Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ZyIFjDXNoQmTUrQTfRFil604EkI.roa
File: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (raw, json)
Hash identifier: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=
Subject key identifier: 67:22:05:8C:35:CD:A1:09:93:52:B4:13:7D:11:62:97:AD:38:12:42
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0194206853A47E8BE9BC595FB8AABE1BF316
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ZyIFjDXNoQmTUrQTfRFil604EkI.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25245
IP address blocks: 195.234.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:a4:7e:8b:e9:bc:59:5f:b8:aa:be:1b:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6722058c35cda1099352b4137d116297ad381242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:07:06:e8:84:8e:8f:0f:d0:a8:f9:d8:01:
13:7d:9b:a8:c5:29:47:84:77:19:c9:02:cd:20:bb:
20:eb:8f:62:2a:50:ce:53:36:f7:9b:4d:62:27:50:
14:e4:ce:00:ed:db:b7:dd:cc:9e:50:61:a3:dd:8f:
90:41:9a:55:48:4a:bf:6d:e6:5c:7b:6d:85:74:1a:
9d:af:7b:e9:ed:d6:63:5d:f0:f7:91:df:32:0e:71:
8f:73:31:39:7d:72:8f:7a:7a:e2:52:ce:65:78:24:
57:bf:70:d8:a3:c3:1e:ae:70:7e:82:13:49:95:f9:
23:c3:64:e4:9f:9c:a9:4e:92:97:57:f0:09:d6:5c:
a2:33:54:df:2b:8e:ce:c7:98:c6:18:50:4f:bf:47:
35:c4:8b:82:6b:b2:89:42:ca:6b:0c:e5:8c:09:97:
08:1e:f1:fa:8b:db:7b:f1:fc:33:03:62:09:1f:c9:
fa:75:55:d4:3e:11:49:f7:05:20:17:bb:0b:1b:30:
b8:37:e7:cc:d6:8f:99:90:53:dc:0d:7d:8d:6e:c0:
2a:99:24:61:f7:75:5a:37:de:3d:3a:88:96:4d:15:
17:d8:60:f5:ec:bb:1c:f1:22:21:1b:8c:7c:11:96:
f9:80:ff:05:89:6a:93:98:13:be:3d:11:87:fe:c4:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:05:8C:35:CD:A1:09:93:52:B4:13:7D:11:62:97:AD:38:12:42
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ZyIFjDXNoQmTUrQTfRFil604EkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.216.0/22
Signature Algorithm: sha256WithRSAEncryption
12:32:72:45:57:2a:ca:68:7e:6b:7a:67:4e:75:dd:62:5e:84:
ef:4b:f5:be:c2:19:4d:23:13:45:6c:57:33:1f:82:ba:92:00:
2f:ad:27:9f:80:df:ba:35:b3:44:2c:58:e3:bd:9e:12:00:06:
47:30:73:68:3a:4d:55:a9:63:5e:ea:0a:09:a8:d2:83:44:ca:
12:f8:c3:1c:1f:3f:04:2f:a7:46:45:f2:de:6c:67:c5:88:18:
87:c3:55:ae:08:4d:aa:91:fa:18:48:40:1c:8d:a6:b3:c1:ff:
a7:db:93:36:cf:d0:26:2a:5b:6c:43:95:e2:9a:f6:86:b3:85:
ac:fe:7a:66:b5:d4:67:8b:f9:69:99:68:73:0e:14:50:71:d0:
fb:ad:d5:d4:18:13:df:08:4a:6a:16:bc:c6:5c:b1:19:8a:76:
c3:eb:f0:57:78:c4:16:b0:1f:f5:16:84:c6:9a:08:9a:dc:d6:
ab:65:39:5f:7b:89:b1:b9:21:e7:59:ac:7f:8e:dd:0e:80:ad:
bb:07:9f:bc:8e:23:b0:83:ef:e6:e0:9d:03:1b:4b:7b:58:90:
d1:78:0b:d7:ba:24:14:62:67:89:3c:2f:cb:71:b1:86:cc:4e:
2c:a6:62:e9:d2:37:9e:46:b8:5a:1e:88:30:5d:91:fd:f2:81:
c2:ac:7d:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFOkfovpvFlfuKq+G/MWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4
NmViYjEwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIyMDU4YzM1Y2RhMTA5OTM1MmI0MTM3ZDExNjI5N2FkMzgxMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNIHBuiEjo8P0Kj52AETfZuoxSlH
hHcZyQLNILsg649iKlDOUzb3m01iJ1AU5M4A7du33cyeUGGj3Y+QQZpVSEq/beZc
e22FdBqdr3vp7dZjXfD3kd8yDnGPczE5fXKPenriUs5leCRXv3DYo8MernB+ghNJ
lfkjw2Tkn5ypTpKXV/AJ1lyiM1TfK47Ox5jGGFBPv0c1xIuCa7KJQsprDOWMCZcI
HvH6i9t78fwzA2IJH8n6dVXUPhFJ9wUgF7sLGzC4N+fM1o+ZkFPcDX2NbsAqmSRh
93VaN949OoiWTRUX2GD17Lsc8SIhG4x8EZb5gP8FiWqTmBO+PRGH/sQ7JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGciBYw1zaEJk1K0E30RYpetOBJCMB8GA1UdIwQY
MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt
YzRkNDJiN2Y2MjcwLzEvWnlJRmpEWE5vUW1UVXJRVGZSRmlsNjA0RWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw
LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+rYMA0G
CSqGSIb3DQEBCwUAA4IBAQASMnJFVyrKaH5remdOdd1iXoTvS/W+whlNIxNFbFcz
H4K6kgAvrSefgN+6NbNELFjjvZ4SAAZHMHNoOk1VqWNe6goJqNKDRMoS+MMcHz8E
L6dGRfLebGfFiBiHw1WuCE2qkfoYSEAcjaazwf+n25M2z9AmKltsQ5XimvaGs4Ws
/npmtdRni/lpmWhzDhRQcdD7rdXUGBPfCEpqFrzGXLEZinbD6/BXeMQWsB/1FoTG
mgia3NarZTlfe4mxuSHnWax/jt0OgK27B5+8jiOwg+/m4J0DG0t7WJDReAvXuiQU
YmeJPC/LcbGGzE4spmLp0jeeRrhaHogwXZH98oHCrH1+
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:59 2025 by rpki-client