Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa
File: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (raw, json)
Hash identifier: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=
Subject key identifier: D7:3C:6A:4D:9B:BA:49:1C:98:BF:F1:5F:CB:49:45:A0:13:CE:12:6E
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 019423D749BDCE2732467934EBE228C4D196
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa
Signing time: Wed 01 Jan 2025 21:48:19 +0000
ROA not before: Wed 01 Jan 2025 21:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57163
IP address blocks: 195.229.145.0/24 maxlen: 24
195.229.146.0/24 maxlen: 24
195.229.147.0/24 maxlen: 24
195.229.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:49:bd:ce:27:32:46:79:34:eb:e2:28:c4:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 21:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d73c6a4d9bba491c98bff15fcb4945a013ce126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:1f:2a:57:a1:8d:d5:87:70:ee:ed:7d:17:
52:4c:4b:5d:31:76:b9:5a:e7:da:64:91:0c:5a:62:
45:f1:9e:22:83:16:94:2f:16:08:d0:b3:05:76:35:
ff:89:32:b3:70:2c:a3:c4:6b:29:f6:7d:dd:d4:11:
e2:6f:8c:c1:0c:e6:60:ca:9e:cd:5c:a2:c5:d5:eb:
54:2a:05:54:ab:f4:96:cf:8e:be:c5:44:2b:02:2a:
0b:da:bb:cf:63:8f:ee:9c:fe:0f:63:ac:2f:ad:dd:
bf:af:c9:a7:80:a8:2c:3b:30:12:1d:bb:70:ee:6a:
d7:13:f5:22:c2:f9:9b:11:b0:d4:9e:49:e9:89:aa:
4d:1b:07:77:72:01:ab:9b:96:fe:d8:33:c1:1a:f2:
f8:d7:1a:4d:f4:0c:e4:8e:74:7b:31:f2:26:83:01:
ec:b9:af:0a:87:32:6b:98:02:05:62:9c:3b:0e:68:
bf:4d:61:31:f2:51:79:da:68:24:29:a9:ab:ca:7d:
a4:a9:35:da:94:8e:1d:a3:09:c0:9f:1e:47:e9:0c:
f1:7a:b3:ba:16:fb:26:a6:7e:f8:4d:b5:72:9c:0d:
03:02:aa:ae:36:74:71:d6:de:64:49:ea:95:99:59:
1f:9d:5f:6b:03:07:60:40:6c:f5:e6:1b:a8:b4:36:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3C:6A:4D:9B:BA:49:1C:98:BF:F1:5F:CB:49:45:A0:13:CE:12:6E
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.229.145.0-195.229.148.255
Signature Algorithm: sha256WithRSAEncryption
31:25:8d:50:b9:1c:48:c9:d6:6f:da:e4:c4:b2:b8:a8:02:42:
9b:6e:ee:28:42:7f:c4:f0:71:97:f4:db:ad:24:fc:94:e3:2c:
9e:8a:e1:35:e5:4c:ee:cb:cc:19:f6:e9:2b:b6:2d:29:9b:8a:
19:d6:b7:08:d6:60:87:d9:3e:38:37:da:26:a5:36:3e:61:29:
ef:9a:45:30:0e:a8:9e:0e:09:29:5d:32:c6:c1:2f:60:31:53:
7d:3c:58:42:d4:a6:3a:f7:85:36:ea:80:5d:93:78:68:ad:fc:
35:ff:29:2f:e6:80:5f:4e:a2:b0:31:cf:18:4e:2c:3a:4a:39:
f9:63:a9:0d:5a:1b:6a:d9:5d:7d:02:a7:8f:25:cb:84:50:cf:
ca:a1:8b:dc:3b:5a:71:1b:ed:e4:c4:18:fe:ba:f5:b5:47:ba:
6c:3d:e7:5c:40:69:dc:c4:9d:11:19:4d:75:f0:ed:2b:00:0a:
ea:b6:36:da:e8:9f:28:62:08:f6:80:07:d3:d4:22:f9:3a:39:
3d:ae:3b:49:bf:6c:15:c3:1c:25:47:a5:77:f3:d1:c2:b6:69:
ab:05:a5:4d:91:e3:52:92:62:ba:09:4a:8e:87:b9:60:ed:1f:
8e:b5:87:08:50:86:fe:b9:5a:68:39:47:32:6e:ef:4a:78:d1:
0e:74:68:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj10m9zicyRnk06+IoxNGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjUwMTAxMjE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzNjNmE0ZDliYmE0OTFjOThiZmYxNWZjYjQ5NDVhMDEzY2UxMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUfKlehjdWHcO7tfRdSTEtdMXa5
WufaZJEMWmJF8Z4igxaULxYI0LMFdjX/iTKzcCyjxGsp9n3d1BHib4zBDOZgyp7N
XKLF1etUKgVUq/SWz46+xUQrAioL2rvPY4/unP4PY6wvrd2/r8mngKgsOzASHbtw
7mrXE/UiwvmbEbDUnknpiapNGwd3cgGrm5b+2DPBGvL41xpN9AzkjnR7MfImgwHs
ua8KhzJrmAIFYpw7Dmi/TWEx8lF52mgkKamryn2kqTXalI4downAnx5H6QzxerO6
Fvsmpn74TbVynA0DAqquNnRx1t5kSeqVmVkfnV9rAwdgQGz15huotDbc7wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNc8ak2bukkcmL/xX8tJRaATzhJuMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvMXp4cVRadTZTUnlZdl9GZnkwbEZvQlBPRW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD5ZED
BADD5ZQwDQYJKoZIhvcNAQELBQADggEBADEljVC5HEjJ1m/a5MSyuKgCQptu7ihC
f8TwcZf0260k/JTjLJ6K4TXlTO7LzBn26Su2LSmbihnWtwjWYIfZPjg32ialNj5h
Ke+aRTAOqJ4OCSldMsbBL2AxU308WELUpjr3hTbqgF2TeGit/DX/KS/mgF9OorAx
zxhOLDpKOfljqQ1aG2rZXX0Cp48ly4RQz8qhi9w7WnEb7eTEGP669bVHumw951xA
adzEnREZTXXw7SsACuq2NtronyhiCPaAB9PUIvk6OT2uO0m/bBXDHCVHpXfz0cK2
aasFpU2R41KSYroJSo6HuWDtH461hwhQhv65Wmg5RzJu70p40Q50aC0=
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:35:44 2025 by rpki-client