Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZjPKHLTaUfZ56cbQft8ggz7Aau8.roa
File: ZjPKHLTaUfZ56cbQft8ggz7Aau8.roa (raw, json)
Hash identifier: ryhmxgCW94DmpT0b62H+tgHbPMTwvzU/KZ0sFIZAF+w=
Subject key identifier: 66:33:CA:1C:B4:DA:51:F6:79:E9:C6:D0:7E:DF:20:83:3E:C0:6A:EF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422202F8B656AAF3D7DC78E142F447D11
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZjPKHLTaUfZ56cbQft8ggz7Aau8.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200023
IP address blocks: 45.130.196.0/22 maxlen: 24
188.214.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:8b:65:6a:af:3d:7d:c7:8e:14:2f:44:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6633ca1cb4da51f679e9c6d07edf20833ec06aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:5a:7a:79:42:b8:14:93:5e:a5:b0:5f:65:
d0:44:59:db:05:7e:39:fa:03:60:ef:6e:f4:fa:79:
0a:ac:94:67:04:67:25:6a:e0:9e:0f:cb:8f:35:dc:
d5:53:48:2c:4e:88:c5:8e:e5:25:d0:40:10:3f:bf:
32:4e:b4:75:41:f1:91:8a:80:85:ad:a5:be:3c:70:
91:40:18:6c:cf:65:6a:a1:e2:aa:ef:f7:5f:29:e7:
d3:0b:05:7e:04:e3:5e:3a:a2:05:01:cc:52:84:f1:
64:9e:15:1c:a1:cd:a3:a3:66:33:89:f1:e5:95:da:
0f:d0:98:14:b0:2b:c1:be:65:02:23:78:b0:1c:3b:
71:b9:2f:76:fe:dd:69:cd:b6:51:40:d7:35:49:90:
7b:d0:82:31:eb:7b:c2:61:3d:b5:48:ac:2b:62:d3:
65:e3:01:d7:fa:4a:d3:06:4e:49:a2:16:8a:e6:be:
75:bb:44:ff:99:a3:83:e0:99:7f:76:64:c0:7a:4c:
48:56:bf:8b:13:58:f1:89:2e:b4:ca:42:38:f1:91:
09:76:3f:f7:f1:e5:46:9c:4a:4d:57:b3:4f:1c:b7:
42:3d:76:63:d3:64:b1:65:bc:8c:99:bd:4d:13:e9:
c0:e7:f2:d1:e0:1b:fd:22:a7:d9:b4:aa:6b:ad:cd:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:CA:1C:B4:DA:51:F6:79:E9:C6:D0:7E:DF:20:83:3E:C0:6A:EF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZjPKHLTaUfZ56cbQft8ggz7Aau8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.196.0/22
188.214.208.0/23
Signature Algorithm: sha256WithRSAEncryption
70:5c:c6:e1:be:29:7c:31:70:64:89:f7:73:71:f6:ce:4b:2f:
d7:f5:3d:8f:57:d9:4f:f0:17:94:df:80:57:a8:dc:0b:31:41:
62:f5:35:bd:08:b3:0a:b0:a5:04:aa:1b:d9:e0:b9:be:f2:f1:
eb:fb:b3:f6:04:78:15:85:9a:8d:51:94:d7:b1:f8:a5:42:67:
6f:fb:4d:b5:60:25:6d:98:10:c5:9b:66:27:74:16:70:e8:04:
71:18:f3:ea:b6:02:47:88:ae:52:c1:8d:8a:41:f2:a5:32:76:
cc:01:95:60:f4:82:58:4f:c4:92:b2:3a:4c:08:ab:a3:39:57:
d9:0b:a3:39:76:cc:d9:17:78:a5:a0:a7:30:1b:35:bf:5a:19:
f7:30:de:8c:7b:43:ae:0f:97:23:c1:70:75:07:8d:76:55:7e:
d0:b1:ad:4e:d8:6f:54:eb:ed:8a:c7:9c:36:6d:6a:fb:0d:be:
d8:a5:e9:1d:ac:ca:49:14:8c:79:f7:76:8a:27:cc:4e:bf:c8:
80:21:7c:2d:29:91:d5:a6:07:d3:e2:aa:9c:3f:0f:3a:b3:2f:
3a:07:67:75:bd:e5:53:4c:f2:8a:e8:21:05:e3:d8:95:0a:80:
bd:f2:89:ec:87:50:c3:d9:13:15:88:93:9a:2c:26:bc:d4:8e:
f5:72:a4:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIC+LZWqvPX3HjhQvRH0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjMzY2ExY2I0ZGE1MWY2NzllOWM2ZDA3ZWRmMjA4MzNlYzA2YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWBaenlCuBSTXqWwX2XQRFnbBX45
+gNg7270+nkKrJRnBGclauCeD8uPNdzVU0gsTojFjuUl0EAQP78yTrR1QfGRioCF
raW+PHCRQBhsz2VqoeKq7/dfKefTCwV+BONeOqIFAcxShPFknhUcoc2jo2YzifHl
ldoP0JgUsCvBvmUCI3iwHDtxuS92/t1pzbZRQNc1SZB70IIx63vCYT21SKwrYtNl
4wHX+krTBk5JohaK5r51u0T/maOD4Jl/dmTAekxIVr+LE1jxiS60ykI48ZEJdj/3
8eVGnEpNV7NPHLdCPXZj02SxZbyMmb1NE+nA5/LR4Bv9IqfZtKprrc3fIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGYzyhy02lH2eenG0H7fIIM+wGrvMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvWmpQS0hMVGFVZlo1NmNiUWZ0OGdnejdBYXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYLEAwQB
vNbQMA0GCSqGSIb3DQEBCwUAA4IBAQBwXMbhvil8MXBkifdzcfbOSy/X9T2PV9lP
8BeU34BXqNwLMUFi9TW9CLMKsKUEqhvZ4Lm+8vHr+7P2BHgVhZqNUZTXsfilQmdv
+021YCVtmBDFm2YndBZw6ARxGPPqtgJHiK5SwY2KQfKlMnbMAZVg9IJYT8SSsjpM
CKujOVfZC6M5dszZF3iloKcwGzW/Whn3MN6Me0OuD5cjwXB1B412VX7Qsa1O2G9U
6+2Kx5w2bWr7Db7YpekdrMpJFIx593aKJ8xOv8iAIXwtKZHVpgfT4qqcPw86sy86
B2d1veVTTPKK6CEF49iVCoC98onsh1DD2RMViJOaLCa81I71cqSo
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:50 2025 by rpki-client