Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa
File: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (raw, json)
Hash identifier: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=
Subject key identifier: 66:FE:AB:84:4B:5F:C7:F8:D2:09:77:3F:4B:C5:32:5C:0D:2F:A3:65
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0194266C081A4FAC82897B0D709B4492AB98
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39246
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:08:1a:4f:ac:82:89:7b:0d:70:9b:44:92:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66feab844b5fc7f8d209773f4bc5325c0d2fa365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:31:28:e2:70:fd:e5:69:21:6b:df:18:84:
2d:b0:9f:da:5d:d4:20:84:c3:26:aa:89:c4:94:49:
ea:49:e9:e2:af:e2:8d:c1:d8:40:84:51:b6:da:b3:
92:79:7e:2d:3b:f4:e4:e1:13:68:7d:6f:c5:ca:63:
e2:6f:6d:31:59:76:b3:ee:fb:57:c7:0f:74:ca:6c:
86:9f:9d:7c:d6:d8:ec:3f:4f:d9:d4:04:94:16:12:
1a:7e:77:f7:98:76:aa:8e:7e:42:28:96:f6:49:3b:
35:68:a4:ce:80:b7:9b:a8:c5:7d:b0:6c:91:0c:3f:
e4:bb:6a:63:ee:b1:76:c1:89:d2:13:89:9d:47:84:
aa:ed:f7:ca:58:8e:1d:44:0a:5d:88:28:a6:e3:fd:
be:c1:e4:34:e4:cc:9a:48:0d:95:fa:c0:40:39:23:
9f:9f:f5:06:c3:5d:be:1a:61:e8:72:b0:5b:c9:01:
43:55:b3:9e:ba:97:45:57:8d:90:f1:fc:6c:81:9c:
4d:0b:51:f4:23:e2:c6:35:dd:38:f9:49:45:66:a0:
b0:a7:9a:d0:16:82:4a:d4:3c:b5:f9:71:7a:45:d8:
af:45:a3:b3:56:53:4c:aa:a3:c2:3f:52:e2:48:96:
a0:62:3f:c0:79:27:f1:b9:68:c9:07:df:30:66:06:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:AB:84:4B:5F:C7:F8:D2:09:77:3F:4B:C5:32:5C:0D:2F:A3:65
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e3:89:21:af:b8:93:33:d1:d2:33:0b:ca:35:71:32:2b:ff:
58:be:02:5b:9b:8d:0e:3c:24:64:77:34:ec:1a:81:92:64:8f:
e1:38:ba:61:32:79:72:a0:09:27:29:79:51:b9:3f:f9:97:69:
c3:f5:5c:e2:0b:c0:1c:04:2f:88:e0:eb:f7:38:fe:64:31:d1:
47:2b:e3:f3:10:f1:3e:1f:2e:d0:d7:00:29:40:a1:15:e6:9a:
d3:d7:37:7f:aa:fc:2c:48:38:6e:03:c1:48:a0:3a:fb:a5:04:
be:e2:95:97:53:77:9a:2b:58:3b:53:a3:3a:3e:7e:34:2d:09:
d3:f9:f1:d5:83:c9:8f:1a:25:d5:15:42:0f:95:29:8e:cc:a6:
20:14:aa:e0:40:10:00:6b:bc:36:e4:53:74:9c:ce:12:15:fe:
6e:e9:e8:2a:77:11:a7:e2:ea:9f:06:86:e4:81:79:a5:9d:67:
03:30:03:f1:04:17:97:e9:4d:a2:58:40:7b:35:31:c6:ee:a7:
82:a7:b2:40:7f:42:5c:6f:20:e6:a2:0c:52:d0:5d:43:44:94:
0c:9c:bf:e8:44:cc:c8:34:15:e3:b4:a2:ae:26:9d:b0:25:6a:
18:70:db:41:35:76:f0:a0:e1:6d:a7:df:36:a9:af:12:6d:77:
64:0f:ac:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbAgaT6yCiXsNcJtEkquYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjUwMTAyMDk1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZlYWI4NDRiNWZjN2Y4ZDIwOTc3M2Y0YmM1MzI1YzBkMmZhMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4xKOJw/eVpIWvfGIQtsJ/aXdQg
hMMmqonElEnqSenir+KNwdhAhFG22rOSeX4tO/Tk4RNofW/FymPib20xWXaz7vtX
xw90ymyGn5181tjsP0/Z1ASUFhIafnf3mHaqjn5CKJb2STs1aKTOgLebqMV9sGyR
DD/ku2pj7rF2wYnSE4mdR4Sq7ffKWI4dRApdiCim4/2+weQ05MyaSA2V+sBAOSOf
n/UGw12+GmHocrBbyQFDVbOeupdFV42Q8fxsgZxNC1H0I+LGNd04+UlFZqCwp5rQ
FoJK1Dy1+XF6RdivRaOzVlNMqqPCP1LiSJagYj/AeSfxuWjJB98wZgac5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGb+q4RLX8f40gl3P0vFMlwNL6NlMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvWnY2cmhFdGZ4X2pTQ1hjX1M4VXlYQTB2bzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+3MA0G
CSqGSIb3DQEBCwUAA4IBAQBe44khr7iTM9HSMwvKNXEyK/9YvgJbm40OPCRkdzTs
GoGSZI/hOLphMnlyoAknKXlRuT/5l2nD9VziC8AcBC+I4Ov3OP5kMdFHK+PzEPE+
Hy7Q1wApQKEV5prT1zd/qvwsSDhuA8FIoDr7pQS+4pWXU3eaK1g7U6M6Pn40LQnT
+fHVg8mPGiXVFUIPlSmOzKYgFKrgQBAAa7w25FN0nM4SFf5u6egqdxGn4uqfBobk
gXmlnWcDMAPxBBeX6U2iWEB7NTHG7qeCp7JAf0JcbyDmogxS0F1DRJQMnL/oRMzI
NBXjtKKuJp2wJWoYcNtBNXbwoOFtp982qa8SbXdkD6wa
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:33 2025 by rpki-client