Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa
File: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (raw, json)
Hash identifier: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=
Subject key identifier: CD:62:52:F6:A2:22:2A:13:C3:4C:60:69:D3:B1:27:37:EC:DC:E4:E9
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019427480ECF7AA556A1845DB63C0CF1296D
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15511
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0e:cf:7a:a5:56:a1:84:5d:b6:3c:0c:f1:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6252f6a2222a13c34c6069d3b12737ecdce4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:ad:b8:e2:f1:3a:50:7e:63:21:f6:f7:ab:
a7:5e:6f:74:fe:c5:0a:4e:5f:8c:9f:69:84:92:7d:
cb:0f:6d:7e:40:46:35:84:75:29:fc:8a:d2:44:ec:
32:ae:55:ff:e1:92:84:b4:11:17:d3:3b:cd:78:30:
af:9b:2b:26:c6:48:26:03:30:1c:2a:4e:c3:1c:cc:
69:1c:c6:ee:b4:a8:64:2a:57:56:47:5e:e5:75:61:
f3:fd:15:45:6c:55:91:d0:ca:b4:27:87:a6:4c:44:
50:b1:6f:cc:94:74:38:58:08:dd:e2:5b:3f:5a:14:
25:9a:70:f1:87:2a:07:97:04:04:3b:4c:f9:8a:b4:
c1:75:fa:21:26:d6:57:b7:87:2b:5c:c5:a8:bf:1a:
41:3b:82:ad:a5:1a:84:9a:bc:75:63:fd:b0:09:0b:
ec:b2:c7:de:d3:3c:55:c7:fe:37:e5:04:b9:76:cc:
de:46:be:62:2d:65:3b:64:55:f7:ba:36:33:a4:f8:
89:01:03:94:30:36:c5:9a:b4:d7:35:eb:79:5a:29:
50:ff:5f:65:42:e6:fb:c5:1d:b7:6c:8a:a7:25:33:
5c:e0:06:2c:99:c7:99:83:cd:99:aa:8d:16:9a:49:
91:d3:ea:03:05:96:45:e8:58:66:2a:9d:f2:04:18:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:52:F6:A2:22:2A:13:C3:4C:60:69:D3:B1:27:37:EC:DC:E4:E9
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:7a:bd:85:e6:a6:ba:a2:30:77:b5:13:33:18:1c:27:0b:f4:
33:39:22:ed:81:d6:af:66:6c:04:70:07:a3:c2:b5:49:4c:48:
71:b4:33:01:b7:0e:ae:9d:e2:6d:2b:25:b8:18:3a:70:4f:e8:
e5:57:4d:90:ed:5f:db:d2:cc:16:a2:64:8f:ab:1f:1c:8b:f9:
cb:4f:e0:b4:b2:56:a2:76:36:c4:b2:22:2c:bc:d2:6c:35:ea:
74:4a:fd:f4:a2:b7:36:c6:75:46:3f:56:4a:a0:b2:62:63:1b:
bb:2e:a4:e2:78:21:b1:80:57:54:9e:73:83:9f:79:c4:6c:65:
13:fb:a5:b7:bf:ad:fc:09:81:50:ee:10:ec:96:38:51:f3:4b:
e0:87:a0:55:15:ae:92:8b:4a:26:2a:cc:fc:ae:29:58:b9:ca:
55:c3:9b:4e:30:96:98:9a:c8:c4:22:3e:dd:b2:42:23:df:ec:
27:6b:56:e8:11:2a:35:38:c6:e8:13:d5:88:b1:ff:58:2e:da:
ae:82:fa:5b:3c:9f:65:39:9d:18:c5:86:1d:2a:4e:b1:ec:d8:
a5:b3:16:41:bb:0d:6f:8c:20:ca:9c:31:11:ff:f1:f8:c5:84:
85:24:33:1c:61:9a:51:f0:33:f8:f4:2f:67:e6:cd:fe:f0:ea:
7d:fe:6d:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSA7PeqVWoYRdtjwM8SltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjUwMTAyMTM1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDYyNTJmNmEyMjIyYTEzYzM0YzYwNjlkM2IxMjczN2VjZGNlNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWtuOLxOlB+YyH296unXm90/sUK
Tl+Mn2mEkn3LD21+QEY1hHUp/IrSROwyrlX/4ZKEtBEX0zvNeDCvmysmxkgmAzAc
Kk7DHMxpHMbutKhkKldWR17ldWHz/RVFbFWR0Mq0J4emTERQsW/MlHQ4WAjd4ls/
WhQlmnDxhyoHlwQEO0z5irTBdfohJtZXt4crXMWovxpBO4KtpRqEmrx1Y/2wCQvs
ssfe0zxVx/435QS5dszeRr5iLWU7ZFX3ujYzpPiJAQOUMDbFmrTXNet5WilQ/19l
Qub7xR23bIqnJTNc4AYsmceZg82Zqo0WmkmR0+oDBZZF6FhmKp3yBBiV3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1iUvaiIioTw0xgadOxJzfs3OTpMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEveldKUzlxSWlLaFBEVEdCcDA3RW5OLXpjNU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSYcAwQC
uV/8MA0GCSqGSIb3DQEBCwUAA4IBAQC9er2F5qa6ojB3tRMzGBwnC/QzOSLtgdav
ZmwEcAejwrVJTEhxtDMBtw6uneJtKyW4GDpwT+jlV02Q7V/b0swWomSPqx8ci/nL
T+C0slaidjbEsiIsvNJsNep0Sv30orc2xnVGP1ZKoLJiYxu7LqTieCGxgFdUnnOD
n3nEbGUT+6W3v638CYFQ7hDsljhR80vgh6BVFa6Si0omKsz8rilYucpVw5tOMJaY
msjEIj7dskIj3+wna1boESo1OMboE9WIsf9YLtqugvpbPJ9lOZ0YxYYdKk6x7Nil
sxZBuw1vjCDKnDER//H4xYSFJDMcYZpR8DP49C9n5s3+8Op9/m1B
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:26 2025 by rpki-client