Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa
File: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (raw, json)
Hash identifier: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=
Subject key identifier: 93:EC:DB:62:A3:23:AF:B5:C5:92:38:20:60:CB:03:4E:A9:1C:E1:94
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019422FB0B1842A01034E2049EE342557396
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.1.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0b:18:42:a0:10:34:e2:04:9e:e3:42:55:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93ecdb62a323afb5c592382060cb034ea91ce194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:d5:20:ba:8f:11:f4:7f:48:90:ed:7f:ca:
18:e3:c5:1b:e7:37:12:7b:5e:8c:80:10:a1:cb:28:
0e:a5:18:bb:f3:76:8e:20:e8:31:fa:8d:5a:17:e6:
60:b8:77:8c:28:c6:35:ce:60:c8:9c:b6:a7:21:4a:
c7:0d:c3:9e:1f:8a:c0:9d:97:34:68:34:80:0e:27:
84:4c:ea:f8:92:74:88:96:d6:e8:60:d3:cd:32:f2:
7d:5c:5d:ef:82:dd:71:6f:e6:d5:57:23:8f:e9:1d:
96:c3:2c:c7:49:8d:8c:4c:5e:12:84:4a:3a:c7:ff:
45:e7:aa:d5:eb:92:f4:a1:06:6e:b0:30:b5:72:3e:
ec:d8:45:08:40:fc:07:2f:a6:56:c8:ab:9f:fc:f8:
52:f7:b5:4d:89:b4:19:b6:5f:27:00:19:3f:cc:81:
8d:5b:6d:9f:10:75:81:d2:2a:49:53:5b:d9:44:69:
c0:8e:65:bc:14:18:a8:b0:fe:b8:a6:5c:c8:3d:2d:
ad:c7:1b:8e:62:ea:05:cd:28:d0:d8:ae:e0:78:57:
1f:7a:11:cf:3f:47:29:97:12:ac:84:7d:0a:fa:0d:
13:6b:a9:03:d5:36:37:d5:af:b2:dc:e5:cd:3f:6a:
ec:71:9e:2a:f6:6a:3d:3a:64:32:3e:1b:d0:41:f1:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:DB:62:A3:23:AF:B5:C5:92:38:20:60:CB:03:4E:A9:1C:E1:94
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.245.0/24
Signature Algorithm: sha256WithRSAEncryption
17:42:c9:84:dd:cf:24:1a:9f:ed:8e:b1:a9:7f:a4:cd:26:e8:
35:0e:ba:8e:bc:4a:a6:70:4b:b9:c3:ca:f9:30:d0:c0:a4:8b:
12:cc:91:cc:ef:75:fa:15:8f:07:0b:1f:86:22:98:6e:0a:97:
e8:54:3c:43:8e:99:86:dc:39:c6:88:e0:1e:6f:16:b2:b6:24:
63:98:36:b6:bb:e4:f2:f4:b3:4f:04:43:a5:9e:17:16:cb:9a:
bb:2f:6c:f9:90:01:e3:f8:d7:8c:6a:1e:5b:f7:fc:c0:ab:85:
97:22:a8:33:d9:f5:51:03:ed:23:31:b7:e6:a4:2e:9a:48:fc:
4b:62:4c:20:04:5b:6e:b0:8c:e8:bb:e8:41:52:16:59:41:7b:
e5:79:25:0b:5f:08:fa:02:17:b3:de:de:5b:6c:01:bd:ce:46:
ed:aa:df:39:40:79:b3:8a:ca:46:a5:2a:0f:5b:5b:74:66:62:
2c:93:4d:34:67:47:95:8f:b9:4a:c7:5f:bb:b2:0b:b5:5a:a7:
16:19:87:d1:79:f4:ff:c6:b5:5a:25:0f:59:91:15:68:6b:fb:
d9:56:ca:94:95:e6:cc:6f:7d:ff:67:1f:2e:6e:87:a4:36:c5:
32:66:52:44:72:e5:7e:10:26:39:1e:fd:a4:73:d3:34:ac:76:
43:1a:35:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+wsYQqAQNOIEnuNCVXOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz
NDM2ZjUwHhcNMjUwMTAxMTc0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2VjZGI2MmEzMjNhZmI1YzU5MjM4MjA2MGNiMDM0ZWE5MWNlMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8DVILqPEfR/SJDtf8oY48Ub5zcS
e16MgBChyygOpRi783aOIOgx+o1aF+ZguHeMKMY1zmDInLanIUrHDcOeH4rAnZc0
aDSADieETOr4knSIltboYNPNMvJ9XF3vgt1xb+bVVyOP6R2WwyzHSY2MTF4ShEo6
x/9F56rV65L0oQZusDC1cj7s2EUIQPwHL6ZWyKuf/PhS97VNibQZtl8nABk/zIGN
W22fEHWB0ipJU1vZRGnAjmW8FBiosP64plzIPS2txxuOYuoFzSjQ2K7geFcfehHP
P0cplxKshH0K+g0Ta6kD1TY31a+y3OXNP2rscZ4q9mo9OmQyPhvQQfEkrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJPs22KjI6+1xZI4IGDLA06pHOGUMB8GA1UdIwQY
MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt
YjFmNGZjNzUyMmEwLzEvay16YllxTWpyN1hGa2pnZ1lNc0RUcWtjNFpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw
LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgH1MA0G
CSqGSIb3DQEBCwUAA4IBAQAXQsmE3c8kGp/tjrGpf6TNJug1DrqOvEqmcEu5w8r5
MNDApIsSzJHM73X6FY8HCx+GIphuCpfoVDxDjpmG3DnGiOAebxaytiRjmDa2u+Ty
9LNPBEOlnhcWy5q7L2z5kAHj+NeMah5b9/zAq4WXIqgz2fVRA+0jMbfmpC6aSPxL
YkwgBFtusIzou+hBUhZZQXvleSULXwj6Ahez3t5bbAG9zkbtqt85QHmzispGpSoP
W1t0ZmIsk000Z0eVj7lKx1+7sgu1WqcWGYfRefT/xrVaJQ9ZkRVoa/vZVsqUlebM
b33/Zx8uboekNsUyZlJEcuV+ECY5Hv2kc9M0rHZDGjWO
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:51 2025 by rpki-client