Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa
File: DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa (raw, json)
Hash identifier: p48aM9J6UtUtpZTM/841RmdWu2zT9B6GH0dk1pfPpo4=
Subject key identifier: 0F:30:81:D2:A2:7C:F0:33:03:B2:2D:D0:6B:0F:EC:6F:D4:F8:01:B3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0196B9A092F2147432A205754D912F891D37
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa
Signing time: Sat 10 May 2025 09:57:10 +0000
ROA not before: Sat 10 May 2025 09:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198025
IP address blocks: 2a14:67c1:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a0:92:f2:14:74:32:a2:05:75:4d:91:2f:89:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 10 09:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3081d2a27cf03303b22dd06b0fec6fd4f801b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:72:79:60:4d:f9:b3:fa:ec:b6:2b:29:23:
ee:f3:8c:70:b3:da:ea:80:9f:ad:7a:65:e9:62:76:
3c:78:92:8a:08:af:2d:48:e4:f8:be:1e:8e:fb:ca:
5f:c1:16:f4:9d:9c:83:9e:70:e8:1e:7a:c1:8a:fb:
28:09:4e:03:a2:4e:46:83:6e:13:df:8f:3a:97:a8:
84:db:17:ee:ed:e9:d5:b0:7a:43:4b:ae:5b:ee:16:
71:58:7d:fc:7e:d5:1c:e9:ef:d2:26:5c:2c:85:56:
82:5f:41:7d:19:ce:fd:29:88:53:e0:71:7e:92:8e:
4b:2d:51:b6:cb:e2:ff:d8:c0:08:6d:66:38:f6:75:
80:c6:3c:59:1f:07:49:86:2e:db:1c:23:8a:d5:84:
04:f3:2e:96:17:b0:d3:35:8e:e6:d6:3d:a9:99:24:
7e:88:ac:3b:b7:53:f5:74:78:d2:e9:0d:4e:ea:31:
b7:5d:e3:ba:4a:a0:53:05:b5:27:f7:07:5d:ed:66:
40:a3:0c:a7:b2:81:5f:46:90:4e:07:d7:e8:1c:f1:
4a:46:6d:68:90:e5:3e:9a:04:0f:c7:7d:03:13:46:
5c:e7:44:20:7d:9b:81:3e:70:af:2c:15:49:2b:04:
c0:cb:2d:8b:1c:2c:6b:1b:01:02:23:dd:c0:2f:d4:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:30:81:D2:A2:7C:F0:33:03:B2:2D:D0:6B:0F:EC:6F:D4:F8:01:B3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b000::/48
Signature Algorithm: sha256WithRSAEncryption
95:0f:35:16:52:58:79:ee:70:13:1d:cb:8e:97:d2:72:8b:20:
ad:92:26:7a:be:24:0a:e0:3c:98:48:10:57:7f:65:f7:a0:51:
9d:d7:aa:b7:34:99:aa:c6:02:ff:0f:38:3e:94:8b:b6:17:27:
c6:62:50:46:0b:43:95:73:36:d3:2b:a5:e1:36:cf:b0:97:e6:
32:bf:39:f6:e7:93:97:f2:a0:e5:c2:c3:e1:49:de:74:54:24:
2f:94:c4:a5:49:f7:c3:58:5a:af:d5:17:c2:2a:e5:93:36:08:
46:00:6b:d7:fc:97:a6:39:6b:73:e0:20:4e:a3:a8:d3:a8:4d:
b6:cd:ea:d8:a6:90:7a:c6:11:16:69:85:cf:d5:cd:ff:ce:81:
c2:93:f3:7e:f7:a3:69:e4:b5:ba:c8:ef:97:dc:6c:aa:1b:41:
f5:2c:e5:bf:af:d6:42:59:3d:87:3a:ad:cd:c9:12:24:31:d6:
41:38:97:11:d1:07:c3:3e:7b:e0:b4:26:87:24:68:46:88:ea:
77:3b:57:6e:e6:ec:39:09:c2:ff:08:59:a0:ee:28:a7:19:7b:
d2:61:ab:05:75:1c:02:40:b0:ed:eb:a0:be:f4:51:f3:c6:df:
93:05:38:7e:a8:ec:df:c8:4e:3e:ae:e5:93:c3:77:e1:54:61:
86:69:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:43:42 2025 by rpki-client