Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DZGi-_0de38vh7leU6n3gMrKr1s.roa
File: DZGi-_0de38vh7leU6n3gMrKr1s.roa (raw, json)
Hash identifier: vnv6dkgUH+AgvNS++1TJ+/Oc+GhDCLpkhsojtk6gqr8=
Subject key identifier: 0D:91:A2:FB:FD:1D:7B:7F:2F:87:B9:5E:53:A9:F7:80:CA:CA:AF:5B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01966270EF2D60B1075AA6589697A37020D1
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DZGi-_0de38vh7leU6n3gMrKr1s.roa
Signing time: Wed 23 Apr 2025 11:38:10 +0000
ROA not before: Wed 23 Apr 2025 11:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 45.43.166.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:70:ef:2d:60:b1:07:5a:a6:58:96:97:a3:70:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 23 11:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d91a2fbfd1d7b7f2f87b95e53a9f780cacaaf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:dd:40:19:2f:cf:e4:bc:5d:3b:31:23:b2:
bd:3c:5b:21:92:b2:2a:f8:b1:fb:71:75:48:5f:fb:
69:ba:15:79:42:99:68:7a:b7:1f:d8:98:3f:41:eb:
29:c1:e7:20:2b:0a:05:7b:f1:32:16:66:ae:f0:11:
a1:5c:82:ca:46:01:e1:0d:bd:fe:09:6c:15:2b:04:
2a:cb:cc:e3:eb:a7:ff:ad:c4:e1:5e:79:d6:e7:65:
93:0f:9e:84:0a:8e:42:9a:77:b8:05:49:69:e7:c4:
06:7e:8a:28:de:71:b3:9e:71:82:16:9a:91:69:df:
96:70:94:e9:4e:df:00:7c:d2:24:bb:e6:8c:03:85:
de:b5:48:1b:ca:e0:c2:20:11:e7:ba:1e:de:5e:d0:
d4:c1:a1:23:39:2c:5d:d9:0a:49:e8:74:87:32:be:
87:c1:e9:ba:ff:29:9d:11:4d:6f:8c:ec:96:14:5f:
bc:a8:b5:a3:ca:00:48:fa:ba:09:03:e0:72:bb:88:
48:e5:34:2e:7b:77:f9:49:25:f9:14:fa:9b:38:05:
0f:64:46:2a:06:b0:64:85:a8:86:d3:5d:b4:a8:83:
26:0b:d2:c9:5a:68:0d:c2:31:6d:55:f5:d6:ba:d3:
22:6c:88:29:43:4d:cc:d1:e9:b8:6a:c2:a7:c4:6e:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:A2:FB:FD:1D:7B:7F:2F:87:B9:5E:53:A9:F7:80:CA:CA:AF:5B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DZGi-_0de38vh7leU6n3gMrKr1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.166.0/24
104.239.15.0/24
Signature Algorithm: sha256WithRSAEncryption
44:25:1a:ea:6b:8e:11:90:c4:cf:d9:73:b2:4c:ee:b5:a4:30:
3f:e6:d3:27:1d:2c:63:c7:bc:da:38:ae:b6:59:f9:f1:a7:31:
80:48:e4:98:1d:2a:a5:85:1e:8c:16:b0:c8:ba:c6:aa:e0:06:
2c:c8:81:50:55:69:b9:b9:f1:43:ff:e7:e7:4c:f7:dc:ce:b3:
e8:7c:bb:72:30:89:23:4c:db:a0:59:75:46:54:b4:60:b1:ee:
0d:4c:ef:ef:81:45:ba:4e:3f:c8:0e:3c:83:a1:15:55:c9:93:
fa:a6:70:7b:e5:00:ad:e7:dc:bc:d7:8a:3a:20:97:ea:6e:4e:
43:5c:79:d8:5e:32:6e:ac:71:61:c2:fd:11:85:a3:e8:ee:38:
ef:d3:a6:35:0f:41:97:8c:00:90:7a:0e:9c:e4:da:62:bd:c2:
e5:30:77:b3:39:3c:93:77:65:23:71:e2:ce:b6:f3:e4:2e:56:
95:fc:aa:da:40:a9:e8:95:14:af:24:5b:32:1c:cb:51:e3:8f:
a6:4d:bb:c1:1b:44:84:0b:2e:67:4d:2b:2e:21:73:f1:b9:ea:
69:08:f2:e2:78:36:3d:b2:56:5f:2e:83:fb:aa:5d:9d:72:77:
25:dc:45:45:91:85:5f:77:8d:af:8c:16:8b:ad:40:00:71:5c:
cd:84:d7:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZicO8tYLEHWqZYlpejcCDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNDIzMTEzODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDkxYTJmYmZkMWQ3YjdmMmY4N2I5NWU1M2E5Zjc4MGNhY2FhZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jPdQBkvz+S8XTsxI7K9PFshkrIq
+LH7cXVIX/tpuhV5Qploercf2Jg/QespwecgKwoFe/EyFmau8BGhXILKRgHhDb3+
CWwVKwQqy8zj66f/rcThXnnW52WTD56ECo5Cmne4BUlp58QGfooo3nGznnGCFpqR
ad+WcJTpTt8AfNIku+aMA4XetUgbyuDCIBHnuh7eXtDUwaEjOSxd2QpJ6HSHMr6H
wem6/ymdEU1vjOyWFF+8qLWjygBI+roJA+Byu4hI5TQue3f5SSX5FPqbOAUPZEYq
BrBkhaiG0120qIMmC9LJWmgNwjFtVfXWutMibIgpQ03M0em4asKnxG54rQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA2Rovv9HXt/L4e5XlOp94DKyq9bMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvRFpHaS1fMGRlMzh2aDdsZVU2bjNnTXJLcjFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSumAwQA
aO8PMA0GCSqGSIb3DQEBCwUAA4IBAQBEJRrqa44RkMTP2XOyTO61pDA/5tMnHSxj
x7zaOK62WfnxpzGASOSYHSqlhR6MFrDIusaq4AYsyIFQVWm5ufFD/+fnTPfczrPo
fLtyMIkjTNugWXVGVLRgse4NTO/vgUW6Tj/IDjyDoRVVyZP6pnB75QCt59y814o6
IJfqbk5DXHnYXjJurHFhwv0RhaPo7jjv06Y1D0GXjACQeg6c5NpivcLlMHezOTyT
d2UjceLOtvPkLlaV/KraQKnolRSvJFsyHMtR44+mTbvBG0SECy5nTSsuIXPxuepp
CPLieDY9slZfLoP7ql2dcncl3EVFkYVfd42vjBaLrUAAcVzNhNc1
-----END CERTIFICATE-----
Generated at Thu May 1 12:19:15 2025 by rpki-client