Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/zDiyPljIfQJSHZqDPkKU2sChvrg.roa
File: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (raw, json)
Hash identifier: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=
Subject key identifier: CC:38:B2:3E:58:C8:7D:02:52:1D:9A:83:3E:42:94:DA:C0:A1:BE:B8
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 0194258F982A2A7A1923DA13E50CA5DD2E3E
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/zDiyPljIfQJSHZqDPkKU2sChvrg.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199324
IP address blocks: 185.21.24.0/22 maxlen: 24
185.187.40.0/22 maxlen: 24
2a00:54e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:2a:2a:7a:19:23:da:13:e5:0c:a5:dd:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc38b23e58c87d02521d9a833e4294dac0a1beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:03:51:22:b6:cf:91:9c:b1:a2:cf:77:f7:
0f:fd:df:3b:7f:cd:59:8e:af:45:18:21:85:73:28:
8f:ff:b3:7e:8c:31:4c:c5:9d:89:a0:a9:17:03:54:
74:34:6e:35:d9:08:91:3c:51:f8:6e:a3:f1:dc:2a:
2a:57:80:b3:96:a4:fd:51:2f:a4:37:d7:f2:5b:a4:
95:d7:5f:eb:5c:36:a2:2c:57:59:c9:18:b4:cc:3b:
75:39:f1:6c:3a:af:4a:43:45:34:ec:61:52:0d:b3:
29:64:17:2c:dd:86:fc:5a:db:6e:0e:7d:3f:14:92:
15:8d:fb:b9:46:55:93:c4:92:ac:c2:56:f4:c1:c1:
64:9a:84:73:5c:7c:43:2e:66:1b:59:24:79:a4:5e:
a0:f0:6d:03:60:8a:62:fa:b4:3f:22:73:1e:da:1c:
23:d9:67:17:35:ff:75:5a:d8:0c:28:a2:5f:e3:ec:
95:1c:94:47:c0:50:b7:d7:6e:b5:07:1a:da:da:d7:
59:83:0b:88:c6:72:bc:b7:3b:11:22:22:56:70:99:
bf:f2:a9:31:a7:a5:e5:c3:c1:72:6e:a6:f5:55:83:
0b:70:fd:f9:31:00:5b:d5:31:cf:83:33:02:53:fc:
7f:4d:d3:d7:f0:b6:e1:fc:7c:e1:14:af:c5:cd:b2:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:B2:3E:58:C8:7D:02:52:1D:9A:83:3E:42:94:DA:C0:A1:BE:B8
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/zDiyPljIfQJSHZqDPkKU2sChvrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.24.0/22
185.187.40.0/22
IPv6:
2a00:54e0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:07:9c:f3:ea:84:78:8b:4a:fa:f8:b3:85:37:ec:7e:98:eb:
55:14:d2:39:4b:f4:b2:f9:bd:c3:e1:31:3d:39:52:a4:65:31:
27:e4:97:61:9a:dc:81:ef:a4:10:36:0d:64:6a:fd:d2:ec:be:
73:fc:b5:55:ee:31:60:ad:eb:82:ab:f7:a7:fb:d6:2e:ad:0b:
95:c4:8f:df:20:de:a7:36:f2:83:33:8c:4e:a9:eb:65:67:c8:
c7:52:99:e3:ca:28:cb:19:78:87:2c:51:ab:6a:f5:5d:c0:17:
39:6e:26:8b:9f:84:eb:14:79:de:b2:33:f9:c6:2b:0e:03:49:
c8:9a:d1:ac:bf:67:c8:8c:e1:b8:aa:09:59:ec:4e:a9:54:4f:
cf:cf:28:ce:e4:71:a9:fe:7a:4d:e6:8f:a6:c2:0b:f9:14:2b:
72:84:32:bc:d9:a0:15:09:d3:58:fd:ad:81:57:ea:2d:8b:46:
8c:56:c6:80:81:c8:30:62:ff:e4:93:f9:33:88:d6:f2:e4:41:
fe:38:53:c7:c9:20:ba:09:1f:56:32:c7:59:8e:1d:58:03:ba:
f7:3c:cb:b1:86:b5:09:05:0e:4f:6f:0d:5f:72:04:b3:08:dd:
fd:ea:d8:3d:5f:66:c8:f8:1e:15:c7:ef:d1:0c:49:b5:72:da:
6c:31:53:e6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlj5gqKnoZI9oT5Qyl3S4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyN2U5NTgxYTY5YWNmODExOTMyMGUxMzc5ODU3YTUxM2Jk
MjM4ZGIwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzM4YjIzZTU4Yzg3ZDAyNTIxZDlhODMzZTQyOTRkYWMwYTFiZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+wDUSK2z5GcsaLPd/cP/d87f81Z
jq9FGCGFcyiP/7N+jDFMxZ2JoKkXA1R0NG412QiRPFH4bqPx3CoqV4CzlqT9US+k
N9fyW6SV11/rXDaiLFdZyRi0zDt1OfFsOq9KQ0U07GFSDbMpZBcs3Yb8WttuDn0/
FJIVjfu5RlWTxJKswlb0wcFkmoRzXHxDLmYbWSR5pF6g8G0DYIpi+rQ/InMe2hwj
2WcXNf91WtgMKKJf4+yVHJRHwFC31261Bxra2tdZgwuIxnK8tzsRIiJWcJm/8qkx
p6Xlw8Fybqb1VYMLcP35MQBb1THPgzMCU/x/TdPX8Lbh/HzhFK/FzbIXxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMw4sj5YyH0CUh2agz5ClNrAob64MB8GA1UdIwQY
MBaAFCJ+lYGmms+BGTIOE3mFelE70jjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2It
ZDlkZjQ1ZGJiYWRmLzEvekRpeVBsaklmUUpTSFpxRFBrS1Uyc0NodnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2ItZDlkZjQ1ZGJiYWRm
LzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRUYAwQC
ubsoMA0EAgACMAcDBQAqAFTgMA0GCSqGSIb3DQEBCwUAA4IBAQCOB5zz6oR4i0r6
+LOFN+x+mOtVFNI5S/Sy+b3D4TE9OVKkZTEn5JdhmtyB76QQNg1kav3S7L5z/LVV
7jFgreuCq/en+9YurQuVxI/fIN6nNvKDM4xOqetlZ8jHUpnjyijLGXiHLFGravVd
wBc5biaLn4TrFHnesjP5xisOA0nImtGsv2fIjOG4qglZ7E6pVE/PzyjO5HGp/npN
5o+mwgv5FCtyhDK82aAVCdNY/a2BV+oti0aMVsaAgcgwYv/kk/kziNby5EH+OFPH
ySC6CR9WMsdZjh1YA7r3PMuxhrUJBQ5Pbw1fcgSzCN396tg9X2bI+B4Vx+/RDEm1
ctpsMVPm
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:48 2025 by rpki-client