Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa
File: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (raw, json)
Hash identifier: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=
Subject key identifier: AF:39:67:EC:5D:D2:E2:05:9D:1B:EF:12:80:7E:64:BC:25:09:E3:12
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019424B3818CF667C84CC154BC28FB3F73C8
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35213
IP address blocks: 91.201.168.0/24 maxlen: 24
91.205.64.0/22 maxlen: 22
91.205.64.0/24 maxlen: 24
91.205.65.0/24 maxlen: 24
91.205.66.0/24 maxlen: 24
91.205.67.0/24 maxlen: 24
91.239.136.0/22 maxlen: 22
91.239.136.0/24 maxlen: 24
91.239.137.0/24 maxlen: 24
91.239.138.0/24 maxlen: 24
91.239.139.0/24 maxlen: 24
176.111.51.0/24 maxlen: 24
193.0.247.0/24 maxlen: 24
2001:678:31c::/48 maxlen: 48
2a13:61c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:8c:f6:67:c8:4c:c1:54:bc:28:fb:3f:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3967ec5dd2e2059d1bef12807e64bc2509e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:65:2f:2e:9d:52:6a:fe:92:3a:a2:7b:ca:
4b:6f:d8:f3:30:8e:f8:4f:99:aa:32:e6:9a:39:ee:
d2:62:00:01:de:34:61:c2:83:3d:13:0a:4f:23:fc:
16:d4:6f:e4:2b:c2:03:b7:54:b8:3a:5e:13:51:68:
a2:6d:81:68:ae:f3:9a:23:2d:41:81:ba:82:39:2d:
ce:e8:d9:39:99:61:bc:a4:c3:c1:8b:d9:78:38:d3:
8a:32:5e:02:48:44:bc:58:7f:60:86:ad:73:03:04:
ad:d2:01:d3:99:41:7a:33:68:c4:10:72:07:28:40:
a8:a9:a4:4f:7c:00:6b:e8:a9:43:bc:d0:12:f8:63:
b3:24:4b:fd:0c:87:90:54:28:28:d1:5e:2a:0c:13:
51:55:9a:3c:c7:93:2f:c0:d1:6c:b5:04:90:e2:de:
6b:f5:52:4a:65:c4:0a:47:a9:67:d3:40:df:bf:3b:
89:52:2e:56:c4:ad:97:99:f4:d1:c0:9c:97:90:b1:
4b:c9:c1:5c:5d:6f:68:5b:5a:5f:75:69:ac:d9:dd:
e1:06:68:04:1d:44:d9:a5:7a:06:d1:42:af:58:0a:
e9:45:aa:dc:21:25:d1:ae:86:8e:e2:67:cc:db:55:
79:ad:a4:24:46:6b:5d:31:47:9f:7d:82:02:67:2d:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:67:EC:5D:D2:E2:05:9D:1B:EF:12:80:7E:64:BC:25:09:E3:12
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
2a13:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:02:ed:22:41:9b:46:09:d1:bb:a1:2e:d8:55:59:97:7e:55:
1d:f3:f6:21:e6:ce:bc:61:dd:b2:8b:93:9b:d8:9a:bf:ce:e0:
ca:9e:67:c8:0b:3e:17:05:57:a7:6e:75:a3:35:1a:4e:a0:b0:
8e:00:99:95:ef:86:26:c8:73:94:3c:17:15:42:a6:20:66:7b:
40:4c:af:7a:f1:eb:55:ec:04:45:57:e0:ff:3d:36:46:6f:af:
c3:65:5f:e1:e8:d6:c1:a8:7b:ae:e9:4e:cc:0e:9d:b9:54:5e:
81:91:b0:9e:0d:ec:eb:58:0b:07:d5:b2:51:fe:38:f6:b1:69:
c6:43:71:59:5d:cb:15:e5:5e:27:72:7b:24:8d:70:5d:82:b7:
6a:dc:2d:98:a7:0c:56:f5:05:93:9d:d3:db:1b:4f:1e:30:14:
e1:cf:a6:d8:03:a0:49:4c:fd:2b:0a:50:44:d3:e3:a6:80:08:
95:ca:25:05:a5:1f:7a:2f:05:8f:30:ae:81:2a:2e:6f:c3:41:
b8:0c:2f:f1:37:42:f6:5d:6f:74:6f:be:9f:ba:99:69:7f:ff:
69:60:c3:01:b9:71:49:41:ac:1a:51:9c:68:16:22:d0:bf:e3:
08:ca:87:28:42:97:38:25:df:f9:34:10:5d:67:01:64:c9:09:
d9:6a:27:1d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQks4GM9mfITMFUvCj7P3PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk
YWM3ODQwHhcNMjUwMTAyMDE0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjM5NjdlYzVkZDJlMjA1OWQxYmVmMTI4MDdlNjRiYzI1MDllMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VllLy6dUmr+kjqie8pLb9jzMI74
T5mqMuaaOe7SYgAB3jRhwoM9EwpPI/wW1G/kK8IDt1S4Ol4TUWiibYForvOaIy1B
gbqCOS3O6Nk5mWG8pMPBi9l4ONOKMl4CSES8WH9ghq1zAwSt0gHTmUF6M2jEEHIH
KECoqaRPfABr6KlDvNAS+GOzJEv9DIeQVCgo0V4qDBNRVZo8x5MvwNFstQSQ4t5r
9VJKZcQKR6ln00DfvzuJUi5WxK2XmfTRwJyXkLFLycFcXW9oW1pfdWms2d3hBmgE
HUTZpXoG0UKvWArpRarcISXRroaO4mfM21V5raQkRmtdMUeffYICZy1KOQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFK85Z+xd0uIFnRvvEoB+ZLwlCeMSMB8GA1UdIwQY
MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt
YWYzMzRhMGExZTkzLzEvcnpsbjdGM1M0Z1dkRy04U2dINWt2Q1VKNHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz
LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQAW8moAwQC
W81AAwQCW++IAwQAsG8zAwQAwQD3MBYEAgACMBADBwAgAQZ4AxwDBQMqE2HAMA0G
CSqGSIb3DQEBCwUAA4IBAQAaAu0iQZtGCdG7oS7YVVmXflUd8/Yh5s68Yd2yi5Ob
2Jq/zuDKnmfICz4XBVenbnWjNRpOoLCOAJmV74YmyHOUPBcVQqYgZntATK968etV
7ARFV+D/PTZGb6/DZV/h6NbBqHuu6U7MDp25VF6BkbCeDezrWAsH1bJR/jj2sWnG
Q3FZXcsV5V4ncnskjXBdgrdq3C2YpwxW9QWTndPbG08eMBThz6bYA6BJTP0rClBE
0+OmgAiVyiUFpR96LwWPMK6BKi5vw0G4DC/xN0L2XW90b76fuplpf/9pYMMBuXFJ
QawaUZxoFiLQv+MIyocoQpc4Jd/5NBBdZwFkyQnZaicd
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:21 2025 by rpki-client