Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZH517UMHt57T2FttefkfbwPx0bw.roa
File: ZH517UMHt57T2FttefkfbwPx0bw.roa (raw, json)
Hash identifier: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=
Subject key identifier: 64:7E:75:ED:43:07:B7:9E:D3:D8:5B:6D:79:F9:1F:6F:03:F1:D1:BC
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 019426D9F5842A9D682883EE7C7DE2BEC0F7
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZH517UMHt57T2FttefkfbwPx0bw.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3274
IP address blocks: 81.20.224.0/20 maxlen: 24
2001:67c:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:84:2a:9d:68:28:83:ee:7c:7d:e2:be:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=647e75ed4307b79ed3d85b6d79f91f6f03f1d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:43:27:75:ee:b3:ea:a6:5a:a8:43:58:b1:
39:ec:fc:36:32:d4:f1:65:32:f7:2d:7a:b5:19:a6:
d4:9e:ef:f2:84:5a:fe:42:fd:f3:c0:56:d8:d8:ea:
00:18:22:e0:28:51:d9:17:86:ca:d9:2a:29:be:26:
14:fc:13:c3:00:e4:b0:cf:30:99:80:4f:4b:98:83:
fc:44:7f:62:5c:26:c4:d1:39:b0:56:78:5a:40:33:
dc:17:0a:28:e8:ea:a6:88:74:7f:4e:ae:1c:6a:8a:
1f:4a:70:c9:71:e7:cc:b3:97:31:3a:21:3b:b4:65:
e1:99:ae:46:d3:76:d1:29:8a:24:bd:5d:8d:11:96:
16:a7:74:9b:e9:ee:20:2a:66:cf:f4:be:05:dc:33:
32:74:4a:51:dc:8d:61:26:36:05:c4:29:84:46:17:
b9:42:b0:15:b2:d1:16:ce:dd:b8:f5:38:d4:fe:3c:
e1:3a:f3:19:af:8c:1e:0e:b7:b5:19:7c:f7:8d:cc:
e7:f7:e2:70:3a:82:6f:a6:69:5d:f3:52:c1:9e:c3:
06:f7:21:60:2f:86:8f:fc:f6:3f:a0:c7:44:a3:4a:
da:cb:4c:27:9e:63:ba:71:b2:e3:2f:bd:44:cc:62:
24:f0:1e:12:48:dc:be:69:1d:75:f5:c8:c6:2d:91:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:75:ED:43:07:B7:9E:D3:D8:5B:6D:79:F9:1F:6F:03:F1:D1:BC
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZH517UMHt57T2FttefkfbwPx0bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.224.0/20
IPv6:
2001:67c:110::/48
Signature Algorithm: sha256WithRSAEncryption
64:14:dc:cd:92:ca:9a:0e:10:86:02:68:ba:f4:c0:0a:98:67:
ab:07:5b:04:16:69:76:c9:3d:73:a8:07:f7:c0:fc:d0:4a:2e:
06:8a:3c:38:c7:01:48:84:50:33:89:80:14:96:8e:f0:c1:15:
12:f7:40:05:4e:bb:5d:94:87:12:94:16:8f:47:f4:b0:98:24:
13:25:af:1c:20:b8:c4:5d:96:c5:4c:7c:d1:5b:c1:50:39:0c:
63:42:d5:e4:e7:7a:c6:02:10:07:db:3f:2f:3d:b7:ee:fb:13:
56:74:79:05:29:85:f2:c5:f8:49:a2:cc:54:95:d4:02:71:45:
6f:9d:2a:80:d5:50:7e:9d:f6:0c:1e:a4:4a:99:c4:8c:12:83:
a5:f8:ec:94:31:55:5b:bb:05:08:ba:78:3a:13:24:99:a0:2f:
bf:63:55:d7:14:1b:76:64:63:69:da:95:8a:ac:bb:ca:6a:5c:
72:48:e4:b4:53:d4:c2:9a:56:68:dd:9d:aa:65:4d:f4:eb:46:
86:d0:0d:46:7f:7c:37:73:fd:f7:b1:12:cc:6c:46:d5:fc:cf:
b6:79:93:03:02:1a:85:77:24:15:cc:c1:ef:88:3d:ae:73:98:
39:fa:c4:cd:b0:4f:bd:f1:6e:3b:7a:33:20:9c:e5:6f:4f:71:
44:be:00:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQm2fWEKp1oKIPufH3ivsD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz
MTczNjIwHhcNMjUwMTAyMTE1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDdlNzVlZDQzMDdiNzllZDNkODViNmQ3OWY5MWY2ZjAzZjFkMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhDJ3Xus+qmWqhDWLE57Pw2MtTx
ZTL3LXq1GabUnu/yhFr+Qv3zwFbY2OoAGCLgKFHZF4bK2SopviYU/BPDAOSwzzCZ
gE9LmIP8RH9iXCbE0TmwVnhaQDPcFwoo6OqmiHR/Tq4caoofSnDJcefMs5cxOiE7
tGXhma5G03bRKYokvV2NEZYWp3Sb6e4gKmbP9L4F3DMydEpR3I1hJjYFxCmERhe5
QrAVstEWzt249TjU/jzhOvMZr4weDre1GXz3jczn9+JwOoJvpmld81LBnsMG9yFg
L4aP/PY/oMdEo0ray0wnnmO6cbLjL71EzGIk8B4SSNy+aR119cjGLZGkqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGR+de1DB7ee09hbbXn5H28D8dG8MB8GA1UdIwQY
MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt
OWU3MWY2YTg0ODAxLzEvWkg1MTdVTUh0NTdUMkZ0dGVma2Zid1B4MGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx
LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEURTgMA8E
AgACMAkDBwAgAQZ8ARAwDQYJKoZIhvcNAQELBQADggEBAGQU3M2SypoOEIYCaLr0
wAqYZ6sHWwQWaXbJPXOoB/fA/NBKLgaKPDjHAUiEUDOJgBSWjvDBFRL3QAVOu12U
hxKUFo9H9LCYJBMlrxwguMRdlsVMfNFbwVA5DGNC1eTnesYCEAfbPy89t+77E1Z0
eQUphfLF+EmizFSV1AJxRW+dKoDVUH6d9gwepEqZxIwSg6X47JQxVVu7BQi6eDoT
JJmgL79jVdcUG3ZkY2nalYqsu8pqXHJI5LRT1MKaVmjdnaplTfTrRobQDUZ/fDdz
/fexEsxsRtX8z7Z5kwMCGoV3JBXMwe+IPa5zmDn6xM2wT73xbjt6MyCc5W9PcUS+
AG4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:24 2025 by rpki-client