Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/fzwNA1AIJZgXIe-eV_4xwZdcqjo.roa
File: fzwNA1AIJZgXIe-eV_4xwZdcqjo.roa (raw, json)
Hash identifier: p2w9rtHczUi85IWJpB+w5VC3jS2eJ3WF/0EvWwOAI+Y=
Subject key identifier: 7F:3C:0D:03:50:08:25:98:17:21:EF:9E:57:FE:31:C1:97:5C:AA:3A
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0195D87D111C2F65B6E2D489A2C5449644D9
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/fzwNA1AIJZgXIe-eV_4xwZdcqjo.roa
Signing time: Thu 27 Mar 2025 16:43:49 +0000
ROA not before: Thu 27 Mar 2025 16:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273189
IP address blocks: 80.80.90.0/23 maxlen: 23
80.80.90.0/24 maxlen: 24
80.80.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:7d:11:1c:2f:65:b6:e2:d4:89:a2:c5:44:96:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Mar 27 16:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f3c0d03500825981721ef9e57fe31c1975caa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:82:3a:4c:2a:2b:50:b7:6a:ef:d5:2c:e4:
41:4b:84:0a:e3:8a:11:62:70:11:5a:a9:d9:dc:c7:
c4:a5:e6:6e:db:4c:03:aa:e5:4b:6e:19:65:b0:52:
4b:2f:5f:ad:1c:d2:a5:a7:d1:36:27:ff:2b:50:ac:
a2:2b:78:bc:99:f3:16:4c:66:fe:82:4e:53:6f:cc:
8d:46:08:ac:6a:4e:80:01:c1:86:8b:82:cf:e2:df:
0e:2e:68:0b:3b:87:59:a1:dc:ad:c9:ca:33:94:3e:
d5:b9:62:b4:29:0d:6e:74:c2:fd:23:b5:ba:b2:db:
7e:99:ab:82:d0:90:03:3e:69:c2:4c:f9:db:47:34:
fa:60:5a:86:ae:ef:2e:86:f3:07:ea:b9:ef:ef:69:
20:48:62:9c:67:cb:c6:84:3a:c6:c7:e4:e1:42:0b:
af:5e:9d:b9:41:3f:78:1a:a7:f9:18:3c:f5:8b:35:
26:ef:af:6a:cc:74:d5:d1:a1:80:92:d1:2f:d7:ea:
42:37:7a:8a:19:cb:39:08:fe:ad:cf:c9:de:06:de:
ac:ee:58:86:86:bd:c4:57:cd:b7:d4:50:17:4b:e9:
a7:23:ec:e3:da:ea:f5:5b:f5:e9:dd:82:c0:bb:fe:
9d:01:21:47:03:34:bd:d0:85:ae:1a:d3:90:d6:08:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:0D:03:50:08:25:98:17:21:EF:9E:57:FE:31:C1:97:5C:AA:3A
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/fzwNA1AIJZgXIe-eV_4xwZdcqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.90.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:c5:2a:4e:42:c3:69:15:42:3c:a8:bb:1d:49:82:76:73:60:
8c:c3:71:b9:49:e2:60:38:c5:18:9d:48:bc:79:57:bf:b9:85:
2f:cb:69:64:52:f6:78:62:d9:ee:f4:fe:27:b6:81:0b:17:54:
69:fc:3d:ec:a4:42:52:9e:1d:f8:97:09:b2:59:4c:2a:5b:8f:
d1:20:34:68:53:af:2f:91:7c:ea:66:b4:e8:0a:3a:cb:04:eb:
fe:c4:b3:de:cd:ae:94:2a:4a:4e:3c:a8:1a:75:c8:cb:e3:1a:
0d:b9:2e:5b:6f:bb:ff:e7:bd:39:38:9f:0f:cb:34:97:84:49:
04:1b:d6:a7:df:9d:86:08:db:dc:31:34:a5:f3:6e:02:57:72:
ed:63:65:48:5f:e9:4a:42:1b:26:82:82:4b:5a:8f:41:8e:4d:
12:c3:bb:e1:a3:d8:6b:99:26:5e:22:25:ce:d9:79:db:f8:56:
df:a5:98:c2:08:a6:18:b1:99:4c:81:78:1e:bf:41:c9:12:2a:
3c:91:f6:68:00:e4:64:70:a1:98:75:92:c2:e7:70:4a:4a:b9:
4d:5f:d6:3c:c9:c9:62:45:86:61:a9:4e:eb:b4:d9:f2:b6:79:
31:26:34:a2:4e:fa:53:de:b3:7f:7f:27:ab:25:04:cc:f1:42:
9a:2d:34:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXYfREcL2W24tSJosVElkTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDEzN2M5NTcxOWRlM2IwNjUxZTQ0YWQwNjgzNTAxYWU2
N2ViODgwHhcNMjUwMzI3MTY0MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNjMGQwMzUwMDgyNTk4MTcyMWVmOWU1N2ZlMzFjMTk3NWNhYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LaCOkwqK1C3au/VLORBS4QK44oR
YnARWqnZ3MfEpeZu20wDquVLbhllsFJLL1+tHNKlp9E2J/8rUKyiK3i8mfMWTGb+
gk5Tb8yNRgisak6AAcGGi4LP4t8OLmgLO4dZodytycozlD7VuWK0KQ1udML9I7W6
stt+mauC0JADPmnCTPnbRzT6YFqGru8uhvMH6rnv72kgSGKcZ8vGhDrGx+ThQguv
Xp25QT94Gqf5GDz1izUm769qzHTV0aGAktEv1+pCN3qKGcs5CP6tz8neBt6s7liG
hr3EV8231FAXS+mnI+zj2ur1W/Xp3YLAu/6dASFHAzS90IWuGtOQ1ggEsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH88DQNQCCWYFyHvnlf+McGXXKo6MB8GA1UdIwQY
MBaAFGtBN8lXGd47BlHkStBoNQGuZ+uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBFM3lWY1ozanNHVWVSSzBHZzFBYTVuNjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hYjdmMGQtZGQzMC00OGRmLWJiMGMt
ODViMjZiM2VkOTgzLzEvZnp3TkExQUlKWmdYSWUtZVZfNHh3WmRjcWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hYjdmMGQtZGQzMC00OGRmLWJiMGMtODViMjZiM2VkOTgz
LzEvYTBFM3lWY1ozanNHVWVSSzBHZzFBYTVuNjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFBaMA0G
CSqGSIb3DQEBCwUAA4IBAQAKxSpOQsNpFUI8qLsdSYJ2c2CMw3G5SeJgOMUYnUi8
eVe/uYUvy2lkUvZ4Ytnu9P4ntoELF1Rp/D3spEJSnh34lwmyWUwqW4/RIDRoU68v
kXzqZrToCjrLBOv+xLPeza6UKkpOPKgadcjL4xoNuS5bb7v/5705OJ8PyzSXhEkE
G9an352GCNvcMTSl824CV3LtY2VIX+lKQhsmgoJLWo9Bjk0Sw7vho9hrmSZeIiXO
2Xnb+FbfpZjCCKYYsZlMgXgev0HJEio8kfZoAORkcKGYdZLC53BKSrlNX9Y8ycli
RYZhqU7rtNnytnkxJjSiTvpT3rN/fyerJQTM8UKaLTRx
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:41:49 2025 by rpki-client