Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Zj2OZMyP1EvTE9y_kIZLugolVK4.roa
File: Zj2OZMyP1EvTE9y_kIZLugolVK4.roa (raw, json)
Hash identifier: Fz6OXkuDPAQpFAzRyqTOrgEEQVqqBvo5qYV2JmKKtSc=
Subject key identifier: 66:3D:8E:64:CC:8F:D4:4B:D3:13:DC:BF:90:86:4B:BA:0A:25:54:AE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FD1450B814D23A887D952AF5C20B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Zj2OZMyP1EvTE9y_kIZLugolVK4.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203758
IP address blocks: 83.147.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:14:50:b8:14:d2:3a:88:7d:95:2a:f5:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=663d8e64cc8fd44bd313dcbf90864bba0a2554ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:00:c5:61:b1:69:36:a0:f2:3e:10:76:3e:
c5:95:39:2d:65:c0:06:23:86:d2:27:30:18:1b:a0:
c8:c2:0d:95:4c:c0:59:0a:28:a8:ff:5e:c8:d3:d6:
10:a8:8a:4b:11:c0:7a:28:b1:fc:f8:89:04:99:7e:
fe:2b:1d:63:d4:63:10:b7:14:4d:2c:b4:29:51:61:
b5:0a:85:b8:2a:d8:81:73:64:6a:20:38:a5:79:7d:
98:fb:4f:1a:84:fb:c4:e8:9b:a3:17:6c:61:61:c5:
c4:cf:17:f3:74:38:aa:55:d7:d6:eb:b2:26:fe:83:
5c:b2:1a:9c:5a:25:fc:e8:2d:46:72:e9:3f:3c:71:
cf:2d:1e:a5:1a:4b:b1:14:ca:d2:13:c1:92:77:76:
b4:9f:e5:29:cf:a9:d1:a4:33:ee:79:22:09:81:99:
b7:37:28:80:79:fd:af:f5:59:c2:be:75:53:c6:ac:
3a:b8:00:e1:f5:87:f0:5a:d2:3a:db:92:dc:5d:41:
5d:98:f3:74:4a:de:01:ed:e3:57:fc:fa:a0:52:27:
bf:e3:78:11:1b:93:a2:c9:1e:fa:86:d1:4c:42:1c:
87:1d:b1:af:3b:3d:75:c6:10:40:dd:15:5d:16:2f:
1d:e6:53:87:77:ec:24:ca:0e:bd:84:b1:31:dc:fb:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:8E:64:CC:8F:D4:4B:D3:13:DC:BF:90:86:4B:BA:0A:25:54:AE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Zj2OZMyP1EvTE9y_kIZLugolVK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.29.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5c:a1:53:8c:a3:49:d7:67:a4:1c:21:a9:0f:fd:4b:e4:12:
9f:f8:36:8c:38:05:03:d1:03:e9:57:37:fa:72:0d:c5:12:63:
0f:c3:7f:59:09:0f:c5:46:8b:3b:fb:4d:00:85:64:ed:7b:1e:
37:54:40:14:e7:43:68:67:30:a6:7e:fa:b6:6a:be:b2:a0:97:
69:f5:45:53:f8:0d:6d:f2:2c:e9:33:14:40:5c:d0:bc:61:fa:
73:bd:dc:2e:74:42:3a:d1:fb:24:fb:06:bc:8b:59:83:b5:b5:
4a:62:1f:b2:d3:61:03:5b:d8:c6:c2:8b:8a:b0:a5:0d:ae:79:
71:84:e9:bc:c5:22:f4:1d:53:2e:9e:32:cb:f4:1a:7e:fb:fb:
ee:e7:3d:8b:1c:78:77:d7:5c:ba:53:8d:02:22:2d:7b:df:e6:
19:77:2c:d8:e6:70:c7:51:fd:9a:fb:c3:94:d4:ce:f0:d7:6c:
88:bc:a8:4d:c0:47:3e:83:a9:f4:40:98:4a:2e:e7:c1:05:07:
fe:11:fa:45:f7:55:eb:48:28:d9:0b:e5:ca:48:06:7b:81:74:
68:b0:71:1b:59:e4:93:2c:c9:62:3d:87:d9:7a:b6:ef:cd:62:
5c:98:c0:21:cb:72:a1:b1:97:39:c3:7a:39:cf:32:01:f6:0e:
d5:10:7e:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/0UULgU0jqIfZUq9cILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjUwMTAyMTM1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjNkOGU2NGNjOGZkNDRiZDMxM2RjYmY5MDg2NGJiYTBhMjU1NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6MAxWGxaTag8j4Qdj7FlTktZcAG
I4bSJzAYG6DIwg2VTMBZCiio/17I09YQqIpLEcB6KLH8+IkEmX7+Kx1j1GMQtxRN
LLQpUWG1CoW4KtiBc2RqIDileX2Y+08ahPvE6JujF2xhYcXEzxfzdDiqVdfW67Im
/oNcshqcWiX86C1Gcuk/PHHPLR6lGkuxFMrSE8GSd3a0n+Upz6nRpDPueSIJgZm3
NyiAef2v9VnCvnVTxqw6uADh9YfwWtI625LcXUFdmPN0St4B7eNX/PqgUie/43gR
G5OiyR76htFMQhyHHbGvOz11xhBA3RVdFi8d5lOHd+wkyg69hLEx3PuqiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGY9jmTMj9RL0xPcv5CGS7oKJVSuMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvWmoyT1pNeVAxRXZURTl5X2tJWkx1Z29sVks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MdMA0G
CSqGSIb3DQEBCwUAA4IBAQBGXKFTjKNJ12ekHCGpD/1L5BKf+DaMOAUD0QPpVzf6
cg3FEmMPw39ZCQ/FRos7+00AhWTtex43VEAU50NoZzCmfvq2ar6yoJdp9UVT+A1t
8izpMxRAXNC8YfpzvdwudEI60fsk+wa8i1mDtbVKYh+y02EDW9jGwouKsKUNrnlx
hOm8xSL0HVMunjLL9Bp++/vu5z2LHHh311y6U40CIi173+YZdyzY5nDHUf2a+8OU
1M7w12yIvKhNwEc+g6n0QJhKLufBBQf+EfpF91XrSCjZC+XKSAZ7gXRosHEbWeST
LMliPYfZerbvzWJcmMAhy3KhsZc5w3o5zzIB9g7VEH4Y
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:48:58 2025 by rpki-client