:f4:3e:97:
d9:ac:25:8e:85:a1:36:96:20:21:2b:62:4f:f3:3e:
7b:09:46:b0:cc:54:4d:66:f5:2f:cf:02:10:70:f7:
42:c0:d2:53:65:45:bf:a0:7d:73:71:82:40:41:42:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:18:13:4C:58:90:7A:D1:05:73:2B:F8:EE:A0:82:61:21:99:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZJ0YE0xYkHrRBXMr-O6ggmEhmSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.150.0/23
82.153.32.0/24
89.213.124.0/23
89.213.224.0/23
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:07:0e:6f:57:0c:d8:9d:d2:e3:e8:99:76:ff:e2:41:c0:2d:
89:11:10:02:3f:96:98:f8:5c:14:cd:dd:13:e3:73:22:a0:a0:
95:e5:f3:92:81:ce:2f:8f:9e:9b:9a:85:ff:76:ff:9b:2c:48:
9a:60:26:07:7c:42:eb:e7:a6:be:bf:39:4e:9f:52:13:83:1e:
40:e5:2b:ec:41:b8:42:bc:7d:0e:d4:56:2f:0d:b7:a7:5b:83:
84:66:38:23:a0:5c:a0:0e:d9:68:d4:70:7a:91:60:87:db:58:
06:70:a8:60:9d:3b:43:66:e7:e5:3c:f2:63:57:1f:34:01:dd:
f2:5d:0b:39:65:51:0d:2f:a6:d9:a0:f9:89:38:de:85:67:42:
da:c2:95:eb:30:f3:6b:74:e3:a9:53:c1:03:de:b1:23:d6:95:
43:9d:01:bd:a9:b2:7b:27:39:37:5e:1e:d8:39:b3:3a:45:a3:
38:4d:df:37:92:26:1e:f8:9a:3a:9f:83:5f:af:5f:01:8a:d8:
81:18:c5:16:d8:83:66:44:4f:b0:28:b2:fb:93:03:37:47:08:
3a:6f:bb:96:2f:52:a3:cb:fc:b3:75:2b:49:66:a5:15:59:37:
5e:d7:28:2a:32:66:9e:87:ed:ca:7d:ff:45:f5:21:38:f9:72:
e7:b5:c9:18
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhRD4zg4X0kdncFRnE5xmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDlkMTgxMzRjNTg5MDdhZDEwNTczMmJmOGVlYTA4MjYxMjE5OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx8lWF1Qt0PGr20Glvraoorb1AuB
RUCMZajOMkuwLFQhkfNpb8C8xQwisJJvqBAXUrWUtHmtfDOoV8rmS4KClhySZPVd
P6xlShazXR6e4OIY3DkFzZK2PXOmKyC6ZMt9x0vZn50rSn7xB8YglwzCRb+MnwKz
Tk+0b8G0W7F555KTfpldBXKzrHrpMQYkdlPlqRYYCMSE1Dcs+bsY4ZXaC9+s4qGC
G35/fvy9KUzRR0jx3AUg5yw7cAyu0LuCxOU1Y15WA5NNbEt/RaQFy8f0PpfZrCWO
haE2liAhK2JP8z57CUawzFRNZvUvzwIQcPdCwNJTZUW/oH1zcYJAQUKDaQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGSdGBNMWJB60QVzK/juoIJhIZkmMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWkowWUUweFlrSHJSQlhNci1PNmdnbUVobVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBTV2WAwQA
UpkgAwQBWdV8AwQBWdXgAwQBbbDMMA0GCSqGSIb3DQEBCwUAA4IBAQB/Bw5vVwzY
ndLj6Jl2/+JBwC2JERACP5aY+FwUzd0T43MioKCV5fOSgc4vj56bmoX/dv+bLEia
YCYHfELr56a+vzlOn1ITgx5A5SvsQbhCvH0O1FYvDbenW4OEZjgjoFygDtlo1HB6
kWCH21gGcKhgnTtDZuflPPJjVx80Ad3yXQs5ZVENL6bZoPmJON6FZ0LawpXrMPNr
dOOpU8ED3rEj1pVDnQG9qbJ7Jzk3Xh7YObM6RaM4Td83kiYe+Jo6n4Nfr18BitiB
GMUW2INmRE+wKLL7kwM3Rwg6b7uWL1Kjy/yzdStJZqUVWTde1ygqMmaeh+3Kff9F
9SE4+XLntckY
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:37 2025 by rpki-client