Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zHtc1WrNbA3cqqfGA8uzLW_SkMU.roa
File: zHtc1WrNbA3cqqfGA8uzLW_SkMU.roa (raw, json)
Hash identifier: SIUBg89yU9A6AtFxlnlTAIZaoT1e1jIXd7ZnwoqJl5c=
Subject key identifier: CC:7B:5C:D5:6A:CD:6C:0D:DC:AA:A7:C6:03:CB:B3:2D:6F:D2:90:C5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFD357168CD243394082ACB80F2CF
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zHtc1WrNbA3cqqfGA8uzLW_SkMU.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216101
IP address blocks: 2a0c:9a40:9b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fd:35:71:68:cd:24:33:94:08:2a:cb:80:f2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc7b5cd56acd6c0ddcaaa7c603cbb32d6fd290c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:a5:08:8c:48:b6:7e:52:32:68:4f:3a:5f:
a0:2b:5d:67:c9:da:16:10:e7:56:3e:93:32:e8:cf:
dd:e6:a8:0a:dd:2c:c1:33:02:05:aa:77:f5:aa:5c:
7e:5a:6b:af:66:aa:58:71:15:f5:7a:b3:fa:0c:fe:
74:cc:0c:9c:22:7b:97:e3:1c:7f:eb:96:05:21:25:
bd:94:fb:6f:a4:2b:6a:f1:d0:4a:8f:16:a5:00:b1:
ea:52:21:2a:bf:a1:a5:ce:31:4d:e4:2a:70:51:14:
78:ea:d0:1c:20:d1:65:b1:b8:fc:ca:38:7f:db:5f:
83:b0:e8:ad:d2:19:b9:f2:52:5e:87:c3:3d:6f:ac:
0a:c8:1f:81:6f:dc:c7:08:5c:7b:5a:e9:a9:3b:e9:
0d:c5:1c:c2:9d:90:0d:05:70:ef:71:81:d8:c2:07:
0a:77:e9:b2:26:2e:1c:79:c3:30:44:ab:67:58:36:
b4:db:b1:38:29:63:d6:fd:9f:41:e2:6e:47:6d:e8:
ee:21:af:fc:f5:45:55:cd:d9:f1:01:6b:3c:cf:d7:
95:2f:2b:03:4a:1a:a3:6a:e5:3a:ba:e7:19:5b:45:
51:96:2a:48:97:37:fc:42:c2:25:0a:21:10:d0:7d:
ac:1d:5f:95:49:d9:1a:c5:0a:59:d4:d7:1c:65:8d:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:5C:D5:6A:CD:6C:0D:DC:AA:A7:C6:03:CB:B3:2D:6F:D2:90:C5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zHtc1WrNbA3cqqfGA8uzLW_SkMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9b00::/40
Signature Algorithm: sha256WithRSAEncryption
61:de:8b:97:e8:63:5f:4d:ad:0f:13:03:0f:92:02:c2:3c:d4:
6d:f3:73:8f:12:04:fb:58:35:06:2d:8c:3f:04:fd:34:46:e6:
7c:39:87:aa:9c:e3:56:94:ee:5c:58:82:ca:1f:2f:ab:50:be:
df:73:2c:57:df:41:0f:5a:cd:64:c3:ce:c9:5a:7a:2a:0b:5e:
b0:69:72:97:c0:82:92:55:5d:28:27:3e:df:44:4a:0e:e2:2e:
b3:1b:ce:95:f9:37:b3:dd:d5:0f:ec:72:5a:95:75:06:5f:bc:
04:46:d8:df:05:ff:04:f5:55:85:d8:a0:0a:50:e6:bd:1c:4b:
d3:5b:14:d1:89:bd:e7:58:f6:d7:c0:63:dc:4c:2d:c0:33:da:
7c:34:71:d3:30:11:95:78:69:b8:33:ce:7a:19:d1:f1:78:d5:
01:ef:7c:ca:09:34:31:04:1b:55:f9:d0:26:64:60:8e:2a:ff:
62:45:e8:0a:4a:8f:06:29:72:a2:1a:d6:b4:b4:ed:0f:0b:13:
0a:31:bd:f3:cd:e4:3c:48:73:b8:9d:a6:30:41:00:1e:3d:41:
69:12:13:a2:d6:65:63:2c:5a:d6:82:24:a6:af:1b:bb:43:5a:
04:dc:ee:c0:a4:dc:23:19:2d:cd:06:f2:bf:c7:71:aa:57:61:
2a:25:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:36 2025 by rpki-client