Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZBd-0o3_QIuq7vmcJNo4iv-4obE.roa
File: ZBd-0o3_QIuq7vmcJNo4iv-4obE.roa (raw, json)
Hash identifier: 1/f4sb7s/hOOvIAicdtvPHWvRS8J8EGdFJntD1ODyfU=
Subject key identifier: 64:17:7E:D2:8D:FF:40:8B:AA:EE:F9:9C:24:DA:38:8A:FF:B8:A1:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195C1C8629096D395FE3109367F121DBA77
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZBd-0o3_QIuq7vmcJNo4iv-4obE.roa
Signing time: Sun 23 Mar 2025 06:54:49 +0000
ROA not before: Sun 23 Mar 2025 06:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 151.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:c8:62:90:96:d3:95:fe:31:09:36:7f:12:1d:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 23 06:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64177ed28dff408baaeef99c24da388affb8a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:56:76:b3:9f:37:e3:0c:1c:e5:36:47:f5:
0b:43:ce:9b:f3:3a:e7:01:eb:a0:6a:6c:52:ae:64:
4e:59:1f:8a:f0:ea:db:5a:ab:41:3e:14:fe:f8:e8:
cf:22:6c:0a:28:d7:86:e9:be:8e:12:79:9a:6b:2d:
b4:fa:7c:0c:30:13:a9:b7:57:28:a7:64:c6:7d:f9:
56:9f:37:15:ee:5d:a2:0c:3e:5a:8d:0a:ae:bc:e6:
c2:e6:4e:62:e0:7f:2c:6c:06:1a:6d:5c:cb:8d:56:
8f:c6:c3:7a:d5:80:93:12:f7:c4:99:92:7a:32:ed:
1a:08:ca:a9:3d:71:60:18:bb:6d:b9:4f:e3:54:67:
a1:83:36:2c:9f:87:f7:be:7b:54:24:69:c1:75:66:
82:12:3a:c4:81:5c:8c:a3:ed:d1:82:21:f8:2b:d7:
18:74:0b:ea:c1:f2:d8:01:f1:94:12:7d:31:5c:a6:
89:f5:34:ee:98:f7:c8:a6:98:0d:89:09:4b:27:bc:
59:eb:6b:39:5a:8a:8e:15:a2:85:be:96:0c:c9:1b:
c0:73:43:0e:4f:09:df:86:0c:ad:da:0b:3c:7b:c2:
3b:3e:00:7a:50:13:48:e2:37:6a:36:bb:98:c1:c8:
47:dc:22:e5:32:17:26:bb:65:7b:d4:a3:a5:1b:b8:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:7E:D2:8D:FF:40:8B:AA:EE:F9:9C:24:DA:38:8A:FF:B8:A1:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZBd-0o3_QIuq7vmcJNo4iv-4obE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b8:e8:fd:34:d8:0a:e1:8e:18:d2:98:c8:61:e5:0b:42:ac:
b8:72:27:15:3f:f4:fc:12:41:49:cb:c9:5c:bb:19:14:2c:cd:
df:d4:f8:19:83:2f:e3:90:10:cd:6f:5b:38:3f:eb:65:d7:5a:
49:5e:cb:e6:b0:e7:8a:38:15:88:83:67:67:6e:9e:92:39:64:
03:3f:3f:91:fb:4b:37:a5:68:c4:04:dc:55:8b:4f:d3:61:b1:
b6:94:d8:f3:39:36:82:ea:72:4a:31:7c:97:90:71:45:12:17:
75:37:b5:72:75:43:3b:ba:c8:8f:dc:e1:96:65:39:9a:9f:50:
16:b6:d2:99:bb:77:3f:01:60:6f:57:f0:e5:21:2e:5f:87:a5:
0a:aa:88:53:3d:5d:f5:fd:c8:f0:a2:19:fd:5a:8a:e9:81:0d:
e2:1d:4c:b0:62:03:0b:c1:e7:ab:32:73:ac:9f:08:c3:84:0d:
89:cc:7a:d1:b7:d3:61:4b:99:a7:94:18:78:ff:f6:4b:fe:38:
c2:0f:f8:04:2c:22:e8:9b:0b:52:fd:fa:32:f5:0c:f5:e6:5e:
31:17:d0:81:1f:35:b9:06:a9:18:5b:03:5f:64:96:ae:1b:83:
54:0b:e2:d4:93:69:03:a9:fd:a3:81:f3:ce:f5:16:0c:13:f9:
34:54:38:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXByGKQltOV/jEJNn8SHbp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzIzMDY1NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDE3N2VkMjhkZmY0MDhiYWFlZWY5OWMyNGRhMzg4YWZmYjhhMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3RWdrOfN+MMHOU2R/ULQ86b8zrn
AeugamxSrmROWR+K8OrbWqtBPhT++OjPImwKKNeG6b6OEnmaay20+nwMMBOpt1co
p2TGfflWnzcV7l2iDD5ajQquvObC5k5i4H8sbAYabVzLjVaPxsN61YCTEvfEmZJ6
Mu0aCMqpPXFgGLttuU/jVGehgzYsn4f3vntUJGnBdWaCEjrEgVyMo+3RgiH4K9cY
dAvqwfLYAfGUEn0xXKaJ9TTumPfIppgNiQlLJ7xZ62s5WoqOFaKFvpYMyRvAc0MO
Twnfhgyt2gs8e8I7PgB6UBNI4jdqNruYwchH3CLlMhcmu2V71KOlG7iC9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQXftKN/0CLqu75nCTaOIr/uKGxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWkJkLTBvM19RSXVxN3ZtY0pObzRpdi00b2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IcMA0G
CSqGSIb3DQEBCwUAA4IBAQCruOj9NNgK4Y4Y0pjIYeULQqy4cicVP/T8EkFJy8lc
uxkULM3f1PgZgy/jkBDNb1s4P+tl11pJXsvmsOeKOBWIg2dnbp6SOWQDPz+R+0s3
pWjEBNxVi0/TYbG2lNjzOTaC6nJKMXyXkHFFEhd1N7VydUM7usiP3OGWZTman1AW
ttKZu3c/AWBvV/DlIS5fh6UKqohTPV31/cjwohn9WorpgQ3iHUywYgMLweerMnOs
nwjDhA2JzHrRt9NhS5mnlBh4//ZL/jjCD/gELCLomwtS/foy9Qz15l4xF9CBHzW5
BqkYWwNfZJauG4NUC+LUk2kDqf2jgfPO9RYME/k0VDgE
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:04 2025 by rpki-client