Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/ZrxnG1C1FryXGDgGVHP4j_G9QZs.roa
File: ZrxnG1C1FryXGDgGVHP4j_G9QZs.roa (raw, json)
Hash identifier: xouRXEuk6K8cHqqLO1rnwMj9V1h5gZu/jzWeOqab6Tc=
Subject key identifier: 66:BC:67:1B:50:B5:16:BC:97:18:38:06:54:73:F8:8F:F1:BD:41:9B
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 0194228DFB5EA4C1E8F9C0ACC53EE08877AC
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/ZrxnG1C1FryXGDgGVHP4j_G9QZs.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 193.110.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:5e:a4:c1:e8:f9:c0:ac:c5:3e:e0:88:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66bc671b50b516bc971838065473f88ff1bd419b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:84:c2:25:7e:f4:7a:9d:3c:da:43:28:43:
01:b1:31:b0:05:83:41:5e:14:2c:d8:24:82:7c:25:
af:a1:a6:0e:d9:93:5f:8d:4e:25:49:17:a9:a8:6a:
c2:54:26:c2:49:7d:a9:e4:4f:3e:ef:2c:f7:23:2d:
a6:16:b2:de:ec:32:8e:9c:3b:1c:f0:51:3a:a9:2a:
eb:26:ac:72:65:b0:17:5d:84:97:43:6c:9d:a9:bb:
9f:fc:5b:9e:b5:f6:40:de:1f:6f:c0:0b:a7:30:56:
8f:c5:bb:cf:eb:af:58:eb:3a:78:76:f8:2a:ce:88:
e7:a1:46:52:7b:db:a0:cc:d7:ca:e3:14:ea:45:6e:
a3:30:52:e7:16:52:7a:e2:b1:2d:1d:85:53:f3:92:
41:1c:65:44:f4:53:ac:37:56:06:7e:05:e2:39:73:
70:e4:7b:bd:7b:3f:69:e5:0b:48:34:1f:94:ed:63:
82:87:5b:78:f9:11:f2:42:6b:73:cd:64:65:a4:9e:
1b:e8:d1:26:42:93:fe:3a:74:a3:30:0c:21:38:56:
67:ba:b8:28:31:7d:e4:85:a9:fb:f1:b9:7b:1a:a9:
54:82:03:05:8f:83:55:44:27:f3:2a:5d:00:f0:4c:
05:3c:5f:eb:9f:ed:a7:40:67:fb:6f:38:5d:9d:45:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:67:1B:50:B5:16:BC:97:18:38:06:54:73:F8:8F:F1:BD:41:9B
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/ZrxnG1C1FryXGDgGVHP4j_G9QZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:d3:d4:27:d9:4f:81:3a:74:c5:3d:58:73:ec:6a:b1:f7:1a:
d0:c4:2a:e7:86:08:eb:1b:32:6c:de:85:7e:24:b9:c1:63:2b:
a4:49:9c:97:a1:1c:41:61:8f:37:98:0b:a7:26:a8:98:a2:3d:
40:80:b3:3f:0c:ef:91:25:51:41:59:61:bb:2f:69:b4:16:80:
a5:4e:87:fd:3e:b1:1d:7b:91:94:d5:af:c5:0b:4d:3c:a6:12:
55:7b:64:e3:df:47:a2:69:8b:90:65:c9:d9:41:c0:6f:e0:e8:
0a:50:e9:81:86:60:f0:f1:8b:22:1e:78:1d:a9:55:05:51:ac:
01:2f:b0:fb:4e:19:e6:86:2a:fd:d2:f2:d5:c8:56:cc:ad:d1:
4a:58:f6:66:70:7c:fb:35:83:44:a5:43:a9:5f:aa:99:5f:46:
a6:74:95:a8:a1:a5:bc:3f:0b:69:92:7c:63:52:63:8c:9b:cf:
82:44:de:30:a0:10:bd:8e:b0:f9:a2:54:1e:16:3e:b1:b3:17:
d1:e1:81:c9:45:c1:de:d7:07:ea:ca:ac:bf:1a:9d:0d:9d:c8:
ec:c5:c0:c1:e3:94:4a:84:20:c2:d1:c8:37:c7:09:f5:97:bf:
61:73:c2:19:65:a4:96:45:54:7c:ad:db:92:5e:2e:65:be:f9:
4b:d2:6a:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijftepMHo+cCsxT7giHesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNGQzMWFiMThlNDFmOGQ5NTlhMDlkNTU2NjBkZDMyYWE5
YzQ1ZjcwHhcNMjUwMTAxMTU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmJjNjcxYjUwYjUxNmJjOTcxODM4MDY1NDczZjg4ZmYxYmQ0MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KqEwiV+9HqdPNpDKEMBsTGwBYNB
XhQs2CSCfCWvoaYO2ZNfjU4lSRepqGrCVCbCSX2p5E8+7yz3Iy2mFrLe7DKOnDsc
8FE6qSrrJqxyZbAXXYSXQ2ydqbuf/FuetfZA3h9vwAunMFaPxbvP669Y6zp4dvgq
zojnoUZSe9ugzNfK4xTqRW6jMFLnFlJ64rEtHYVT85JBHGVE9FOsN1YGfgXiOXNw
5Hu9ez9p5QtINB+U7WOCh1t4+RHyQmtzzWRlpJ4b6NEmQpP+OnSjMAwhOFZnurgo
MX3khan78bl7GqlUggMFj4NVRCfzKl0A8EwFPF/rn+2nQGf7bzhdnUUeZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGa8ZxtQtRa8lxg4BlRz+I/xvUGbMB8GA1UdIwQY
MBaAFHtNMasY5B+NlZoJ1VZg3TKqnEX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAt
YmZmMDIzYjM0NGY3LzEvWnJ4bkcxQzFGcnlYR0RnR1ZIUDRqX0c5UVpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAtYmZmMDIzYjM0NGY3
LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwW7wMA0G
CSqGSIb3DQEBCwUAA4IBAQAr09Qn2U+BOnTFPVhz7Gqx9xrQxCrnhgjrGzJs3oV+
JLnBYyukSZyXoRxBYY83mAunJqiYoj1AgLM/DO+RJVFBWWG7L2m0FoClTof9PrEd
e5GU1a/FC008phJVe2Tj30eiaYuQZcnZQcBv4OgKUOmBhmDw8YsiHngdqVUFUawB
L7D7Thnmhir90vLVyFbMrdFKWPZmcHz7NYNEpUOpX6qZX0amdJWooaW8Pwtpknxj
UmOMm8+CRN4woBC9jrD5olQeFj6xsxfR4YHJRcHe1wfqyqy/Gp0NncjsxcDB45RK
hCDC0cg3xwn1l79hc8IZZaSWRVR8rduSXi5lvvlL0mrJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:05 2025 by rpki-client