Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Z9ftDVnLuDarY233BHukY7esuz0.roa
File: Z9ftDVnLuDarY233BHukY7esuz0.roa (raw, json)
Hash identifier: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=
Subject key identifier: 67:D7:ED:0D:59:CB:B8:36:AB:63:6D:F7:04:7B:A4:63:B7:AC:BB:3D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244568B56F3C46CE211A290155982241
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Z9ftDVnLuDarY233BHukY7esuz0.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204748
IP address blocks: 195.55.62.0/23 maxlen: 23
195.55.62.0/24 maxlen: 24
195.55.63.0/24 maxlen: 24
195.77.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:68:b5:6f:3c:46:ce:21:1a:29:01:55:98:22:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d7ed0d59cbb836ab636df7047ba463b7acbb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:e3:4a:f9:c6:93:25:c4:10:19:02:e9:7d:
b2:ce:b2:1b:52:5a:d6:ef:70:9c:3d:22:2e:c5:b9:
9b:dc:8d:1b:ba:21:dd:cd:19:4e:ca:4b:5a:81:56:
27:f8:80:df:64:02:7a:22:ff:49:4a:fb:67:80:bd:
50:a0:a9:f2:d5:94:a0:94:f7:8b:14:5b:8b:88:b2:
74:1a:2f:d5:7c:18:1b:7a:83:42:4c:a8:28:dd:9a:
17:c4:d2:48:40:c9:f9:a1:b6:40:fc:5b:6b:c5:38:
5c:d5:09:e9:f4:0e:d5:62:60:ef:63:f9:00:99:3b:
20:82:d8:22:0a:cb:68:55:77:76:21:16:24:10:ca:
5d:f0:25:fe:79:fd:f2:1d:ed:19:eb:c4:bf:ee:f7:
b9:11:84:71:3b:91:39:53:14:c4:de:31:1e:38:19:
41:9a:7a:ac:a3:79:45:72:ca:8d:a3:7b:79:c8:91:
5c:a7:5b:6b:d6:03:79:0a:b1:c9:5d:fc:ad:03:da:
c6:4c:59:19:04:48:c8:0c:c7:40:89:a7:13:8f:3f:
7b:48:a6:68:b5:2a:28:7c:a3:f0:f5:3a:1c:16:b9:
58:82:9e:70:08:92:62:a4:48:06:24:38:db:15:7a:
cc:cc:62:90:64:9e:b1:4b:a3:d8:35:f2:46:9b:86:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:ED:0D:59:CB:B8:36:AB:63:6D:F7:04:7B:A4:63:B7:AC:BB:3D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Z9ftDVnLuDarY233BHukY7esuz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.62.0/23
195.77.160.0/23
Signature Algorithm: sha256WithRSAEncryption
74:cc:cd:16:7d:3b:3c:ca:f7:43:42:0c:9d:e1:33:82:84:0a:
59:8c:4e:19:9f:ee:28:f8:34:25:ce:6c:10:ff:81:70:a1:43:
0a:ca:ff:41:89:94:4e:4c:d5:1f:0f:46:e8:f3:c2:43:af:7c:
8c:f9:19:5c:b9:9b:51:cd:3f:3b:96:e8:8d:ff:89:e6:7b:30:
02:f9:60:2c:2e:95:b6:99:ba:61:dd:49:cb:e2:6d:e3:4f:92:
ed:67:5b:a9:88:79:5c:a9:35:a4:68:8c:9c:b6:08:4f:51:c6:
45:02:dd:d6:7c:aa:f6:9f:bd:b3:28:72:3e:41:c0:f2:ef:a5:
0b:cd:6f:60:8b:3a:b6:ad:dd:73:b7:26:ad:26:8d:b8:3c:04:
34:14:3c:52:00:d6:20:c3:ba:4b:3e:7f:8d:12:43:3f:ea:b8:
17:ec:84:42:68:ca:b7:3e:bc:8a:be:ff:9c:af:54:a9:cc:a5:
c6:84:78:8b:b8:b4:6f:9b:6b:3f:2c:3b:15:04:97:31:ae:62:
e3:0c:44:15:f0:c6:08:ed:93:ba:d5:81:55:9e:d7:e3:c9:95:
2a:e5:35:dd:a2:b9:4c:e0:b3:a6:e8:9e:a1:2a:c5:76:7d:37:
bb:a0:2d:20:03:c9:c9:eb:a8:c7:89:73:56:5f:90:5f:93:f8:
18:4d:33:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRWi1bzxGziEaKQFVmCJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Q3ZWQwZDU5Y2JiODM2YWI2MzZkZjcwNDdiYTQ2M2I3YWNiYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspLjSvnGkyXEEBkC6X2yzrIbUlrW
73CcPSIuxbmb3I0buiHdzRlOyktagVYn+IDfZAJ6Iv9JSvtngL1QoKny1ZSglPeL
FFuLiLJ0Gi/VfBgbeoNCTKgo3ZoXxNJIQMn5obZA/FtrxThc1Qnp9A7VYmDvY/kA
mTsggtgiCstoVXd2IRYkEMpd8CX+ef3yHe0Z68S/7ve5EYRxO5E5UxTE3jEeOBlB
mnqso3lFcsqNo3t5yJFcp1tr1gN5CrHJXfytA9rGTFkZBEjIDMdAiacTjz97SKZo
tSoofKPw9TocFrlYgp5wCJJipEgGJDjbFXrMzGKQZJ6xS6PYNfJGm4aPyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGfX7Q1Zy7g2q2Nt9wR7pGO3rLs9MB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvWjlmdERWbkx1RGFyWTIzM0JIdWtZN2VzdXowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwzc+AwQB
w02gMA0GCSqGSIb3DQEBCwUAA4IBAQB0zM0WfTs8yvdDQgyd4TOChApZjE4Zn+4o
+DQlzmwQ/4FwoUMKyv9BiZROTNUfD0bo88JDr3yM+RlcuZtRzT87luiN/4nmezAC
+WAsLpW2mbph3UnL4m3jT5LtZ1upiHlcqTWkaIyctghPUcZFAt3WfKr2n72zKHI+
QcDy76ULzW9gizq2rd1ztyatJo24PAQ0FDxSANYgw7pLPn+NEkM/6rgX7IRCaMq3
PryKvv+cr1SpzKXGhHiLuLRvm2s/LDsVBJcxrmLjDEQV8MYI7ZO61YFVntfjyZUq
5TXdorlM4LOm6J6hKsV2fTe7oC0gA8nJ66jHiXNWX5Bfk/gYTTNh
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:37 2025 by rpki-client