Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa
File: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (raw, json)
Hash identifier: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=
Subject key identifier: 8B:F6:52:3F:89:AC:C6:6D:52:90:79:09:03:F1:ED:29:62:4F:36:36
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 0194266C11AEAC47C82D8FCC592F6452861B
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12993
IP address blocks: 46.28.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:11:ae:ac:47:c8:2d:8f:cc:59:2f:64:52:86:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bf6523f89acc66d5290790903f1ed29624f3636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:26:12:5e:8f:78:20:70:de:29:e2:6b:69:
76:01:fc:70:6b:c4:32:fb:e6:d4:e1:65:9f:74:d5:
fa:29:3e:c7:d3:6f:79:58:8a:d7:7e:ba:2c:c3:0c:
e1:58:d2:50:ef:0f:1f:d1:c2:15:a8:20:cb:81:cd:
6f:a0:07:2b:91:81:79:b4:b4:88:61:6b:a5:5e:e1:
a0:f0:c7:ee:01:8b:b4:b7:16:71:69:26:4e:e7:2c:
c9:a9:ef:84:61:ad:61:1e:1a:bd:d9:01:5c:9d:2d:
0c:55:c2:da:13:f3:29:26:71:49:04:d9:4d:5b:c0:
cc:ad:ad:a3:22:8b:ee:52:5a:53:02:c0:a7:9f:b3:
8d:98:89:b0:06:bc:cf:6a:b3:0d:31:ce:50:91:d8:
66:52:62:58:29:e0:16:2a:b9:92:49:48:b3:27:c0:
79:22:2f:b2:80:fe:78:02:51:2a:b0:0e:00:26:0e:
51:f7:fa:3c:38:25:75:f9:46:62:61:56:c7:a7:2d:
55:52:40:ec:24:7f:d2:4d:43:5b:c9:39:ef:10:09:
29:f4:c6:6a:3a:70:07:eb:1d:62:15:e2:9c:f9:be:
a1:6d:fd:ce:d7:fd:ef:49:08:aa:5a:bb:b4:41:f2:
ae:57:58:85:8b:84:32:68:8a:5c:8d:46:63:93:d3:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:52:3F:89:AC:C6:6D:52:90:79:09:03:F1:ED:29:62:4F:36:36
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:47:de:cd:dc:90:54:5a:5c:01:af:f1:c2:70:c1:36:d4:c9:
42:55:f4:ad:cf:3b:0d:c5:cf:e6:50:55:77:25:00:7f:11:03:
17:92:24:90:74:bc:74:6b:81:a2:57:a1:a9:e4:a2:4b:01:01:
3e:db:0f:01:5c:24:3a:51:32:af:85:1a:1e:89:34:7e:d3:c5:
d1:37:75:92:9a:d6:bd:5d:64:1a:50:7f:a0:fb:0c:8f:eb:2b:
c9:dd:da:b8:25:6c:b1:6c:37:d4:79:c2:e9:72:82:fd:9c:b2:
82:eb:02:de:cd:71:da:27:c2:17:42:6c:ca:38:e5:35:4e:58:
b0:e9:61:ea:47:ff:a4:d6:9f:25:f7:78:42:93:f4:91:3b:2d:
31:2b:65:dc:4a:40:7b:72:c4:db:69:ec:b2:94:4c:b9:c4:7c:
2c:8a:66:a2:8f:c2:74:30:19:19:ed:68:ac:04:c2:ea:38:21:
36:1f:e7:4e:f3:7e:ea:4c:b4:4b:45:60:b3:e6:4c:e9:15:82:
87:26:59:22:34:19:a8:64:29:b2:89:df:f1:cf:f5:38:7a:04:
0e:80:f0:5f:d2:c1:21:84:ea:7b:8c:5d:0b:79:d7:0a:7f:40:
e1:22:0f:03:75:b3:28:3f:82:de:9a:60:3b:d3:5c:f7:fd:5e:
2e:eb:96:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBGurEfILY/MWS9kUoYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw
N2M1NDAwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmY2NTIzZjg5YWNjNjZkNTI5MDc5MDkwM2YxZWQyOTYyNGYzNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgmEl6PeCBw3inia2l2Afxwa8Qy
++bU4WWfdNX6KT7H0295WIrXfroswwzhWNJQ7w8f0cIVqCDLgc1voAcrkYF5tLSI
YWulXuGg8MfuAYu0txZxaSZO5yzJqe+EYa1hHhq92QFcnS0MVcLaE/MpJnFJBNlN
W8DMra2jIovuUlpTAsCnn7ONmImwBrzParMNMc5QkdhmUmJYKeAWKrmSSUizJ8B5
Ii+ygP54AlEqsA4AJg5R9/o8OCV1+UZiYVbHpy1VUkDsJH/STUNbyTnvEAkp9MZq
OnAH6x1iFeKc+b6hbf3O1/3vSQiqWru0QfKuV1iFi4QyaIpcjUZjk9PPywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIv2Uj+JrMZtUpB5CQPx7SliTzY2MB8GA1UdIwQY
MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt
ZjQ2ZjlkNjc0ZjZjLzEvaV9aU1A0bXN4bTFTa0hrSkFfSHRLV0pQTmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj
LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhw4MA0G
CSqGSIb3DQEBCwUAA4IBAQAsR97N3JBUWlwBr/HCcME21MlCVfStzzsNxc/mUFV3
JQB/EQMXkiSQdLx0a4GiV6Gp5KJLAQE+2w8BXCQ6UTKvhRoeiTR+08XRN3WSmta9
XWQaUH+g+wyP6yvJ3dq4JWyxbDfUecLpcoL9nLKC6wLezXHaJ8IXQmzKOOU1Tliw
6WHqR/+k1p8l93hCk/SROy0xK2XcSkB7csTbaeyylEy5xHwsimaij8J0MBkZ7Wis
BMLqOCE2H+dO837qTLRLRWCz5kzpFYKHJlkiNBmoZCmyid/xz/U4egQOgPBf0sEh
hOp7jF0LedcKf0DhIg8DdbMoP4LemmA701z3/V4u65Y8
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:56 2025 by rpki-client