Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa
File: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (raw, json)
Hash identifier: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=
Subject key identifier: 66:D2:30:9A:E2:6A:17:46:49:DA:32:42:DA:3D:92:EB:C3:F1:0F:A8
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FA322323C991299DD2F887D6B912
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa
Signing time: Thu 02 Jan 2025 13:49:10 +0000
ROA not before: Thu 02 Jan 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 2a10:9681::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fa:32:23:23:c9:91:29:9d:d2:f8:87:d6:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d2309ae26a174649da3242da3d92ebc3f10fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:80:74:25:ac:48:2f:5d:7c:b4:cc:44:47:
53:50:1c:e1:3c:7a:79:fd:04:17:49:05:cc:d8:4d:
a7:52:fe:5d:5d:c1:25:01:48:1a:33:45:70:d9:63:
37:dc:15:e7:2c:f6:6c:fa:c2:4b:1b:2c:32:ec:3b:
56:b1:3c:58:33:47:65:0b:54:98:a3:7c:f8:5a:49:
a7:7d:38:0c:74:37:4c:1e:b5:61:58:52:32:84:84:
fb:8e:32:18:e2:08:a5:3c:b6:a8:59:3f:47:43:fc:
4d:a6:9f:22:59:18:ba:3e:2c:4d:1d:a2:55:cf:f0:
2d:34:7a:42:4b:dd:af:05:83:b2:d8:91:2c:54:9e:
e7:61:13:1f:0c:57:a4:56:c2:cd:e0:b7:05:a1:d1:
31:39:12:1f:6f:86:7c:cb:4c:0d:cc:f0:98:f4:f0:
1c:22:3f:ce:40:e1:32:b4:24:46:01:b2:74:96:e2:
9e:c3:f1:f7:f2:79:cf:29:8e:c8:36:6d:e2:a6:87:
13:c3:3d:98:ff:08:f0:3a:d0:ce:8c:cb:a7:2c:cd:
e8:7e:e9:e6:4f:b6:eb:80:c9:2e:09:cd:7e:ce:65:
5b:08:e9:37:1b:c5:0d:56:5f:e6:db:d2:c7:93:d7:
0e:36:63:e2:c8:3f:b3:fc:8c:96:1a:4e:bd:d9:72:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:30:9A:E2:6A:17:46:49:DA:32:42:DA:3D:92:EB:C3:F1:0F:A8
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9681::/32
Signature Algorithm: sha256WithRSAEncryption
67:b0:05:f0:dc:7f:23:7c:d8:45:2d:a5:40:6a:ff:7f:cd:42:
5b:9c:b0:70:f4:4d:f2:d4:8c:17:0f:33:4d:d4:c0:81:d8:54:
b4:45:78:7b:c1:92:9a:2b:99:1a:0f:f0:58:c2:f9:a1:8a:15:
e4:84:e7:64:e5:03:3c:e4:d8:0e:b3:66:6a:c3:c2:cb:59:19:
7b:a1:6e:88:c4:11:cd:00:18:2d:c9:38:bf:fe:8a:15:44:ff:
1a:f3:26:6b:be:cc:d7:0f:3c:09:f6:8e:1c:a2:22:9c:9e:1f:
ef:fb:3a:3d:63:27:8c:c5:5c:fa:c4:39:96:b7:bb:61:63:07:
f9:9e:60:c9:ba:e3:b0:16:84:52:89:66:96:03:9b:5c:b7:7c:
4d:7a:79:b6:9d:42:65:5c:bd:e1:7e:17:c5:85:07:3e:04:3b:
37:5e:25:44:0d:9f:96:7b:c7:99:e9:3c:3c:66:96:36:c8:1c:
3a:3b:d4:21:a6:d6:85:3f:e2:59:69:61:6d:cc:b1:61:34:9a:
c6:dd:fb:ce:8f:36:7d:87:40:ad:3a:13:62:cc:5d:4b:11:32:
f4:4d:75:7c:ea:7b:bf:ea:c2:62:0c:b8:cb:f4:9f:68:b5:4a:
9d:88:40:47:17:4c:0e:cc:bb:6e:69:ec:1a:7f:ea:7f:2f:8f:
19:e4:69:0c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnRvoyIyPJkSmd0viH1rkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh
MTQ3YmMwHhcNMjUwMTAyMTM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmQyMzA5YWUyNmExNzQ2NDlkYTMyNDJkYTNkOTJlYmMzZjEwZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20iAdCWsSC9dfLTMREdTUBzhPHp5
/QQXSQXM2E2nUv5dXcElAUgaM0Vw2WM33BXnLPZs+sJLGywy7DtWsTxYM0dlC1SY
o3z4WkmnfTgMdDdMHrVhWFIyhIT7jjIY4gilPLaoWT9HQ/xNpp8iWRi6PixNHaJV
z/AtNHpCS92vBYOy2JEsVJ7nYRMfDFekVsLN4LcFodExORIfb4Z8y0wNzPCY9PAc
Ij/OQOEytCRGAbJ0luKew/H38nnPKY7INm3ipocTwz2Y/wjwOtDOjMunLM3ofunm
T7brgMkuCc1+zmVbCOk3G8UNVl/m29LHk9cONmPiyD+z/IyWGk692XLKOwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGbSMJriahdGSdoyQto9kuvD8Q+oMB8GA1UdIwQY
MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt
ZDg3MjEzNzU2NDRhLzEvWnRJd211SnFGMFpKMmpKQzJqMlM2OFB4RDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh
LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhCWgTAN
BgkqhkiG9w0BAQsFAAOCAQEAZ7AF8Nx/I3zYRS2lQGr/f81CW5ywcPRN8tSMFw8z
TdTAgdhUtEV4e8GSmiuZGg/wWML5oYoV5ITnZOUDPOTYDrNmasPCy1kZe6FuiMQR
zQAYLck4v/6KFUT/GvMma77M1w88CfaOHKIinJ4f7/s6PWMnjMVc+sQ5lre7YWMH
+Z5gybrjsBaEUolmlgObXLd8TXp5tp1CZVy94X4XxYUHPgQ7N14lRA2flnvHmek8
PGaWNsgcOjvUIabWhT/iWWlhbcyxYTSaxt37zo82fYdArToTYsxdSxEy9E11fOp7
v+rCYgy4y/SfaLVKnYhARxdMDsy7bmnsGn/qfy+PGeRpDA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:17 2025 by rpki-client