Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa
File: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (raw, json)
Hash identifier: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=
Subject key identifier: 67:90:F4:35:50:B0:1C:96:CE:76:A3:9F:CF:B6:11:52:40:EF:C2:83
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 019421443CB31AD2890881433347EA45AFA9
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198024
IP address blocks: 2a00:89e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3c:b3:1a:d2:89:08:81:43:33:47:ea:45:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6790f43550b01c96ce76a39fcfb6115240efc283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:52:5d:4d:6f:fc:af:63:d6:e3:78:f0:c1:
d3:00:68:a4:5e:d7:0d:17:69:52:ca:4e:87:37:76:
7e:e7:e2:16:47:a6:a4:b9:20:79:99:11:85:17:9a:
45:3f:94:cc:ff:38:86:6e:a4:60:13:13:ec:04:0a:
22:d0:ef:4f:8b:da:e6:a2:33:d0:0d:2a:67:a9:fb:
7f:35:bd:ae:d0:80:5b:75:82:60:db:dd:38:b8:f0:
87:4b:1d:d6:30:25:3c:16:d6:4d:47:0c:76:41:41:
42:b7:7c:d8:4e:90:1e:d3:97:ec:9b:e1:1e:a5:e6:
75:ee:99:c2:9d:80:7d:9c:71:00:f9:8b:9b:8c:03:
bf:d2:23:d0:ca:8e:de:3f:d0:64:9e:f3:cd:f2:1b:
fd:1c:5a:7b:32:db:c2:13:ee:6e:71:23:5c:c3:b3:
c6:d5:31:bf:19:25:5b:09:76:57:21:c7:f2:60:c5:
b9:82:f0:5c:19:38:7f:a4:3d:0f:3f:ec:c4:fa:2b:
c1:c3:0e:e6:20:b9:e8:72:9f:71:31:31:43:31:c0:
6d:4c:1c:d7:f1:15:29:51:dd:20:fc:b6:7b:2b:33:
6e:40:5b:6b:e0:e9:dc:3e:df:e1:7f:46:51:4e:c6:
17:cc:15:52:d6:fc:4d:40:ae:af:73:73:88:72:b3:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:F4:35:50:B0:1C:96:CE:76:A3:9F:CF:B6:11:52:40:EF:C2:83
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:89e0::/32
Signature Algorithm: sha256WithRSAEncryption
97:ae:9a:d5:58:80:0b:51:45:0c:71:0a:ed:e0:57:18:1a:e8:
49:38:55:79:6c:31:cd:84:32:d5:a1:5d:c0:6b:82:9c:48:d3:
09:d8:ee:eb:e4:71:dd:11:a0:8f:df:1f:b9:21:34:72:71:7c:
a8:0b:b0:18:97:20:7d:3f:dd:42:b0:d2:5a:90:eb:a0:21:29:
43:ec:ea:0c:12:39:0b:1f:30:11:9a:dc:c0:94:67:ea:64:0a:
69:18:41:fe:9f:a0:53:cd:13:22:69:bd:2d:c0:d0:26:3d:b5:
6b:2a:61:97:30:24:79:bf:2a:cf:b1:76:5f:cd:73:f2:02:c5:
dd:d8:af:b9:4b:ca:3e:95:19:cf:05:e1:21:61:b4:b6:2b:66:
60:6e:7b:e1:7a:13:83:b4:6c:e8:7a:56:c5:f9:49:d6:a1:86:
d8:1e:de:ca:25:8c:03:4c:fe:9e:7d:34:c1:fd:1d:04:b3:c9:
e7:99:91:d0:09:49:9b:19:57:35:b2:60:03:15:35:4a:10:2f:
8c:2c:cc:3c:17:aa:4c:02:30:97:65:3e:5a:d4:3a:39:fb:10:
79:d0:21:78:ba:27:84:ba:84:c9:72:94:36:39:da:fa:66:ca:
52:b8:30:bc:37:f2:71:8a:7d:6f:c8:d8:b7:07:e3:2d:11:e3:
6f:6c:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:38:49 2025 by rpki-client