Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/GrZCo-Pl-pKds5zmwg7ubalVFTA.roa
File: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (raw, json)
Hash identifier: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=
Subject key identifier: 1A:B6:42:A3:E3:E5:FA:92:9D:B3:9C:E6:C2:0E:EE:6D:A9:55:15:30
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194B9DAB88B06F589E0FC90F58309265645
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/GrZCo-Pl-pKds5zmwg7ubalVFTA.roa
Signing time: Fri 31 Jan 2025 00:55:06 +0000
ROA not before: Fri 31 Jan 2025 00:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56740
IP address blocks: 2a0e:e6c0:8010::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:da:b8:8b:06:f5:89:e0:fc:90:f5:83:09:26:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 31 00:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab642a3e3e5fa929db39ce6c20eee6da9551530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:32:e0:67:ff:ee:d1:f9:b5:e4:83:a9:ab:
cb:03:61:c7:25:e8:ec:2c:c7:ac:09:80:f5:5a:ac:
9c:e2:84:c7:ad:69:26:d0:1b:60:4f:94:de:5d:53:
e9:6a:f9:f3:71:8e:cb:62:f3:f5:5a:7a:88:46:6d:
d5:9a:28:8e:b5:18:ba:22:cf:b9:53:47:4e:1a:e6:
c5:8b:3b:c9:f8:14:e1:dd:f3:35:22:1a:2a:6f:a6:
2b:51:54:0b:cd:41:4e:b3:3d:cc:34:50:46:ff:37:
4f:5a:ba:66:6b:84:1c:5b:d5:7d:9a:1f:20:e7:10:
ea:81:5b:f0:7e:a9:6c:71:65:88:3c:21:86:36:04:
67:0e:d9:3f:8c:43:fd:04:80:34:4f:86:e9:cc:62:
94:b7:67:21:1a:db:d6:35:4e:15:69:a5:a0:8f:bd:
77:c4:26:96:f3:b0:46:c6:da:96:6f:85:80:07:1f:
87:0c:a9:68:bd:51:7b:c9:92:3b:c2:fb:56:e7:aa:
0f:fe:cc:d8:f8:db:26:16:07:3d:ad:a8:fa:0b:dc:
68:13:de:88:8b:0f:1e:fc:f3:8d:9a:ee:fc:bc:ca:
69:4b:78:d6:e7:81:0f:75:a3:cb:db:f9:d1:69:02:
fa:45:ef:05:f8:8b:9a:aa:00:2e:7b:17:e1:bc:4f:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:42:A3:E3:E5:FA:92:9D:B3:9C:E6:C2:0E:EE:6D:A9:55:15:30
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/GrZCo-Pl-pKds5zmwg7ubalVFTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e6c0:8010::/44
Signature Algorithm: sha256WithRSAEncryption
42:44:c7:be:51:44:30:49:47:3a:ac:96:f6:5d:86:33:4f:cc:
f1:97:e4:ae:55:63:ef:3d:7f:e6:83:fd:e9:ba:5d:72:36:eb:
e8:98:c7:68:6c:00:14:6a:f9:25:7a:de:19:91:8d:23:1e:0c:
20:eb:cb:3a:70:8b:be:48:b6:3a:ef:b4:a0:2f:22:ac:58:9b:
3a:79:3c:3c:10:1c:27:09:42:9b:6c:e8:0b:75:1a:4f:01:63:
77:dc:38:77:80:50:ca:68:b2:dc:2c:3b:8e:ca:cc:c0:82:ee:
d4:93:7d:ef:ed:ef:ed:41:a6:f4:8f:97:5e:85:9c:a2:de:d5:
8a:a8:88:40:0a:e4:31:f0:cc:57:a1:31:43:b3:70:94:86:21:
07:81:6e:c2:5d:25:c7:ea:ae:5c:2d:39:02:c1:dd:fc:14:35:
f5:ef:47:f2:12:ce:87:56:4c:ec:4b:b5:78:29:f5:49:70:73:
9b:4d:10:20:0f:da:19:5c:ae:3b:bd:96:06:c8:c0:ac:15:af:
4b:c6:a0:66:49:f3:50:1c:99:c6:93:a6:de:2c:11:14:bf:7d:
5e:9b:48:c4:b9:e4:c3:8c:b4:9d:fc:2c:2e:9a:a2:e3:82:9d:
c8:65:2d:52:23:48:eb:ba:86:88:71:e1:1a:34:e0:96:60:eb:
a1:64:50:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZS52riLBvWJ4PyQ9YMJJlZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjUwMTMxMDA1NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWI2NDJhM2UzZTVmYTkyOWRiMzljZTZjMjBlZWU2ZGE5NTUxNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua8y4Gf/7tH5teSDqavLA2HHJejs
LMesCYD1Wqyc4oTHrWkm0BtgT5TeXVPpavnzcY7LYvP1WnqIRm3VmiiOtRi6Is+5
U0dOGubFizvJ+BTh3fM1Ihoqb6YrUVQLzUFOsz3MNFBG/zdPWrpma4QcW9V9mh8g
5xDqgVvwfqlscWWIPCGGNgRnDtk/jEP9BIA0T4bpzGKUt2chGtvWNU4VaaWgj713
xCaW87BGxtqWb4WABx+HDKlovVF7yZI7wvtW56oP/szY+NsmFgc9raj6C9xoE96I
iw8e/PONmu78vMppS3jW54EPdaPL2/nRaQL6Re8F+IuaqgAuexfhvE8UJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBq2QqPj5fqSnbOc5sIO7m2pVRUwMB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvR3JaQ28tUGwtcEtkczV6bXdnN3ViYWxWRlRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7mwIAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBCRMe+UUQwSUc6rJb2XYYzT8zxl+SuVWPvPX/m
g/3pul1yNuvomMdobAAUavklet4ZkY0jHgwg68s6cIu+SLY677SgLyKsWJs6eTw8
EBwnCUKbbOgLdRpPAWN33Dh3gFDKaLLcLDuOyszAgu7Uk33v7e/tQab0j5dehZyi
3tWKqIhACuQx8MxXoTFDs3CUhiEHgW7CXSXH6q5cLTkCwd38FDX170fyEs6HVkzs
S7V4KfVJcHObTRAgD9oZXK47vZYGyMCsFa9LxqBmSfNQHJnGk6beLBEUv31em0jE
ueTDjLSd/CwumqLjgp3IZS1SI0jruoaIceEaNOCWYOuhZFCL
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:04 2025 by rpki-client