Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa
File: CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa (raw, json)
Hash identifier: X7vY45oxc1G+Q/eP9qyuj1KWi47wOFpcyf1QqrA/I6Y=
Subject key identifier: 08:A7:99:6B:0F:90:B2:0D:5D:C1:1B:81:7C:7B:3D:93:B7:12:92:9D
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B67D02B6791BE7B18D668BCDA80840
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50949
IP address blocks: 195.26.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7d:02:b6:79:1b:e7:b1:8d:66:8b:cd:a8:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08a7996b0f90b20d5dc11b817c7b3d93b712929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:7b:de:93:8e:b8:32:4c:b0:27:48:8d:10:
03:e1:58:eb:ce:68:d5:39:c2:ae:80:b7:69:a2:4d:
c8:0c:ab:44:80:3e:ab:bc:18:29:4b:37:cb:33:bf:
59:5f:4d:d4:74:47:c3:1b:1a:f3:fc:10:3e:63:a7:
12:f6:65:70:af:2e:22:b5:95:c3:59:c5:50:8e:1a:
3e:41:a9:b6:e6:22:d9:31:57:d1:68:10:8f:a5:31:
d3:56:ee:4f:dd:aa:64:be:24:12:95:c1:cc:14:0d:
f2:d7:1c:76:18:bd:c0:40:dc:2e:dd:94:fc:f4:20:
15:cd:1e:6a:04:04:d5:91:56:e6:d0:0a:a8:b2:57:
03:ec:96:17:93:37:f3:bb:35:e3:69:fb:0f:12:1a:
9c:98:25:3f:a6:3e:34:59:7e:9a:7b:bc:7e:3a:7a:
b9:62:bc:21:a7:ff:a3:df:2f:e5:50:7b:8a:a1:08:
a1:c2:aa:1b:a8:2a:ae:6d:66:d0:44:9d:c4:dc:62:
dd:97:96:49:ec:2d:3e:df:3d:1c:16:a4:e2:e2:ce:
c6:2e:96:63:f3:70:47:c3:9a:56:c1:78:fe:b9:6d:
48:21:70:d2:df:82:18:cb:43:9f:6f:ee:82:ff:07:
9b:0d:a2:77:c3:8a:0d:2f:47:41:46:e9:f3:f8:85:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:99:6B:0F:90:B2:0D:5D:C1:1B:81:7C:7B:3D:93:B7:12:92:9D
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.82.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a0:98:ae:da:db:31:71:4f:f2:0d:a2:4a:44:66:9f:dd:c0:
55:48:19:27:2f:10:16:81:1c:8f:1f:70:7c:de:40:a7:90:2d:
ca:d0:bb:e3:07:73:bc:7c:0e:a9:b8:ed:23:bc:81:c7:33:13:
46:7e:9f:1e:84:21:83:0a:0b:f0:17:9a:59:f2:45:f9:0b:70:
8f:d1:c1:0e:0f:5f:8e:cc:6c:c8:56:3c:e0:64:ef:6d:93:09:
5c:4e:b4:79:a3:72:65:b9:e2:9d:10:4a:13:6d:6e:51:5b:fc:
46:46:e9:fd:15:85:cf:fe:9d:4a:93:a8:c7:ec:93:ee:ce:81:
b7:69:cf:d8:25:c9:02:84:66:a3:20:58:1a:02:a2:0c:2a:ea:
11:d5:30:a9:45:a2:dd:cd:1e:7f:3a:b7:23:48:9d:69:2b:35:
24:fb:c4:13:1d:6a:84:b6:44:2a:b2:52:a2:fc:02:df:0f:0e:
20:ae:3f:a0:d6:eb:64:52:4b:2b:92:d7:cb:da:1e:9a:3d:a0:
22:af:c2:f5:9a:23:39:78:77:f1:f3:47:0c:2d:4c:0d:fa:00:
51:66:dc:ac:fd:c2:0e:bb:ef:83:d1:af:b8:5c:e6:2f:d5:95:
3d:bd:90:2d:59:40:48:38:e0:0d:de:8d:95:65:45:8c:13:b4:
6c:9f:87:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntn0Ctnkb57GNZovNqAhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjUwMTAyMTU1MDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGE3OTk2YjBmOTBiMjBkNWRjMTFiODE3YzdiM2Q5M2I3MTI5MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQl73pOOuDJMsCdIjRAD4VjrzmjV
OcKugLdpok3IDKtEgD6rvBgpSzfLM79ZX03UdEfDGxrz/BA+Y6cS9mVwry4itZXD
WcVQjho+Qam25iLZMVfRaBCPpTHTVu5P3apkviQSlcHMFA3y1xx2GL3AQNwu3ZT8
9CAVzR5qBATVkVbm0AqoslcD7JYXkzfzuzXjafsPEhqcmCU/pj40WX6ae7x+Onq5
Yrwhp/+j3y/lUHuKoQihwqobqCqubWbQRJ3E3GLdl5ZJ7C0+3z0cFqTi4s7GLpZj
83BHw5pWwXj+uW1IIXDS34IYy0Ofb+6C/webDaJ3w4oNL0dBRunz+IXYZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAinmWsPkLINXcEbgXx7PZO3EpKdMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvQ0tlWmF3LVFzZzFkd1J1QmZIczlrN2NTa3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxpSMA0G
CSqGSIb3DQEBCwUAA4IBAQC7oJiu2tsxcU/yDaJKRGaf3cBVSBknLxAWgRyPH3B8
3kCnkC3K0LvjB3O8fA6puO0jvIHHMxNGfp8ehCGDCgvwF5pZ8kX5C3CP0cEOD1+O
zGzIVjzgZO9tkwlcTrR5o3JlueKdEEoTbW5RW/xGRun9FYXP/p1Kk6jH7JPuzoG3
ac/YJckChGajIFgaAqIMKuoR1TCpRaLdzR5/OrcjSJ1pKzUk+8QTHWqEtkQqslKi
/ALfDw4grj+g1utkUksrktfL2h6aPaAir8L1miM5eHfx80cMLUwN+gBRZtys/cIO
u++D0a+4XOYv1ZU9vZAtWUBIOOAN3o2VZUWME7Rsn4f0
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:25 2025 by rpki-client