Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa
File: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (raw, json)
Hash identifier: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=
Subject key identifier: 53:3E:00:E2:DE:8A:AB:C0:3A:8B:0A:D3:3F:43:5B:72:41:9E:12:B3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0195DD2D522BEAC2DF30685A2A8FFB958B4C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa
Signing time: Fri 28 Mar 2025 14:34:49 +0000
ROA not before: Fri 28 Mar 2025 14:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211038
IP address blocks: 2a14:67c1:b300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:2d:52:2b:ea:c2:df:30:68:5a:2a:8f:fb:95:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 28 14:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533e00e2de8aabc03a8b0ad33f435b72419e12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:ec:4e:b4:f6:e9:0c:3a:32:9e:21:02:41:
b4:0b:14:01:4e:92:0e:c9:41:90:ad:18:ac:95:d9:
b3:9e:2d:94:91:bb:3b:b1:ad:ea:28:cd:ea:54:c5:
e2:df:8c:90:91:d8:69:1d:c5:53:a8:39:e0:bf:0c:
15:b0:27:ba:5a:e4:5c:f7:fe:9e:e8:97:c6:3e:36:
4c:e4:f8:d0:71:11:93:80:52:8e:6e:76:19:c1:b9:
96:a5:a7:69:8e:f7:97:44:63:bd:d6:9f:5b:93:a4:
cc:73:d6:d3:d7:c4:05:bb:a5:a6:95:93:31:bd:e7:
67:1a:81:63:86:5d:4f:f6:eb:6b:23:3b:76:69:fd:
5b:8c:87:8e:5d:a3:d9:1b:2e:d0:18:b2:94:6d:78:
59:3d:a5:e1:f9:9f:4f:cd:d8:a8:22:66:31:aa:8a:
9b:32:41:ef:0c:1e:d3:4e:1e:9d:d8:b8:b5:f5:e9:
73:1c:a0:fd:7d:8d:86:35:6d:69:03:01:67:d9:0f:
91:84:f5:7a:27:2b:cd:15:e5:10:32:36:ce:44:b7:
87:d2:73:a4:9f:5b:23:50:9d:b9:47:88:24:13:5e:
fc:b8:92:4f:af:8f:b4:aa:93:02:eb:9d:1b:69:dd:
25:fb:63:0e:12:35:8c:bd:74:b4:43:fc:a1:72:98:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:00:E2:DE:8A:AB:C0:3A:8B:0A:D3:3F:43:5B:72:41:9E:12:B3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b300::/40
Signature Algorithm: sha256WithRSAEncryption
a0:60:c1:46:d8:de:51:45:fd:bd:8c:e5:77:55:64:ec:63:d7:
ea:0c:81:9d:bc:41:c4:12:17:6c:f8:6c:b7:56:a1:6a:c1:ff:
a1:6a:34:fc:61:90:fb:3d:b1:e6:d0:d2:74:a5:f0:a1:83:f2:
10:f9:67:43:1e:f0:37:39:ee:4d:b8:54:81:ce:aa:85:02:37:
f0:bf:63:21:ac:60:db:29:34:13:c7:ca:dc:ca:22:2b:a9:e6:
56:be:55:75:c9:c7:a5:58:0d:69:42:5d:6e:5b:58:cc:24:3e:
76:d0:de:c1:0f:f1:1d:97:1e:8c:36:7c:2c:f0:dc:80:31:4a:
68:8d:33:6d:33:f7:b6:67:78:13:8b:a8:3a:0c:2f:32:f8:67:
97:cb:85:45:f0:8f:76:63:a2:69:97:fa:04:2d:fa:0d:b6:c9:
87:7f:a8:c9:3c:a1:3d:08:17:e0:9d:d2:91:ee:a3:fd:e9:b7:
20:fd:70:db:2f:cd:0c:e1:e7:0c:72:b1:b4:6e:22:7d:3d:8a:
99:7a:25:e2:ae:bf:57:78:06:ea:17:e3:74:e5:39:06:65:0d:
d1:0b:7e:ba:5e:c9:03:5c:49:38:c7:74:ff:b0:93:7a:cc:47:
e1:f9:7b:93:53:7e:57:d9:97:d4:24:3a:28:17:11:81:2f:bd:
f1:cf:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:47:02 2025 by rpki-client