Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z7dmLN0klYx2IS92xG2UbFLMlgM.roa
File: Z7dmLN0klYx2IS92xG2UbFLMlgM.roa (raw, json)
Hash identifier: 0ze7E8vWkos5rrluUzSSi4onbktIMyBZbBQ9c710/tQ=
Subject key identifier: 67:B7:66:2C:DD:24:95:8C:76:21:2F:76:C4:6D:94:6C:52:CC:96:03
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD542FFF8C21EE2B2281C428BA3956
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z7dmLN0klYx2IS92xG2UbFLMlgM.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43832
IP address blocks: 193.232.160.0/24 maxlen: 24
193.232.177.0/24 maxlen: 24
2a0c:a9c7:160::/48 maxlen: 48
2a0c:a9c7:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:54:2f:ff:8c:21:ee:2b:22:81:c4:28:ba:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b7662cdd24958c76212f76c46d946c52cc9603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:1a:da:27:13:f1:49:62:b3:21:1d:92:a8:
c2:27:36:3b:fd:da:af:25:14:6c:41:c0:6e:e3:d0:
76:df:c9:eb:35:f3:38:03:f8:c0:e0:9c:db:3f:3b:
2c:9d:35:05:f1:ee:7e:07:bc:88:91:d9:42:a1:47:
43:7c:e3:03:a3:d2:4d:64:94:95:f3:c3:2d:7f:d1:
0f:e1:50:e6:79:62:de:04:ab:b8:ba:d5:6a:b7:3f:
c2:76:60:4a:8a:9c:46:c4:63:5b:b2:a9:d0:ae:60:
5f:9f:42:1e:43:43:63:aa:ee:a8:ea:7d:ac:f9:c4:
cc:98:0a:2f:30:d9:52:9f:5b:a0:3a:6c:7f:1a:25:
28:93:69:8b:12:20:00:f1:b4:71:f5:65:9e:36:21:
05:08:1e:f3:8b:25:1a:95:57:91:65:b6:14:3b:3b:
cc:c9:95:7c:8a:c0:2d:19:75:8b:84:5a:93:81:0e:
c9:aa:2d:36:ae:fd:86:e2:28:e1:0b:a3:8d:94:0a:
fc:da:9d:c4:49:04:f5:43:2a:de:f0:80:1d:71:cc:
cf:0f:72:0c:8e:d3:51:1d:c6:ec:2d:94:58:6f:59:
a0:20:a1:56:2c:31:7a:2f:5c:c8:d1:30:b1:d7:7b:
68:1e:a4:e9:da:aa:14:62:cf:9f:4a:01:be:06:d8:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:66:2C:DD:24:95:8C:76:21:2F:76:C4:6D:94:6C:52:CC:96:03
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z7dmLN0klYx2IS92xG2UbFLMlgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.160.0/24
193.232.177.0/24
IPv6:
2a0c:a9c7:160::/48
2a0c:a9c7:177::/48
Signature Algorithm: sha256WithRSAEncryption
0a:83:1f:ec:1b:8d:32:17:8a:70:56:5d:f5:7e:e0:ec:b0:39:
1c:d6:3b:7e:77:33:cd:21:71:0e:fb:2e:cf:fe:4b:c0:29:d0:
05:4a:71:79:62:fd:78:78:2f:85:35:3c:ed:fb:c3:48:32:2a:
78:d5:2f:44:61:e4:80:b0:9c:2f:db:e3:5c:1c:2f:22:d0:1f:
11:d3:94:07:1a:66:52:05:00:66:d0:c0:e5:f7:b3:04:01:4d:
71:49:84:cf:f7:97:7f:cc:f0:bc:31:5f:43:4a:ba:32:f3:48:
82:fd:a9:52:59:0a:06:70:41:88:0b:08:99:d6:d6:9a:51:ff:
94:a1:cb:ce:72:ba:82:64:7d:45:59:e4:65:6a:f4:88:cc:69:
a2:38:a8:07:3b:a3:0a:46:9b:95:54:d3:58:6b:63:48:82:e0:
64:d6:db:df:74:d7:b1:0e:24:94:b9:95:f8:0e:01:d7:bc:f4:
b8:79:30:79:a1:52:0b:02:0b:74:93:52:d1:97:3a:41:49:7c:
5e:77:b7:af:d7:39:c9:6d:fa:20:80:32:7e:b8:77:f2:16:b9:
0c:70:40:bf:b2:14:cc:b2:09:0e:11:52:3e:38:08:4b:f1:04:
7f:f6:10:40:2d:ab:9d:9e:94:c5:56:2d:f8:75:f5:43:30:76:
e1:70:da:f3
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQl/VQv/4wh7isigcQoujlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjUwMTAyMDc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2I3NjYyY2RkMjQ5NThjNzYyMTJmNzZjNDZkOTQ2YzUyY2M5NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaYa2icT8UlisyEdkqjCJzY7/dqv
JRRsQcBu49B238nrNfM4A/jA4JzbPzssnTUF8e5+B7yIkdlCoUdDfOMDo9JNZJSV
88Mtf9EP4VDmeWLeBKu4utVqtz/CdmBKipxGxGNbsqnQrmBfn0IeQ0Njqu6o6n2s
+cTMmAovMNlSn1ugOmx/GiUok2mLEiAA8bRx9WWeNiEFCB7ziyUalVeRZbYUOzvM
yZV8isAtGXWLhFqTgQ7Jqi02rv2G4ijhC6ONlAr82p3ESQT1Qyre8IAdcczPD3IM
jtNRHcbsLZRYb1mgIKFWLDF6L1zI0TCx13toHqTp2qoUYs+fSgG+BthvkwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGe3ZizdJJWMdiEvdsRtlGxSzJYDMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvWjdkbUxOMGtsWXgySVM5MnhHMlViRkxNbGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAweigAwQA
weixMBgEAgACMBIDBwAqDKnHAWADBwAqDKnHAXcwDQYJKoZIhvcNAQELBQADggEB
AAqDH+wbjTIXinBWXfV+4OywORzWO353M80hcQ77Ls/+S8Ap0AVKcXli/Xh4L4U1
PO37w0gyKnjVL0Rh5ICwnC/b41wcLyLQHxHTlAcaZlIFAGbQwOX3swQBTXFJhM/3
l3/M8LwxX0NKujLzSIL9qVJZCgZwQYgLCJnW1ppR/5Shy85yuoJkfUVZ5GVq9IjM
aaI4qAc7owpGm5VU01hrY0iC4GTW299017EOJJS5lfgOAde89Lh5MHmhUgsCC3ST
UtGXOkFJfF53t6/XOclt+iCAMn64d/IWuQxwQL+yFMyyCQ4RUj44CEvxBH/2EEAt
q52elMVWLfh19UMwduFw2vM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:51:39 2025 by rpki-client