Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa
File: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (raw, json)
Hash identifier: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=
Subject key identifier: CF:59:93:38:6F:15:13:DF:AF:F0:FF:82:A3:9C:8F:98:89:5F:E8:1D
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 019424B292C9F078AE6ECE903CF24E556ED8
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59933
IP address blocks: 185.39.248.0/22 maxlen: 23
2a01:4ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:92:c9:f0:78:ae:6e:ce:90:3c:f2:4e:55:6e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5993386f1513dfaff0ff82a39c8f98895fe81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:5b:99:59:2d:02:c3:7e:e0:21:64:3e:d3:
da:73:e8:43:3f:b4:7c:ce:4b:a4:2d:18:95:34:8d:
bc:04:ad:4d:ad:5d:f3:de:e5:51:a4:bb:9d:a6:2e:
17:7f:38:7b:ef:91:c4:b0:ea:26:c4:f3:f2:88:d7:
99:7a:c4:d7:e7:c4:e7:2b:cd:5f:3d:fc:16:52:be:
a5:cd:27:e4:3d:1d:04:5d:64:65:af:1d:6f:80:7d:
e9:8f:16:cd:21:0d:41:2c:2a:06:4f:45:13:19:a0:
dc:11:bf:d3:04:98:73:6a:97:b3:a6:ec:07:78:e6:
03:dc:c1:1f:40:d1:ea:43:e9:e8:43:7b:0d:32:a2:
02:51:16:ab:32:df:f7:f2:84:45:22:f4:45:6b:93:
a9:52:3d:78:b4:d0:bf:94:21:12:5e:18:74:08:36:
82:c2:0a:01:ce:fb:ba:de:a4:d1:47:f2:24:c8:87:
b3:f2:93:5d:33:8e:27:5b:7d:f3:02:33:1a:5d:4c:
eb:77:0c:6b:ba:9b:83:63:b7:2f:51:06:fe:04:aa:
1e:db:6b:88:ea:b7:7e:a3:1e:06:2b:14:d4:c1:d7:
2f:81:ee:4d:af:a8:b0:6d:52:c5:c0:70:c6:e2:a0:
ea:e0:cb:55:ff:5a:1d:e0:06:23:b8:1f:ae:0e:09:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:93:38:6F:15:13:DF:AF:F0:FF:82:A3:9C:8F:98:89:5F:E8:1D
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.248.0/22
IPv6:
2a01:4ae0::/32
Signature Algorithm: sha256WithRSAEncryption
04:bf:0b:87:e7:14:2d:56:d4:02:ad:c5:93:2c:5b:59:96:de:
f1:9b:e7:9f:c1:a0:c0:08:9c:b3:dc:c4:b4:87:93:9b:e9:a8:
10:2c:95:ac:df:a3:cc:23:3b:0e:95:71:1c:50:e7:6b:fd:83:
6a:0a:09:08:f2:57:cf:55:cd:a7:ec:a4:ce:c9:dd:e5:21:16:
9a:3c:47:7e:92:c4:c9:56:3b:01:8c:33:b7:07:2d:a5:7f:8e:
ee:df:62:c5:bb:24:e0:65:d5:83:a1:51:53:f3:97:50:a6:6d:
1b:c3:9b:b1:f5:51:a6:8d:89:9f:4d:f8:da:03:bc:9e:a5:a8:
47:e5:50:bb:e3:aa:b5:0d:52:e1:d7:3e:a0:81:d1:28:ad:7d:
34:f4:3e:d9:5b:6c:0e:2a:7a:4a:f8:80:4a:a3:a3:4c:c7:c4:
9c:6f:08:b3:1d:a2:88:77:97:43:14:d7:82:ec:83:4c:e2:d3:
1d:3b:32:e7:eb:09:e3:96:0d:40:6e:1d:ce:19:05:49:c3:bb:
8d:81:65:01:2a:95:16:c7:0c:b9:23:d4:4d:64:31:11:77:c9:
dc:2b:ea:c1:05:f6:d2:f9:c4:c5:e4:ba:fc:bb:3e:4f:2e:bb:
f3:ad:78:cc:b4:5f:30:81:10:02:11:dc:10:0c:00:a0:2a:34:
2f:ef:a2:b7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkspLJ8Hiubs6QPPJOVW7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDMwZmMwOWE3MTNiMjQ5YWNhYTc2Nzg5MTFlOGQxZTMy
MzNhZmQwHhcNMjUwMTAyMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjU5OTMzODZmMTUxM2RmYWZmMGZmODJhMzljOGY5ODg5NWZlODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPVbmVktAsN+4CFkPtPac+hDP7R8
zkukLRiVNI28BK1NrV3z3uVRpLudpi4Xfzh775HEsOomxPPyiNeZesTX58TnK81f
PfwWUr6lzSfkPR0EXWRlrx1vgH3pjxbNIQ1BLCoGT0UTGaDcEb/TBJhzapezpuwH
eOYD3MEfQNHqQ+noQ3sNMqICURarMt/38oRFIvRFa5OpUj14tNC/lCESXhh0CDaC
wgoBzvu63qTRR/IkyIez8pNdM44nW33zAjMaXUzrdwxrupuDY7cvUQb+BKoe22uI
6rd+ox4GKxTUwdcvge5Nr6iwbVLFwHDG4qDq4MtV/1od4AYjuB+uDglkXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM9ZkzhvFRPfr/D/gqOcj5iJX+gdMB8GA1UdIwQY
MBaAFB9DD8CacTskmsqnZ4kR6NHjIzr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQt
YmUzOTE3YzVlMmY3LzEvejFtVE9HOFZFOS12OFAtQ281eVBtSWxmNkIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQtYmUzOTE3YzVlMmY3
LzEvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSf4MA0E
AgACMAcDBQAqAUrgMA0GCSqGSIb3DQEBCwUAA4IBAQAEvwuH5xQtVtQCrcWTLFtZ
lt7xm+efwaDACJyz3MS0h5Ob6agQLJWs36PMIzsOlXEcUOdr/YNqCgkI8lfPVc2n
7KTOyd3lIRaaPEd+ksTJVjsBjDO3By2lf47u32LFuyTgZdWDoVFT85dQpm0bw5ux
9VGmjYmfTfjaA7yepahH5VC746q1DVLh1z6ggdEorX009D7ZW2wOKnpK+IBKo6NM
x8ScbwizHaKId5dDFNeC7INM4tMdOzLn6wnjlg1Abh3OGQVJw7uNgWUBKpUWxwy5
I9RNZDERd8ncK+rBBfbS+cTF5Lr8uz5PLrvzrXjMtF8wgRACEdwQDACgKjQv76K3
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:22 2025 by rpki-client