Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zUjrWzgAtQRywDHDWIWuKBymr1U.roa
File: zUjrWzgAtQRywDHDWIWuKBymr1U.roa (raw, json)
Hash identifier: +Vw9rYbEz3lGZCDlnSPKNKqmzyvrBkX60meLkWBdEno=
Subject key identifier: CD:48:EB:5B:38:00:B5:04:72:C0:31:C3:58:85:AE:28:1C:A6:AF:55
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D6D465EAD59EB5A2693144A6A5AD
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zUjrWzgAtQRywDHDWIWuKBymr1U.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 2.59.212.0/24 maxlen: 24
193.38.50.0/24 maxlen: 24
193.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d6:d4:65:ea:d5:9e:b5:a2:69:31:44:a6:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd48eb5b3800b50472c031c35885ae281ca6af55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:48:78:30:a0:01:b0:55:1e:8f:64:90:0d:
18:5a:fc:c9:bd:d2:f0:f4:b4:e6:86:b4:5d:7e:e3:
47:fc:f9:50:9a:c9:0a:8b:b1:62:3e:62:f1:3e:f6:
b7:27:d6:8c:e4:b3:0c:da:98:cc:1e:9f:68:47:d5:
ec:b7:62:8d:48:fb:ab:cc:e2:54:fb:88:1c:25:ee:
e0:b0:23:69:ec:9d:f0:18:45:5a:55:64:a5:e3:fc:
c5:2a:a1:29:f8:52:29:bb:a9:1f:f0:50:54:15:c3:
4a:80:e5:a0:22:82:18:41:e3:db:0a:e9:ec:4d:da:
f3:74:4d:06:30:17:0e:42:a9:d6:e0:dc:3f:32:0d:
0a:94:3b:d2:8c:bb:ca:c9:7e:c8:e5:3f:34:a7:6e:
b5:3c:f3:db:b1:66:85:4d:de:7a:85:1f:89:5a:d7:
5a:11:ec:bd:33:c5:b2:fa:76:e6:1f:c4:f9:e4:0a:
91:57:ae:49:f0:40:da:4f:dc:10:b0:af:55:35:1a:
b3:d4:63:87:12:ed:f5:82:46:a5:a9:7a:be:b8:8a:
82:db:b8:16:7a:e7:31:8c:4b:17:f0:95:6f:0e:8f:
e8:ee:8e:6c:ca:ef:43:a0:c2:67:43:69:cb:f8:f3:
23:28:05:28:d0:20:41:a1:0e:4a:a5:38:53:f0:a4:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:EB:5B:38:00:B5:04:72:C0:31:C3:58:85:AE:28:1C:A6:AF:55
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zUjrWzgAtQRywDHDWIWuKBymr1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.212.0/24
193.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:24:02:75:12:1d:ea:9c:20:5b:f0:32:54:63:5b:9d:85:04:
0a:87:50:97:08:a4:27:2a:ab:6e:34:81:a6:d2:7f:f8:fa:1d:
d1:7c:f3:62:ff:25:bb:26:3b:da:8f:17:28:51:ac:9e:3b:8b:
cb:ae:4f:b5:0b:76:57:3f:83:bc:27:3e:17:3a:8f:4c:6f:11:
49:90:55:3d:f7:4c:a4:0f:53:81:cb:7f:e4:2d:2e:4a:f9:92:
8a:8c:27:48:00:3f:12:0b:4d:3a:8e:82:13:f1:4a:3f:1b:64:
a8:40:cc:f6:7e:d4:e7:9f:36:d9:b9:fd:c9:0e:26:99:d2:e0:
09:51:61:fe:ad:79:7c:29:0a:65:32:54:cd:c0:2d:2f:5b:05:
46:a0:36:d1:c1:4f:63:db:c8:b8:6c:33:2a:d3:71:be:ff:ec:
b4:34:42:1b:49:e2:53:3b:3b:06:4f:6b:1a:1a:bd:b7:31:8c:
7d:ce:69:a7:e4:76:be:ad:70:89:67:78:0b:69:3c:fd:97:81:
44:66:8e:e3:46:35:5c:09:d4:e4:a7:2b:9e:ca:17:f1:1e:36:
46:e2:38:8c:82:4d:da:ae:42:be:17:b5:54:a5:79:5c:e8:75:
f8:3b:05:1c:6a:bf:38:09:34:b8:ed:d4:f4:03:88:8e:0a:f9:
e0:d0:ca:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjadbUZerVnrWiaTFEpqWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQ4ZWI1YjM4MDBiNTA0NzJjMDMxYzM1ODg1YWUyODFjYTZhZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT9IeDCgAbBVHo9kkA0YWvzJvdLw
9LTmhrRdfuNH/PlQmskKi7FiPmLxPva3J9aM5LMM2pjMHp9oR9Xst2KNSPurzOJU
+4gcJe7gsCNp7J3wGEVaVWSl4/zFKqEp+FIpu6kf8FBUFcNKgOWgIoIYQePbCuns
TdrzdE0GMBcOQqnW4Nw/Mg0KlDvSjLvKyX7I5T80p261PPPbsWaFTd56hR+JWtda
Eey9M8Wy+nbmH8T55AqRV65J8EDaT9wQsK9VNRqz1GOHEu31gkalqXq+uIqC27gW
eucxjEsX8JVvDo/o7o5syu9DoMJnQ2nL+PMjKAUo0CBBoQ5KpThT8KQ9HwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1I61s4ALUEcsAxw1iFrigcpq9VMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvelVqcld6Z0F0UVJ5d0RIRFdJV3VLQnltcjFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjvUAwQB
wSYyMA0GCSqGSIb3DQEBCwUAA4IBAQBuJAJ1Eh3qnCBb8DJUY1udhQQKh1CXCKQn
KqtuNIGm0n/4+h3RfPNi/yW7JjvajxcoUayeO4vLrk+1C3ZXP4O8Jz4XOo9MbxFJ
kFU990ykD1OBy3/kLS5K+ZKKjCdIAD8SC006joIT8Uo/G2SoQMz2ftTnnzbZuf3J
DiaZ0uAJUWH+rXl8KQplMlTNwC0vWwVGoDbRwU9j28i4bDMq03G+/+y0NEIbSeJT
OzsGT2saGr23MYx9zmmn5Ha+rXCJZ3gLaTz9l4FEZo7jRjVcCdTkpyueyhfxHjZG
4jiMgk3arkK+F7VUpXlc6HX4OwUcar84CTS47dT0A4iOCvng0MpN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:32 2025 by rpki-client