Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa
File: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (raw, json)
Hash identifier: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=
Subject key identifier: 66:00:9B:53:F8:FE:0F:C5:BF:CB:3E:0D:C6:31:B5:B8:8B:2F:C9:1B
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019426D9B74F4191998828FB32C120CD9451
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51739
IP address blocks: 91.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b7:4f:41:91:99:88:28:fb:32:c1:20:cd:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66009b53f8fe0fc5bfcb3e0dc631b5b88b2fc91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:c5:04:a7:ad:18:ef:35:58:0b:f1:b5:c2:
89:2e:69:a9:4a:17:ee:81:8f:ba:6f:99:f3:6b:c3:
e3:29:f2:95:89:d4:8a:d3:07:6b:7b:17:90:00:40:
f4:9a:bc:2d:22:1b:07:92:84:18:e3:25:27:0a:99:
24:af:dc:1d:04:4e:28:6c:0c:57:f9:ef:cc:0b:e9:
b4:44:b0:0a:46:f9:b1:d0:9f:e6:de:b7:7e:1f:78:
dd:1b:12:8e:4c:69:c2:6a:70:b4:69:73:9a:39:d4:
e0:fc:30:f1:3c:95:bb:d6:2e:5a:f3:6c:d2:fa:bf:
a0:fb:b3:1e:29:6e:cc:83:d1:9b:38:2f:5e:18:38:
d4:da:af:16:a9:8b:77:12:bd:67:8b:3f:70:9d:81:
9f:96:67:66:c8:dc:98:3a:8a:de:97:e0:91:e3:cb:
ba:54:ff:98:91:2b:0d:f4:4f:b0:e1:9b:af:ad:b8:
91:f9:a9:87:38:7c:35:63:3d:d6:3a:87:ff:3e:40:
68:10:39:2b:14:43:d6:0e:14:fa:4e:70:78:2a:9b:
f4:45:32:27:c2:df:9a:8e:53:0b:41:12:b3:bd:d9:
ab:d5:c9:93:8a:da:05:f6:8e:a0:76:09:81:78:95:
20:90:ee:2b:84:92:4f:46:1c:16:30:3d:2e:69:a7:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:9B:53:F8:FE:0F:C5:BF:CB:3E:0D:C6:31:B5:B8:8B:2F:C9:1B
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8b:b3:cf:6d:08:a2:2a:c3:6e:79:7f:89:af:fa:be:db:dc:
70:8e:94:21:9a:a7:52:5f:10:44:7f:fd:36:5d:26:54:0f:86:
99:44:22:2b:69:12:3b:0f:2f:eb:8b:55:49:9b:28:e9:75:25:
a2:58:a6:4d:27:4d:b6:82:b2:2e:f6:89:f9:5a:4c:4a:6e:17:
5f:bf:32:16:49:b6:ec:37:a0:03:ca:e2:19:63:78:bf:d5:55:
b7:86:51:48:0e:4f:9c:5e:ee:77:c4:de:93:0b:9e:1c:a5:44:
a8:fa:62:4d:e1:73:9b:69:17:af:f3:c3:ce:bf:8e:f6:8f:d9:
9d:07:fd:9b:aa:10:f7:70:47:9b:31:2a:bc:d8:79:d5:33:53:
9a:bf:a6:fc:6a:54:f1:ac:aa:6e:ed:8a:39:c6:3b:59:57:5e:
4e:38:bb:6e:23:98:ea:15:ef:cc:c1:18:e3:70:0d:21:20:a4:
21:93:93:7e:74:0e:c2:8a:71:a6:fc:c7:2e:9c:98:53:53:70:
40:3e:04:c3:5e:96:c1:08:37:1d:a3:db:4d:d5:11:68:78:24:
c9:0f:81:28:38:28:67:f0:11:31:fa:c3:24:ac:81:ff:95:26:
04:5c:4f:92:a2:30:ff:e7:b8:46:31:f4:da:d7:78:6a:a9:64:
da:ff:e6:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bdPQZGZiCj7MsEgzZRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTFhMDJlOTI5YzQzZjAxOTljODMyNjMwMmUyNDg5OWM0
YTQxNTEwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjAwOWI1M2Y4ZmUwZmM1YmZjYjNlMGRjNjMxYjViODhiMmZjOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonbFBKetGO81WAvxtcKJLmmpShfu
gY+6b5nza8PjKfKVidSK0wdrexeQAED0mrwtIhsHkoQY4yUnCpkkr9wdBE4obAxX
+e/MC+m0RLAKRvmx0J/m3rd+H3jdGxKOTGnCanC0aXOaOdTg/DDxPJW71i5a82zS
+r+g+7MeKW7Mg9GbOC9eGDjU2q8WqYt3Er1niz9wnYGflmdmyNyYOorel+CR48u6
VP+YkSsN9E+w4ZuvrbiR+amHOHw1Yz3WOof/PkBoEDkrFEPWDhT6TnB4Kpv0RTIn
wt+ajlMLQRKzvdmr1cmTitoF9o6gdgmBeJUgkO4rhJJPRhwWMD0uaacTvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYAm1P4/g/Fv8s+DcYxtbiLL8kbMB8GA1UdIwQY
MBaAFKARoC6SnEPwGZyDJjAuJImcSkFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYt
OWY2ZDBiZmQyMDU4LzEvWmdDYlVfai1EOFdfeXo0TnhqRzF1SXN2eVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mOTdkN2UtODA3OC00Y2VlLWFmNzYtOWY2ZDBiZmQyMDU4
LzEvb0JHZ0xwS2NRX0FabklNbU1DNGtpWnhLUVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW98AMA0G
CSqGSIb3DQEBCwUAA4IBAQBFi7PPbQiiKsNueX+Jr/q+29xwjpQhmqdSXxBEf/02
XSZUD4aZRCIraRI7Dy/ri1VJmyjpdSWiWKZNJ022grIu9on5WkxKbhdfvzIWSbbs
N6ADyuIZY3i/1VW3hlFIDk+cXu53xN6TC54cpUSo+mJN4XObaRev88POv472j9md
B/2bqhD3cEebMSq82HnVM1Oav6b8alTxrKpu7Yo5xjtZV15OOLtuI5jqFe/MwRjj
cA0hIKQhk5N+dA7CinGm/McunJhTU3BAPgTDXpbBCDcdo9tN1RFoeCTJD4EoOChn
8BEx+sMkrIH/lSYEXE+SojD/57hGMfTa13hqqWTa/+bG
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:12 2025 by rpki-client