Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/ZFWlomNdM98mTRRpq_aoaHkQskg.roa
File: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (raw, json)
Hash identifier: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=
Subject key identifier: 64:55:A5:A2:63:5D:33:DF:26:4D:14:69:AB:F6:A8:68:79:10:B2:48
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 0196A5CD1E9756BAC3EBD5CCCE8A61A49144
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/ZFWlomNdM98mTRRpq_aoaHkQskg.roa
Signing time: Tue 06 May 2025 13:33:25 +0000
ROA not before: Tue 06 May 2025 13:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 194.180.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:cd:1e:97:56:ba:c3:eb:d5:cc:ce:8a:61:a4:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: May 6 13:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6455a5a2635d33df264d1469abf6a8687910b248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:f1:90:3a:24:24:ff:49:1e:5b:ba:02:71:
cb:fc:f7:10:d4:b2:0d:cb:d7:c3:33:2c:f9:26:88:
80:35:51:b5:de:49:1e:b5:c3:4b:b6:b6:43:d4:d7:
34:3c:12:ee:f6:d0:88:7a:d6:c4:f6:c1:42:55:9b:
a3:d1:f6:38:aa:52:ac:3f:54:9f:3b:b2:50:dc:56:
44:51:9a:30:a4:0c:57:78:64:6d:31:99:b6:b9:d1:
49:11:66:37:4f:3d:10:a7:62:73:36:18:f6:6b:da:
67:cb:0b:0c:e0:d5:c2:fe:95:21:fc:bf:0c:5f:b0:
1e:59:fa:53:44:5c:89:37:d5:96:1d:38:25:2f:2c:
fb:75:e4:59:70:0a:3a:ec:d4:cf:3e:d7:e0:b2:79:
b5:be:9d:29:cc:82:1d:d1:a9:e5:47:25:42:30:2e:
7c:6b:7e:c1:f7:41:9c:e2:f9:ad:d6:b3:0a:50:21:
fd:b8:9c:2b:0f:f6:76:c7:94:c9:9d:ea:57:36:38:
37:36:29:69:c7:93:03:03:c5:b6:f0:f7:b4:6c:c8:
56:af:c7:63:82:48:90:98:1d:ae:9e:ed:03:13:7d:
9b:16:99:ee:00:68:be:09:72:64:62:f4:5e:5e:9a:
03:06:08:69:40:6d:5d:cc:29:52:21:73:65:11:af:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:A5:A2:63:5D:33:DF:26:4D:14:69:AB:F6:A8:68:79:10:B2:48
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/ZFWlomNdM98mTRRpq_aoaHkQskg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:94:2d:cc:bd:42:97:9d:c8:16:49:1a:8d:4b:ff:17:37:57:
f6:a6:bc:c0:9e:62:38:39:7f:36:5a:36:f0:10:a2:a1:9e:1e:
57:e5:80:23:75:6a:4e:b3:8b:a6:4e:1b:41:a7:e8:e0:10:4d:
39:8a:32:c7:34:7b:99:58:01:58:86:b0:42:b3:48:78:df:19:
47:cb:2c:95:79:e4:28:45:96:cf:19:67:02:a1:e7:df:1e:84:
ff:44:33:a1:14:55:1f:b3:56:68:70:4d:1c:23:27:c4:f0:d6:
9c:2c:0b:71:c5:2a:b8:43:e4:c4:a5:4e:e7:ad:e0:60:fe:ef:
f9:fc:fc:22:ea:58:0b:0a:e0:3f:9d:13:7a:f1:58:46:45:ba:
45:f9:f4:c3:bd:d6:c7:8b:4f:7e:6a:5d:e5:3f:0c:eb:5c:57:
7b:bb:5f:6f:34:0a:c7:19:17:7f:2a:cb:f2:45:b6:d1:33:48:
95:b6:7b:23:f2:9d:32:02:39:36:53:6f:f3:4e:97:41:ad:7d:
5f:1b:9f:2d:b7:a0:da:b6:fc:82:b5:6e:7b:09:cf:c1:ce:5b:
a6:e8:8b:ba:d4:f8:0c:74:8f:f7:3b:08:0f:c2:38:71:f4:29:
58:bf:93:9f:1e:56:f5:51:68:f9:78:13:59:96:49:4c:78:43:
89:e9:af:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZalzR6XVrrD69XMzophpJFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk
NzcxYjIwHhcNMjUwNTA2MTMzMzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDU1YTVhMjYzNWQzM2RmMjY0ZDE0NjlhYmY2YTg2ODc5MTBiMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6/xkDokJP9JHlu6AnHL/PcQ1LIN
y9fDMyz5JoiANVG13kketcNLtrZD1Nc0PBLu9tCIetbE9sFCVZuj0fY4qlKsP1Sf
O7JQ3FZEUZowpAxXeGRtMZm2udFJEWY3Tz0Qp2JzNhj2a9pnywsM4NXC/pUh/L8M
X7AeWfpTRFyJN9WWHTglLyz7deRZcAo67NTPPtfgsnm1vp0pzIId0anlRyVCMC58
a37B90Gc4vmt1rMKUCH9uJwrD/Z2x5TJnepXNjg3Nilpx5MDA8W28Pe0bMhWr8dj
gkiQmB2unu0DE32bFpnuAGi+CXJkYvReXpoDBghpQG1dzClSIXNlEa/bEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRVpaJjXTPfJk0Uaav2qGh5ELJIMB8GA1UdIwQY
MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt
NDM3NWQ2NzVmY2YzLzEvWkZXbG9tTmRNOThtVFJScHFfYW9hSGtRc2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz
LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQLMA0G
CSqGSIb3DQEBCwUAA4IBAQAulC3MvUKXncgWSRqNS/8XN1f2przAnmI4OX82Wjbw
EKKhnh5X5YAjdWpOs4umThtBp+jgEE05ijLHNHuZWAFYhrBCs0h43xlHyyyVeeQo
RZbPGWcCoeffHoT/RDOhFFUfs1ZocE0cIyfE8NacLAtxxSq4Q+TEpU7nreBg/u/5
/Pwi6lgLCuA/nRN68VhGRbpF+fTDvdbHi09+al3lPwzrXFd7u19vNArHGRd/Ksvy
RbbRM0iVtnsj8p0yAjk2U2/zTpdBrX1fG58tt6DatvyCtW57Cc/Bzlum6Iu61PgM
dI/3OwgPwjhx9ClYv5OfHlb1UWj5eBNZlklMeEOJ6a/l
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:08:33 2025 by rpki-client