Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bzShU-pOBuwYlNg1MRtlm5sP16c.roa
File: bzShU-pOBuwYlNg1MRtlm5sP16c.roa (raw, json)
Hash identifier: kMvc6b1ApntQ0IepPx0nzfBjiTaf9hvt00Ty/p65E5s=
Subject key identifier: 6F:34:A1:53:EA:4E:06:EC:18:94:D8:35:31:1B:65:9B:9B:0F:D7:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196425591415A20D44FE8D2EC447F80BD8B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bzShU-pOBuwYlNg1MRtlm5sP16c.roa
Signing time: Thu 17 Apr 2025 06:00:26 +0000
ROA not before: Thu 17 Apr 2025 06:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54881
IP address blocks: 178.215.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:91:41:5a:20:d4:4f:e8:d2:ec:44:7f:80:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 06:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f34a153ea4e06ec1894d835311b659b9b0fd7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:3d:43:8a:78:01:d1:d5:bf:ed:99:32:d8:
bd:c9:71:38:eb:d1:14:1d:08:4d:d4:57:a8:29:df:
d8:8b:17:c0:bf:65:82:ac:3c:c1:3c:c7:21:0e:dd:
15:b6:e9:af:99:35:30:23:18:54:f1:1c:3f:3b:31:
64:7b:0b:72:62:7f:90:80:3d:f8:d0:df:87:57:ce:
8a:2e:a9:46:6d:20:14:94:aa:92:f1:b5:16:d1:c6:
14:53:f6:49:59:b1:02:38:a7:89:34:e3:05:4b:08:
5c:6a:18:d0:cd:59:e5:9d:4e:a7:e1:d0:89:35:b2:
47:07:c6:88:64:a2:5d:a2:87:d2:b7:cd:f4:07:2a:
0d:48:fc:23:c0:c4:e4:76:c7:a2:7d:c9:d8:7a:a5:
12:38:9f:7a:6e:87:8e:b7:f8:98:56:61:3e:ea:82:
4e:62:92:f7:28:4b:16:70:62:73:60:1e:39:95:15:
72:39:96:fa:2d:8f:2a:28:71:74:24:a9:25:38:2f:
54:42:a8:e2:25:f0:fc:9f:e2:05:55:f9:b9:12:70:
58:3f:a2:a6:a6:8c:1c:2c:21:53:6b:40:40:ee:b9:
d5:7d:7d:eb:04:3e:3b:af:1d:89:05:01:65:c1:3e:
2b:26:c1:ce:75:8d:a2:e0:44:db:f9:0a:cb:15:f0:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:34:A1:53:EA:4E:06:EC:18:94:D8:35:31:1B:65:9B:9B:0F:D7:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bzShU-pOBuwYlNg1MRtlm5sP16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
57:19:e1:77:7f:b1:24:31:d0:ad:5e:41:d4:00:42:fe:d7:d5:
22:3f:ef:49:12:7f:8a:6f:8a:8f:7f:2a:f2:ad:06:45:1f:99:
3a:a0:4b:ec:33:c2:1e:f2:21:07:95:ef:66:1e:cf:94:ac:7c:
c3:c2:95:93:bc:bf:53:5f:55:bf:5a:b4:a1:13:e7:1a:25:a8:
08:4f:7c:f5:0b:b0:1a:88:58:c7:e8:5f:53:b0:fc:ab:48:8e:
24:ce:bf:22:f3:c6:05:ce:b3:bc:3c:38:65:ab:ae:6d:94:cc:
ae:86:f9:ef:fa:b3:fa:25:b2:20:d1:56:bd:cd:e2:82:7a:6a:
86:9c:ac:27:31:2d:4b:05:44:8e:0e:dc:f6:4d:f8:e9:51:41:
ee:c4:bc:42:79:f9:d6:6e:a5:fa:40:7c:78:51:8c:83:ec:d0:
1f:7c:4c:4a:e3:92:bf:38:31:af:34:0f:08:ea:7e:b1:00:af:
8e:56:ee:9c:38:d2:8b:4e:eb:8f:4b:04:bd:9d:44:c1:37:9c:
fa:eb:fe:86:e0:63:7b:7d:9e:f7:23:19:db:d2:5e:5e:26:62:
9e:1a:64:ca:13:91:9e:dc:ff:6a:8b:d7:60:77:60:f6:60:f0:
dd:80:fa:9b:f3:ca:db:24:a9:2e:7c:f7:43:3e:0d:e9:ea:58:
fb:f3:5e:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZCVZFBWiDUT+jS7ER/gL2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDE3MDYwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjM0YTE1M2VhNGUwNmVjMTg5NGQ4MzUzMTFiNjU5YjliMGZkN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY49Q4p4AdHVv+2ZMti9yXE469EU
HQhN1FeoKd/YixfAv2WCrDzBPMchDt0VtumvmTUwIxhU8Rw/OzFkewtyYn+QgD34
0N+HV86KLqlGbSAUlKqS8bUW0cYUU/ZJWbECOKeJNOMFSwhcahjQzVnlnU6n4dCJ
NbJHB8aIZKJdoofSt830ByoNSPwjwMTkdseifcnYeqUSOJ96boeOt/iYVmE+6oJO
YpL3KEsWcGJzYB45lRVyOZb6LY8qKHF0JKklOC9UQqjiJfD8n+IFVfm5EnBYP6Km
powcLCFTa0BA7rnVfX3rBD47rx2JBQFlwT4rJsHOdY2i4ETb+QrLFfB6TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG80oVPqTgbsGJTYNTEbZZubD9enMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYnpTaFUtcE9CdXdZbE5nMU1SdGxtNXNQMTZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBXGeF3f7EkMdCtXkHUAEL+19UiP+9JEn+Kb4qPfyry
rQZFH5k6oEvsM8Ie8iEHle9mHs+UrHzDwpWTvL9TX1W/WrShE+caJagIT3z1C7Aa
iFjH6F9TsPyrSI4kzr8i88YFzrO8PDhlq65tlMyuhvnv+rP6JbIg0Va9zeKCemqG
nKwnMS1LBUSODtz2TfjpUUHuxLxCefnWbqX6QHx4UYyD7NAffExK45K/ODGvNA8I
6n6xAK+OVu6cONKLTuuPSwS9nUTBN5z66/6G4GN7fZ73Ixnb0l5eJmKeGmTKE5Ge
3P9qi9dgd2D2YPDdgPqb88rbJKkufPdDPg3p6lj7817p
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:46:23 2025 by rpki-client