Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa
File: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (raw, json)
Hash identifier: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=
Subject key identifier: 67:0B:E0:C1:21:62:B4:99:E7:D0:D2:36:4C:B3:23:00:6D:4E:60:42
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA80B0430E5579AE1ADBB4A6E1B528
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60995
IP address blocks: 45.13.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:80:b0:43:0e:55:79:ae:1a:db:b4:a6:e1:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670be0c12162b499e7d0d2364cb323006d4e6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:c4:c8:99:93:eb:9c:5d:72:57:29:01:42:
43:b2:13:75:3d:90:9c:10:cf:db:00:b1:c0:7e:5c:
46:02:15:7b:e7:2f:54:4d:ca:56:8f:10:5b:81:cb:
7b:e8:82:a2:71:8a:05:af:53:a2:8e:1c:ea:33:88:
28:1b:9a:34:67:ef:6e:a9:c2:dc:eb:a6:21:9f:74:
7b:cf:0e:27:b0:27:06:01:dc:30:56:43:07:c9:da:
ec:1d:b6:da:ae:61:f2:30:81:45:d0:48:94:88:21:
de:4b:c6:85:4d:ac:19:dc:a1:a4:d2:43:28:c7:a9:
61:b2:b9:a7:73:6e:d9:dc:4a:4e:b5:9c:1d:a3:60:
51:8b:4d:cb:87:86:f3:cf:32:7a:dd:f6:e6:c7:cc:
16:76:07:b2:fd:5d:15:62:1e:22:5b:79:92:bf:35:
5d:22:f5:e2:95:7a:80:f6:83:42:b9:5e:65:a1:9c:
0b:9e:14:f3:a2:d0:cb:a3:f4:b2:26:fb:66:fe:e6:
09:08:f5:f9:92:77:64:e1:3c:0e:1f:36:a1:77:9c:
bd:d0:c9:c2:67:ae:3a:3e:38:04:5a:d6:02:09:79:
28:ca:70:33:bb:3d:fe:55:ab:97:69:b9:8b:a2:cf:
d7:07:02:f9:93:93:83:15:04:c7:e8:44:2a:23:c0:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:E0:C1:21:62:B4:99:E7:D0:D2:36:4C:B3:23:00:6D:4E:60:42
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:74:ef:f0:a5:6f:68:53:74:3f:03:1a:ec:7f:e4:44:fa:58:
94:58:3a:09:77:b3:21:59:d1:fb:15:ee:b9:7d:53:39:ad:7f:
1d:f2:43:a7:6f:69:e1:6c:c4:4e:90:6e:06:91:be:cd:d8:8e:
3c:4f:2c:a8:35:29:89:62:0b:8b:c1:7c:d4:6e:53:7e:58:66:
ec:44:57:ba:ec:79:6a:ff:ad:f3:0e:44:2c:e8:41:93:ba:2b:
3f:97:f3:76:2a:6b:20:06:49:b9:f3:ea:2d:e0:63:04:c8:c8:
ba:88:c1:be:a1:c3:71:dd:4a:53:e3:32:0b:29:fa:8e:9b:f6:
63:9a:8d:0f:79:6c:c5:4f:b7:10:86:06:80:cb:77:56:a3:ea:
c8:cd:ef:6a:78:ee:77:c7:77:8f:64:c7:b2:06:b7:ae:e6:82:
18:65:e5:7c:3f:05:35:c6:17:6d:c1:fc:cf:f2:c1:a8:36:7b:
ce:12:56:be:e8:d6:c4:bb:0a:b5:01:8a:37:65:24:f4:c9:31:
23:00:14:78:e4:2d:59:dd:f1:0a:b6:8a:26:f3:5a:ba:11:66:
1c:b4:32:61:1b:25:65:29:35:1e:c3:dc:3d:e5:26:1a:f8:1d:
7e:55:ae:7e:30:d7:02:af:dd:34:9e:ea:04:69:a9:3f:8c:e4:
22:b5:d5:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+oCwQw5Vea4a27Sm4bUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjUwMTAxMDM0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBiZTBjMTIxNjJiNDk5ZTdkMGQyMzY0Y2IzMjMwMDZkNGU2MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTzEyJmT65xdclcpAUJDshN1PZCc
EM/bALHAflxGAhV75y9UTcpWjxBbgct76IKicYoFr1OijhzqM4goG5o0Z+9uqcLc
66Yhn3R7zw4nsCcGAdwwVkMHydrsHbbarmHyMIFF0EiUiCHeS8aFTawZ3KGk0kMo
x6lhsrmnc27Z3EpOtZwdo2BRi03Lh4bzzzJ63fbmx8wWdgey/V0VYh4iW3mSvzVd
IvXilXqA9oNCuV5loZwLnhTzotDLo/SyJvtm/uYJCPX5kndk4TwOHzahd5y90MnC
Z646PjgEWtYCCXkoynAzuz3+VauXabmLos/XBwL5k5ODFQTH6EQqI8A9uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcL4MEhYrSZ59DSNkyzIwBtTmBCMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvWnd2Z3dTRml0Sm5uME5JMlRMTWpBRzFPWUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2IMA0G
CSqGSIb3DQEBCwUAA4IBAQB9dO/wpW9oU3Q/Axrsf+RE+liUWDoJd7MhWdH7Fe65
fVM5rX8d8kOnb2nhbMROkG4Gkb7N2I48TyyoNSmJYguLwXzUblN+WGbsRFe67Hlq
/63zDkQs6EGTuis/l/N2KmsgBkm58+ot4GMEyMi6iMG+ocNx3UpT4zILKfqOm/Zj
mo0PeWzFT7cQhgaAy3dWo+rIze9qeO53x3ePZMeyBreu5oIYZeV8PwU1xhdtwfzP
8sGoNnvOEla+6NbEuwq1AYo3ZST0yTEjABR45C1Z3fEKtoom81q6EWYctDJhGyVl
KTUew9w95SYa+B1+Va5+MNcCr900nuoEaak/jOQitdVR
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:04 2025 by rpki-client