Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/ZOAIGzltyHMXQU6ltllGlFexC3s.roa
File: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (raw, json)
Hash identifier: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=
Subject key identifier: 64:E0:08:1B:39:6D:C8:73:17:41:4E:A5:B6:59:46:94:57:B1:0B:7B
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 01942143A4CB7074A1BF4C11E6CF7BB770C8
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/ZOAIGzltyHMXQU6ltllGlFexC3s.roa
Signing time: Wed 01 Jan 2025 09:47:48 +0000
ROA not before: Wed 01 Jan 2025 09:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50919
IP address blocks: 185.96.34.0/24 maxlen: 24
2a13:eb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a4:cb:70:74:a1:bf:4c:11:e6:cf:7b:b7:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e0081b396dc87317414ea5b659469457b10b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:64:71:e8:e5:c7:b1:e9:69:38:7c:49:a1:
c7:0d:37:66:70:52:af:ec:29:ba:1d:0e:fb:b7:0b:
5a:cb:2c:06:80:ef:7b:6d:75:5f:ba:95:bf:2a:94:
bb:15:56:be:8b:ee:2e:b3:f9:75:b6:d7:29:84:e7:
59:a6:26:68:51:64:f0:58:a9:a9:af:be:d7:42:f2:
3c:80:ed:9e:c4:41:e4:18:13:b5:67:d0:31:f4:23:
57:a5:36:fb:38:e3:3a:51:4f:0e:97:f6:06:5e:13:
51:f3:95:06:00:34:a4:08:35:d9:c8:30:66:0a:e2:
18:ef:b1:6b:31:b4:4d:f2:c9:b7:43:52:f6:d4:0e:
f8:94:09:b2:b4:3c:8a:15:8f:1a:b1:69:85:96:8a:
2a:a8:dc:a5:ba:bf:ce:35:b9:eb:92:de:77:9e:c7:
ec:61:48:19:f9:b4:35:aa:20:ec:87:61:a6:0f:20:
ef:1e:81:5d:e1:46:20:4c:ba:1b:63:81:45:b0:7d:
af:f8:13:04:0a:ad:b1:27:ec:dd:cf:b0:d0:26:5a:
d8:29:96:fe:32:f2:06:fa:3b:a4:a3:84:2f:56:c2:
ec:52:2f:69:cc:d1:54:1e:c4:2b:6e:4f:71:d6:b3:
d9:cd:ea:46:63:4e:b4:a5:83:55:12:26:34:f4:e5:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:08:1B:39:6D:C8:73:17:41:4E:A5:B6:59:46:94:57:B1:0B:7B
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/ZOAIGzltyHMXQU6ltllGlFexC3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.34.0/24
IPv6:
2a13:eb00::/48
Signature Algorithm: sha256WithRSAEncryption
76:15:4e:ef:b4:d5:e0:9b:8c:72:2e:04:ab:6f:aa:1d:5a:8b:
4b:4b:37:66:1c:8b:8b:42:23:bf:f7:56:b0:69:94:06:53:76:
81:29:41:9e:19:21:76:55:69:61:c4:8c:e7:cc:dc:fe:2d:0e:
29:dd:d3:e6:e1:15:78:35:3f:c0:0a:be:ab:c1:aa:30:12:6b:
e2:ba:45:c4:23:a0:be:7e:a0:e8:5e:eb:1a:a8:27:96:f0:e1:
e7:e1:0f:6a:4c:aa:fa:95:c3:fe:30:41:6b:65:66:a0:99:71:
2c:a4:ea:b5:31:06:8c:4e:2b:7a:9f:aa:6b:02:ed:66:1d:69:
fa:3f:6b:e9:51:21:15:d6:25:8b:0f:8e:fc:eb:6c:ff:c1:25:
19:3b:6f:1f:ae:0f:4e:2c:73:35:26:70:6e:a2:cb:b1:0c:4f:
49:e5:ea:38:f3:47:4c:d8:21:af:e8:84:5f:2e:f2:c6:a7:22:
36:e1:be:f7:89:27:e2:c9:10:f9:1e:99:97:dd:6c:58:65:6a:
05:04:b1:da:24:f5:d1:9c:ce:ad:cf:2d:ab:72:29:43:1f:2f:
a0:07:1c:90:61:54:3b:e7:57:db:82:1f:30:9c:d8:c8:84:1e:
b9:20:47:9d:fe:a4:a1:91:65:3a:c0:51:0d:49:23:6f:5e:d0:
cf:f4:5f:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhQ6TLcHShv0wR5s97t3DIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjUwMTAxMDk0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGUwMDgxYjM5NmRjODczMTc0MTRlYTViNjU5NDY5NDU3YjEwYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW9kcejlx7HpaTh8SaHHDTdmcFKv
7Cm6HQ77twtayywGgO97bXVfupW/KpS7FVa+i+4us/l1ttcphOdZpiZoUWTwWKmp
r77XQvI8gO2exEHkGBO1Z9Ax9CNXpTb7OOM6UU8Ol/YGXhNR85UGADSkCDXZyDBm
CuIY77FrMbRN8sm3Q1L21A74lAmytDyKFY8asWmFlooqqNylur/ONbnrkt53nsfs
YUgZ+bQ1qiDsh2GmDyDvHoFd4UYgTLobY4FFsH2v+BMECq2xJ+zdz7DQJlrYKZb+
MvIG+juko4QvVsLsUi9pzNFUHsQrbk9x1rPZzepGY060pYNVEiY09OXKdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGTgCBs5bchzF0FOpbZZRpRXsQt7MB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvWk9BSUd6bHR5SE1YUVU2bHRsbEdsRmV4QzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWAiMA8E
AgACMAkDBwAqE+sAAAAwDQYJKoZIhvcNAQELBQADggEBAHYVTu+01eCbjHIuBKtv
qh1ai0tLN2Yci4tCI7/3VrBplAZTdoEpQZ4ZIXZVaWHEjOfM3P4tDind0+bhFXg1
P8AKvqvBqjASa+K6RcQjoL5+oOhe6xqoJ5bw4efhD2pMqvqVw/4wQWtlZqCZcSyk
6rUxBoxOK3qfqmsC7WYdafo/a+lRIRXWJYsPjvzrbP/BJRk7bx+uD04sczUmcG6i
y7EMT0nl6jjzR0zYIa/ohF8u8sanIjbhvveJJ+LJEPkemZfdbFhlagUEsdok9dGc
zq3PLatyKUMfL6AHHJBhVDvnV9uCHzCc2MiEHrkgR53+pKGRZTrAUQ1JI29e0M/0
X1A=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:46:56 2025 by rpki-client