Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ZKIQ0gO0k0HulusytHqIVVfsl6g.roa
File: ZKIQ0gO0k0HulusytHqIVVfsl6g.roa (raw, json)
Hash identifier: OGX/2AITBSzFYbp6p/kOSU9cFnFuNH1/qnCYIq2S7Ig=
Subject key identifier: 64:A2:10:D2:03:B4:93:41:EE:96:EB:32:B4:7A:88:55:57:EC:97:A8
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197A5EBC234E2993BA3382A19C3968AF8B4
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ZKIQ0gO0k0HulusytHqIVVfsl6g.roa
Signing time: Wed 25 Jun 2025 07:09:40 +0000
ROA not before: Wed 25 Jun 2025 07:09:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:eb:c2:34:e2:99:3b:a3:38:2a:19:c3:96:8a:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 25 07:09:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a210d203b49341ee96eb32b47a885557ec97a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:bf:59:6c:5c:a9:4b:5e:b1:34:51:65:7f:
47:a5:83:af:5b:59:39:95:47:cc:a8:76:aa:f7:05:
79:b0:b2:c0:1c:d5:9a:84:6e:de:c6:f6:8c:4a:96:
aa:70:af:af:4a:bd:99:37:33:db:5f:bf:e1:05:24:
39:f4:d9:dc:96:a3:90:d3:56:7b:2c:d1:0a:40:42:
65:b3:fe:0f:5b:fe:13:1c:de:9c:db:26:ec:99:c9:
5f:35:5c:3f:2f:05:2f:86:b4:c4:a1:fa:70:7b:dd:
0f:b9:86:0e:f7:2c:b4:38:2b:03:50:24:d3:4a:f7:
32:16:e8:0f:22:8b:06:2f:6c:48:27:44:db:96:c5:
bb:ce:6e:53:f2:5a:de:d1:0c:2a:a5:29:1f:87:e6:
30:36:f0:dc:46:30:a7:4b:cf:9b:2d:d5:af:97:6c:
b6:52:42:33:b6:46:09:5e:50:fa:48:cf:c4:29:78:
fe:43:b4:94:e3:cf:6a:8d:a6:8d:c4:88:21:3a:de:
97:2d:0c:73:8e:64:be:8f:df:9c:f8:ff:50:0a:ec:
a2:d6:85:be:15:7f:05:55:74:5e:38:60:45:a7:73:
f1:ad:8b:16:eb:e4:81:1f:eb:04:55:3c:31:12:4f:
90:8e:f2:07:f7:2d:7d:51:c8:e8:ae:e7:11:dd:cf:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:10:D2:03:B4:93:41:EE:96:EB:32:B4:7A:88:55:57:EC:97:A8
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/ZKIQ0gO0k0HulusytHqIVVfsl6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/21
46.213.128.0/21
Signature Algorithm: sha256WithRSAEncryption
82:ed:a2:6a:37:f1:26:74:82:67:cb:d4:38:2e:fc:0f:10:90:
f2:55:66:09:26:51:7a:5a:f1:71:e7:7a:6c:5a:e3:03:f0:8c:
20:a4:49:95:3b:e7:f6:8d:89:e5:d7:94:a1:ec:c2:36:85:72:
2a:0d:e7:4b:91:1f:8a:f3:e0:34:b0:5a:8b:9a:f8:14:ed:c2:
37:f2:6a:1d:fd:1f:11:45:7a:37:a3:7d:c0:97:05:cd:35:c0:
79:fc:e9:5b:43:5e:b1:06:93:ee:e7:8c:5a:58:73:aa:5a:01:
af:d1:1e:98:17:25:4e:ab:2f:cb:9a:39:17:86:ec:86:0d:fd:
44:a4:92:ce:64:06:2f:60:43:0d:47:bf:c0:95:3d:cf:69:0c:
15:54:80:ba:a6:65:d1:be:55:82:db:3f:3e:e8:6a:d3:e6:a9:
eb:25:e4:3c:96:c8:c7:c8:c4:76:85:17:c5:4a:ca:56:58:9a:
21:6b:b3:85:b0:aa:91:5d:b7:47:40:13:33:43:d7:0f:c4:28:
5d:34:c6:4a:58:49:89:ed:1e:a0:fe:9e:b3:08:57:08:a6:92:
bb:ff:9b:01:44:dd:16:19:70:23:71:8d:cb:64:6b:20:a9:da:
4a:38:5b:8b:52:a3:6d:72:24:5f:61:f3:41:10:1c:c2:5c:1b:
c3:da:4a:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZel68I04pk7ozgqGcOWivi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjUwNjI1MDcwOTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGEyMTBkMjAzYjQ5MzQxZWU5NmViMzJiNDdhODg1NTU3ZWM5N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIO/WWxcqUtesTRRZX9HpYOvW1k5
lUfMqHaq9wV5sLLAHNWahG7exvaMSpaqcK+vSr2ZNzPbX7/hBSQ59NnclqOQ01Z7
LNEKQEJls/4PW/4THN6c2ybsmclfNVw/LwUvhrTEofpwe90PuYYO9yy0OCsDUCTT
SvcyFugPIosGL2xIJ0TblsW7zm5T8lre0QwqpSkfh+YwNvDcRjCnS8+bLdWvl2y2
UkIztkYJXlD6SM/EKXj+Q7SU489qjaaNxIghOt6XLQxzjmS+j9+c+P9QCuyi1oW+
FX8FVXReOGBFp3PxrYsW6+SBH+sEVTwxEk+QjvIH9y19UcjorucR3c8SlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGSiENIDtJNB7pbrMrR6iFVX7JeoMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvWktJUTBnTzBrMEh1bHVzeXRIcUlWVmZzbDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLtUAAwQD
LtWAMA0GCSqGSIb3DQEBCwUAA4IBAQCC7aJqN/EmdIJny9Q4LvwPEJDyVWYJJlF6
WvFx53psWuMD8IwgpEmVO+f2jYnl15Sh7MI2hXIqDedLkR+K8+A0sFqLmvgU7cI3
8mod/R8RRXo3o33AlwXNNcB5/OlbQ16xBpPu54xaWHOqWgGv0R6YFyVOqy/LmjkX
huyGDf1EpJLOZAYvYEMNR7/AlT3PaQwVVIC6pmXRvlWC2z8+6GrT5qnrJeQ8lsjH
yMR2hRfFSspWWJoha7OFsKqRXbdHQBMzQ9cPxChdNMZKWEmJ7R6g/p6zCFcIppK7
/5sBRN0WGXAjcY3LZGsgqdpKOFuLUqNtciRfYfNBEBzCXBvD2kp2
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:44 2025 by rpki-client