Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/8ZpplWrhbVda_aSYHx2pbbAdBWI.roa
File: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (raw, json)
Hash identifier: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=
Subject key identifier: F1:9A:69:95:6A:E1:6D:57:5A:FD:A4:98:1F:1D:A9:6D:B0:1D:05:62
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 0196425CA6C8D59D38DFB543F254082FA45F
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/8ZpplWrhbVda_aSYHx2pbbAdBWI.roa
Signing time: Thu 17 Apr 2025 06:08:10 +0000
ROA not before: Thu 17 Apr 2025 06:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50161
IP address blocks: 91.222.168.0/22 maxlen: 22
195.211.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:5c:a6:c8:d5:9d:38:df:b5:43:f2:54:08:2f:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Apr 17 06:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19a69956ae16d575afda4981f1da96db01d0562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:ee:56:be:59:75:82:7e:e0:66:10:0a:12:
dd:9c:cc:6a:47:83:3e:a1:5c:73:64:82:66:e3:b7:
d3:84:be:da:fa:bd:8a:47:a5:bf:c9:e3:b7:d7:f2:
78:9d:24:75:e9:8a:8c:74:13:ea:5e:40:89:f7:bc:
2d:91:5a:a0:32:a8:75:5e:8f:20:b5:9c:2c:d1:fe:
50:ae:7c:f9:09:c2:a8:8a:5f:27:02:2b:2e:06:1c:
4f:1f:2b:f9:55:1a:48:a4:50:44:a3:df:1e:6a:b2:
17:3c:83:c1:0b:94:93:08:ca:cd:5d:cc:48:c0:ea:
a8:b3:46:85:95:58:9f:64:9b:60:84:e0:07:bf:47:
e7:02:b5:4b:5e:a5:f4:55:f0:4a:4f:22:36:7b:c1:
61:77:57:34:59:fb:62:46:e6:56:69:31:72:59:91:
58:b0:42:08:e3:2c:1c:e6:94:67:a1:4c:fd:e0:21:
f9:e3:69:dd:08:c0:d9:bc:f8:30:64:7b:6b:24:b0:
05:14:1a:ec:6a:bc:2e:af:06:4a:83:09:f2:65:04:
e2:39:96:8c:af:f8:f8:7d:61:9f:6c:e3:27:1e:0c:
ea:88:2e:55:e6:10:8b:49:0a:38:0d:e4:8c:c5:10:
84:08:69:f8:25:50:1b:97:93:ec:03:f9:fb:24:9b:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:69:95:6A:E1:6D:57:5A:FD:A4:98:1F:1D:A9:6D:B0:1D:05:62
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/8ZpplWrhbVda_aSYHx2pbbAdBWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.168.0/22
195.211.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:40:33:d4:1d:4c:f3:74:5a:99:62:bf:c2:53:1e:db:ac:0c:
46:44:00:32:96:05:0d:18:c1:95:79:08:5f:b2:ca:ff:21:c1:
bf:c8:55:30:45:18:a0:cb:5d:1e:98:ea:d5:c7:db:97:c5:33:
7d:97:df:7a:d7:8e:f9:d1:ba:44:c0:c0:9c:df:8c:44:ab:62:
3c:e1:86:00:3b:2a:79:b2:cf:b4:12:74:8d:bd:b2:77:91:e5:
42:e6:20:05:76:17:55:a3:b9:58:4b:4b:9a:cc:b2:49:d6:37:
99:ed:d8:d6:8a:17:30:83:b7:73:ef:7b:f2:95:19:4c:97:09:
cd:cd:59:2c:67:a9:c4:ef:bc:8a:70:1c:f1:77:61:bc:2a:ec:
33:80:2f:19:d6:f8:ad:0e:f4:52:54:ad:76:5f:5f:dc:0d:f2:
b5:3a:34:8d:77:3e:a5:22:a3:9d:30:26:b0:f7:f8:d8:86:ab:
ab:6a:a6:29:4b:cd:bc:fd:5c:d6:83:b7:92:55:9c:08:6e:b3:
ec:18:43:52:80:a0:b9:64:60:a8:7b:12:16:ac:d2:80:00:3c:
92:ef:53:70:6b:da:0d:65:2b:cd:fb:59:4c:1b:3a:ad:7b:04:
7a:6e:09:8e:aa:57:28:b6:7f:c9:b7:65:4a:73:3c:c5:3c:fc:
76:99:be:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZCXKbI1Z0437VD8lQIL6RfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTQzODllOWY0ZDVjYzhjNDg2ZDY4MjJiZWYxZjQ0ZWY3
Y2VkNDIwHhcNMjUwNDE3MDYwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTlhNjk5NTZhZTE2ZDU3NWFmZGE0OTgxZjFkYTk2ZGIwMWQwNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1TuVr5ZdYJ+4GYQChLdnMxqR4M+
oVxzZIJm47fThL7a+r2KR6W/yeO31/J4nSR16YqMdBPqXkCJ97wtkVqgMqh1Xo8g
tZws0f5Qrnz5CcKoil8nAisuBhxPHyv5VRpIpFBEo98earIXPIPBC5STCMrNXcxI
wOqos0aFlVifZJtghOAHv0fnArVLXqX0VfBKTyI2e8Fhd1c0WftiRuZWaTFyWZFY
sEII4ywc5pRnoUz94CH542ndCMDZvPgwZHtrJLAFFBrsarwurwZKgwnyZQTiOZaM
r/j4fWGfbOMnHgzqiC5V5hCLSQo4DeSMxRCECGn4JVAbl5PsA/n7JJvv8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPGaaZVq4W1XWv2kmB8dqW2wHQViMB8GA1UdIwQY
MBaAFImkOJ6fTVzIxIbWgivvH0TvfO1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEt
MjEzNDg0ODRmZjFiLzEvOFpwcGxXcmhiVmRhX2FTWUh4MnBiYkFkQldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEtMjEzNDg0ODRmZjFi
LzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW96oAwQC
w9PwMA0GCSqGSIb3DQEBCwUAA4IBAQAMQDPUHUzzdFqZYr/CUx7brAxGRAAylgUN
GMGVeQhfssr/IcG/yFUwRRigy10emOrVx9uXxTN9l99614750bpEwMCc34xEq2I8
4YYAOyp5ss+0EnSNvbJ3keVC5iAFdhdVo7lYS0uazLJJ1jeZ7djWihcwg7dz73vy
lRlMlwnNzVksZ6nE77yKcBzxd2G8KuwzgC8Z1vitDvRSVK12X1/cDfK1OjSNdz6l
IqOdMCaw9/jYhquraqYpS828/VzWg7eSVZwIbrPsGENSgKC5ZGCoexIWrNKAADyS
71Nwa9oNZSvN+1lMGzqtewR6bgmOqlcotn/Jt2VKczzFPPx2mb42
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:11:38 2025 by rpki-client