Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zh_mYis3OBU_E0m1Uupg0gtvILs.roa
File: zh_mYis3OBU_E0m1Uupg0gtvILs.roa (raw, json)
Hash identifier: ZXQ/bJNIyXO7qy0w+LKeoziHj8Mqkops5vJ4JY/rHg0=
Subject key identifier: CE:1F:E6:62:2B:37:38:15:3F:13:49:B5:52:EA:60:D2:0B:6F:20:BB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDA5CDBFFCA9A97FDB65D910AEF17
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zh_mYis3OBU_E0m1Uupg0gtvILs.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201335
IP address blocks: 2a0c:9a40:8ab0::/44 maxlen: 48
2a0c:9a40:9900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:da:5c:db:ff:ca:9a:97:fd:b6:5d:91:0a:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1fe6622b3738153f1349b552ea60d20b6f20bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:57:9c:ff:3f:ff:2d:99:46:2a:56:9c:80:
69:93:6b:3e:85:cf:11:fa:66:20:47:af:61:40:9c:
ac:ba:57:22:13:aa:f6:5f:47:d2:53:8d:05:22:a1:
89:88:50:e6:1d:78:7c:d2:96:a9:7d:0d:64:ad:51:
37:28:65:0d:ee:6b:99:35:db:e5:10:bb:1c:08:3d:
56:7a:ad:f7:18:78:d8:3c:90:e3:d4:d6:04:86:cc:
bf:96:af:81:64:f2:06:c6:be:aa:dc:49:91:6a:1d:
2e:07:b6:68:9b:ae:cd:6e:b3:1e:00:68:0e:9e:48:
a8:56:c9:2a:70:ab:d4:5a:07:5e:e0:a2:05:39:d0:
2e:9c:51:7b:13:c3:4c:17:f9:65:10:a9:03:e0:cd:
38:6e:a8:e5:db:78:5a:f0:94:8d:ee:47:3b:5e:7b:
c7:2a:f6:6c:43:1b:00:55:30:57:31:b1:aa:4e:2e:
09:1c:2d:5c:5e:7b:e5:c9:3d:38:8d:79:15:58:c9:
05:9c:57:a3:1b:3c:b8:2a:93:46:eb:1a:d5:c0:5e:
d0:fe:ab:30:0e:09:a3:41:9f:39:73:7d:b6:72:14:
52:0d:4c:76:f0:c4:81:00:6a:e2:dc:58:14:a3:1a:
6a:5a:aa:6f:50:e7:56:ff:e3:0d:ed:ea:cf:34:2e:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1F:E6:62:2B:37:38:15:3F:13:49:B5:52:EA:60:D2:0B:6F:20:BB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zh_mYis3OBU_E0m1Uupg0gtvILs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ab0::/44
2a0c:9a40:9900::/40
Signature Algorithm: sha256WithRSAEncryption
09:60:11:79:d9:b4:c2:33:0d:a5:29:b8:65:9f:2d:ff:66:2f:
8c:51:90:c3:1e:63:51:e7:bd:2a:81:97:b2:e2:a1:27:7c:8a:
7a:7c:31:f9:55:e3:ee:3d:0c:55:ca:4e:d7:de:cf:ed:50:6b:
3e:03:95:dd:a1:ec:ec:54:77:9c:0f:d2:e1:89:2f:d5:55:3a:
df:ef:a3:e6:71:b9:3b:cb:4c:e6:c7:af:fb:ce:b1:7f:15:e5:
1d:5d:a0:a5:f8:9e:1b:56:67:2b:2a:f2:b3:d7:9d:21:1b:4e:
32:48:0a:92:4f:8f:7a:27:20:01:06:51:11:fd:29:55:97:e4:
a3:ed:2e:eb:a2:b4:1d:ab:9f:d4:72:d5:45:45:6e:e5:5f:59:
6b:1b:7c:b0:2c:08:b1:f3:c5:ad:49:c6:2c:2b:09:fd:14:59:
9e:30:4d:b3:a7:fa:8a:a4:40:28:04:c4:c5:02:b9:cd:39:bb:
65:ea:5e:c7:59:16:5f:49:58:35:86:52:a3:44:d1:c1:af:d1:
7e:9d:b3:4e:9e:0c:f7:de:f6:41:82:54:83:18:0b:54:ee:a3:
88:fc:75:a6:cd:82:d9:a2:7b:1f:c9:ec:95:14:83:58:97:12:
d5:e9:b1:c5:80:39:be:f9:a4:02:c8:45:a9:61:65:d9:de:1a:
b8:e3:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:48 2025 by rpki-client