Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zOD_SqCUM3Bx9LGZZ7dWhjPuM0E.roa
File: zOD_SqCUM3Bx9LGZZ7dWhjPuM0E.roa (raw, json)
Hash identifier: HDSfJ8+GRBlCyVekeDxxdVNbr85oqa4sPGeAXhVyRJs=
Subject key identifier: CC:E0:FF:4A:A0:94:33:70:71:F4:B1:99:67:B7:56:86:33:EE:33:41
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B263139A52E6711ECCB650E79B7DCF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zOD_SqCUM3Bx9LGZZ7dWhjPuM0E.roa
Signing time: Wed 01 Jan 2025 11:48:46 +0000
ROA not before: Wed 01 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51783
IP address blocks: 85.143.168.0/22 maxlen: 22
85.143.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:63:13:9a:52:e6:71:1e:cc:b6:50:e7:9b:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce0ff4aa094337071f4b19967b7568633ee3341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:16:b7:db:13:11:d5:79:bd:2c:69:73:6d:
f7:3e:ee:15:b4:41:a7:b7:a4:4d:f8:bc:ce:66:3f:
e7:f0:52:f4:6c:87:db:5c:cf:46:ff:47:ec:0a:38:
4d:d5:72:b9:49:69:be:3c:e8:55:a0:82:5f:e3:09:
ff:96:7a:02:96:46:45:18:67:93:8d:fd:b4:0a:92:
7e:37:f7:ce:31:f7:d4:85:66:a1:20:8a:d3:ab:55:
8a:a8:51:2f:21:ec:55:81:dd:c1:76:15:ff:73:59:
f1:f0:3c:00:b2:27:89:04:f8:c5:87:ee:aa:d1:61:
7b:fd:82:5c:b8:26:1e:9e:37:b7:52:35:1c:e8:05:
55:2b:93:25:3c:b4:9d:f0:bc:34:c3:09:6c:19:3a:
71:60:c8:98:f7:e5:19:18:b6:98:7a:59:4a:4e:54:
5e:bb:38:b3:87:54:f5:92:94:98:83:f5:d2:ee:f0:
d7:ce:49:cb:cb:fa:fd:7a:7d:46:ee:c6:f9:ee:b8:
d1:77:9b:ef:12:d5:41:84:cb:a1:f0:e7:f3:cf:1d:
de:6d:b8:c8:0b:74:e2:27:5e:97:10:5e:3e:d4:39:
7d:f9:97:0e:3a:3c:de:bf:e2:7a:25:39:de:57:40:
74:f4:aa:d7:ca:b9:57:11:d0:ff:9f:89:3f:65:f2:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:FF:4A:A0:94:33:70:71:F4:B1:99:67:B7:56:86:33:EE:33:41
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zOD_SqCUM3Bx9LGZZ7dWhjPuM0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.168.0/22
85.143.188.0/23
Signature Algorithm: sha256WithRSAEncryption
65:fd:77:00:7a:0e:00:1c:83:4c:bb:cb:19:30:d2:cb:de:f3:
27:6a:71:5f:71:ea:be:35:d8:ee:d8:fa:03:d5:36:d0:e5:52:
44:45:70:c9:0c:e2:d6:32:5d:51:ee:21:ac:5c:3b:92:9a:91:
37:c2:c3:ff:1c:54:c6:bf:ae:10:3b:08:bc:d3:8a:9e:31:84:
02:66:77:10:a7:e4:f0:50:57:26:34:eb:2b:ca:5f:36:22:11:
20:db:79:8f:c1:27:5e:78:c3:cb:43:8f:42:6e:85:b5:71:2c:
40:04:0b:30:fa:2b:8c:47:eb:f9:99:e6:db:8e:b2:48:02:46:
c3:03:10:fb:2a:02:b0:97:f3:a6:bc:10:16:1c:58:93:1e:48:
3a:63:0a:38:30:17:c5:a0:2a:b8:8e:fb:6c:ef:60:e5:10:25:
68:f6:85:95:c1:4f:f8:09:f1:27:9e:2f:1e:e4:86:84:8c:18:
1e:65:48:66:53:f9:f7:d8:19:a5:e5:c9:12:c6:5d:bd:d0:99:
6a:a3:c3:ba:08:56:30:5e:8d:46:8f:39:ee:10:88:a5:92:80:
e0:f3:47:73:5d:20:b3:c7:c3:5a:17:b7:52:0b:9c:12:6e:b9:
f3:6a:3e:b8:a8:fc:22:d9:c4:b5:88:f1:5a:bd:af:2b:6a:f5:
d2:99:4c:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsmMTmlLmcR7MtlDnm33PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2UwZmY0YWEwOTQzMzcwNzFmNGIxOTk2N2I3NTY4NjMzZWUzMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UoWt9sTEdV5vSxpc233Pu4VtEGn
t6RN+LzOZj/n8FL0bIfbXM9G/0fsCjhN1XK5SWm+POhVoIJf4wn/lnoClkZFGGeT
jf20CpJ+N/fOMffUhWahIIrTq1WKqFEvIexVgd3BdhX/c1nx8DwAsieJBPjFh+6q
0WF7/YJcuCYenje3UjUc6AVVK5MlPLSd8Lw0wwlsGTpxYMiY9+UZGLaYellKTlRe
uzizh1T1kpSYg/XS7vDXzknLy/r9en1G7sb57rjRd5vvEtVBhMuh8Ofzzx3ebbjI
C3TiJ16XEF4+1Dl9+ZcOOjzev+J6JTneV0B09KrXyrlXEdD/n4k/ZfJ+WwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMzg/0qglDNwcfSxmWe3VoYz7jNBMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvek9EX1NxQ1VNM0J4OUxHWlo3ZFdoalB1TTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVY+oAwQB
VY+8MA0GCSqGSIb3DQEBCwUAA4IBAQBl/XcAeg4AHINMu8sZMNLL3vMnanFfceq+
Ndju2PoD1TbQ5VJERXDJDOLWMl1R7iGsXDuSmpE3wsP/HFTGv64QOwi804qeMYQC
ZncQp+TwUFcmNOsryl82IhEg23mPwSdeeMPLQ49CboW1cSxABAsw+iuMR+v5mebb
jrJIAkbDAxD7KgKwl/OmvBAWHFiTHkg6Ywo4MBfFoCq4jvts72DlECVo9oWVwU/4
CfEnni8e5IaEjBgeZUhmU/n32Bml5ckSxl290Jlqo8O6CFYwXo1GjznuEIilkoDg
80dzXSCzx8NaF7dSC5wSbrnzaj64qPwi2cS1iPFava8ravXSmUzY
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:23:20 2025 by rpki-client