Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa
File: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (raw, json)
Hash identifier: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=
Subject key identifier: 64:BD:95:3D:9F:FD:96:EC:6D:06:87:80:00:D2:A6:42:AE:F2:45:DE
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 0194266A56D5EE6346B5077DC55E0FFB7864
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa
Signing time: Thu 02 Jan 2025 09:48:10 +0000
ROA not before: Thu 02 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 188.125.163.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:56:d5:ee:63:46:b5:07:7d:c5:5e:0f:fb:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 2 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64bd953d9ffd96ec6d06878000d2a642aef245de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:8e:b8:3c:fe:75:3e:94:85:8a:7d:84:af:
ad:4d:da:81:ff:cc:f5:00:c5:dc:4f:8b:ce:68:99:
a7:8f:12:bf:8e:ec:88:33:95:30:7c:d9:d7:a3:8a:
57:e1:52:bb:08:ca:0d:41:5f:1c:2a:57:93:9b:2a:
de:a0:f5:34:6f:f5:d1:4e:24:f3:8e:90:2b:bf:5c:
84:67:6c:91:0f:bb:0d:70:f2:81:15:cf:e6:c9:89:
53:5d:5f:39:10:ba:c8:01:05:d8:43:53:08:78:6b:
6c:38:f4:b5:7e:64:af:35:7e:63:0b:68:15:5b:49:
41:ac:6f:31:93:cb:9e:4b:7d:31:dd:df:27:90:5d:
ca:18:67:29:b4:e7:b5:a1:c7:56:2e:d2:71:f0:68:
c4:ef:d3:b3:a5:8f:2d:33:dc:7e:6d:f1:c5:0a:f2:
45:70:79:1c:70:81:9e:84:f6:bf:12:a3:ea:4b:38:
cf:b6:45:33:f9:6c:3b:f6:5c:55:8a:06:10:c5:13:
a6:b8:5e:b0:90:20:cb:77:30:54:fd:9c:88:e5:b1:
bf:61:42:ae:fc:92:e2:e4:e7:75:3f:95:f6:a9:00:
66:7e:4a:18:d3:c8:36:f6:aa:ef:13:8a:dd:e0:52:
9b:59:31:eb:df:7e:dd:df:aa:3e:2d:b2:fa:c0:b9:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:95:3D:9F:FD:96:EC:6D:06:87:80:00:D2:A6:42:AE:F2:45:DE
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.163.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e7:65:35:30:b6:41:70:a4:18:b5:df:94:07:df:59:13:7e:
0c:2a:9d:7e:ed:1f:7f:92:38:9a:36:0f:56:3e:77:4e:ae:f8:
6c:c0:7a:74:6c:10:8a:80:26:d9:00:1f:d1:23:14:0a:b9:00:
09:c1:22:da:91:18:12:6e:fc:f8:e6:51:b3:7c:5a:05:07:b0:
61:69:89:37:31:31:29:23:67:93:02:b3:0f:6f:c6:6e:c3:5a:
b2:e2:f1:79:d7:56:e5:47:90:05:10:05:e3:44:73:44:10:9e:
ea:98:ad:11:cc:11:4b:43:c6:30:5b:68:54:d6:4b:9a:bb:8d:
f5:c7:02:8c:fd:59:b6:04:a7:b0:79:54:9c:13:32:68:ce:4b:
c0:f1:06:7d:5c:8c:65:78:6c:e7:0c:64:ce:4f:e0:c3:25:c8:
4b:b6:05:fc:9e:33:88:01:3d:bc:fc:a5:0b:5d:b2:73:3e:05:
94:77:49:36:8f:a2:79:27:42:a5:05:9d:34:34:96:a9:b7:f9:
6b:ac:21:84:2d:f7:35:de:6c:3b:42:02:1d:eb:10:b0:51:3d:
79:61:f2:e4:cd:44:6f:e9:d8:44:5b:f2:2f:1b:14:75:de:f7:
78:84:11:0a:27:21:c7:c6:ed:4d:3f:fa:92:4e:e4:2d:54:8c:
9b:43:37:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQmalbV7mNGtQd9xV4P+3hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjUwMTAyMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGJkOTUzZDlmZmQ5NmVjNmQwNjg3ODAwMGQyYTY0MmFlZjI0NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8SOuDz+dT6UhYp9hK+tTdqB/8z1
AMXcT4vOaJmnjxK/juyIM5UwfNnXo4pX4VK7CMoNQV8cKleTmyreoPU0b/XRTiTz
jpArv1yEZ2yRD7sNcPKBFc/myYlTXV85ELrIAQXYQ1MIeGtsOPS1fmSvNX5jC2gV
W0lBrG8xk8ueS30x3d8nkF3KGGcptOe1ocdWLtJx8GjE79OzpY8tM9x+bfHFCvJF
cHkccIGehPa/EqPqSzjPtkUz+Ww79lxVigYQxROmuF6wkCDLdzBU/ZyI5bG/YUKu
/JLi5Od1P5X2qQBmfkoY08g29qrvE4rd4FKbWTHr337d36o+LbL6wLlGvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGS9lT2f/ZbsbQaHgADSpkKu8kXeMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvWkwyVlBaXzlsdXh0Qm9lQUFOS21RcTd5UmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvH2jAwQA
vH2qMA0GCSqGSIb3DQEBCwUAA4IBAQAA52U1MLZBcKQYtd+UB99ZE34MKp1+7R9/
kjiaNg9WPndOrvhswHp0bBCKgCbZAB/RIxQKuQAJwSLakRgSbvz45lGzfFoFB7Bh
aYk3MTEpI2eTArMPb8Zuw1qy4vF511blR5AFEAXjRHNEEJ7qmK0RzBFLQ8YwW2hU
1kuau431xwKM/Vm2BKeweVScEzJozkvA8QZ9XIxleGznDGTOT+DDJchLtgX8njOI
AT28/KULXbJzPgWUd0k2j6J5J0KlBZ00NJapt/lrrCGELfc13mw7QgId6xCwUT15
YfLkzURv6dhEW/IvGxR13vd4hBEKJyHHxu1NP/qSTuQtVIybQzcv
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:47 2025 by rpki-client