Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa
File: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (raw, json)
Hash identifier: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=
Subject key identifier: 67:92:83:1F:37:F9:DB:B5:35:A9:10:08:1F:08:1C:1D:A5:8B:77:C6
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019421445260FADC02E535A60AA1B6F2A847
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213052
IP address blocks: 2001:67c:10c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:52:60:fa:dc:02:e5:35:a6:0a:a1:b6:f2:a8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6792831f37f9dbb535a910081f081c1da58b77c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:c1:26:f2:41:39:e2:1b:b3:75:7e:5c:ec:
c0:7a:6a:16:c5:46:29:18:c4:79:fc:48:d2:9f:26:
58:10:3b:ad:d3:ce:53:54:21:52:54:69:17:83:3c:
30:52:29:46:4c:c7:0f:05:11:70:f4:ad:07:1d:fe:
8f:98:26:69:2e:a3:90:fd:f7:06:8d:d4:ef:24:41:
df:11:0b:d5:0f:ea:0a:e3:cf:03:55:a2:96:f1:cf:
c9:b3:95:95:68:a9:12:04:2b:e9:88:41:5d:77:5a:
04:fb:c4:62:93:9e:75:2d:e4:ce:0e:be:37:cf:92:
1d:22:e0:ec:83:7e:48:cf:d5:e8:5c:2e:b0:ec:cc:
01:ba:9d:bb:4e:7a:3c:87:4d:38:a3:74:ea:63:77:
3c:74:72:b7:8e:3e:37:ca:b9:73:62:66:0d:9a:ff:
40:b9:cf:d2:47:e6:b6:5e:7c:34:d5:fe:59:34:30:
e5:eb:53:f5:b1:cf:fe:73:3c:06:37:42:47:23:64:
49:49:02:be:e7:32:6a:ae:b1:16:58:ef:28:48:ab:
f8:21:d7:e0:6e:ac:c0:10:63:37:5e:55:16:1d:12:
1b:cf:e7:a6:72:c0:3d:ec:77:48:74:8a:f7:7b:a6:
9a:58:bc:0b:6c:a3:16:06:8a:75:43:c5:1e:cd:59:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:83:1F:37:F9:DB:B5:35:A9:10:08:1F:08:1C:1D:A5:8B:77:C6
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10c::/48
Signature Algorithm: sha256WithRSAEncryption
3f:71:ac:d5:25:d4:6f:1a:2d:d2:57:cd:46:77:c4:1e:cf:b4:
32:c7:17:b6:eb:f3:38:32:9d:84:ea:23:51:53:f1:da:e0:b4:
68:96:4f:31:e0:d0:5d:f5:ee:94:61:b6:6c:be:1a:67:a6:f7:
ab:ef:63:8b:75:cf:66:1c:6b:e0:77:71:05:c1:96:3f:5d:81:
2d:4a:55:c8:d2:d3:76:df:c3:a8:8a:e1:3e:bb:0f:2b:23:36:
f1:1b:d3:35:9a:45:95:e0:d1:12:17:de:3a:4d:72:0b:46:e1:
b7:8b:bf:25:04:e3:9f:4c:42:2e:d9:ff:bb:e7:07:2e:ae:16:
a2:57:a1:37:67:f7:ba:b1:a1:e0:e5:1f:78:f3:41:68:56:6f:
d8:99:19:1f:37:12:9e:c1:1c:b7:a5:4d:29:1b:a3:86:12:d0:
78:d2:83:4c:3d:99:d0:70:a9:7e:0a:81:79:1e:9e:8c:82:96:
99:57:31:36:31:94:dd:cf:33:e7:c1:60:c6:e4:4a:35:cb:b3:
1b:8c:09:08:dc:54:bd:ea:29:88:ef:cb:c3:c8:0f:96:13:0b:
4a:47:3d:a7:23:36:ea:41:43:8e:c6:23:90:4a:e6:22:45:20:
ee:6d:2c:a4:b7:e1:4b:c0:e4:ba:73:7c:5e:bf:7e:a0:ab:7b:
a2:c2:15:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhRFJg+twC5TWmCqG28qhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGZhMDE3NTMyZmY2ZDlmYjM4YjQwMDM3ODk2YWZhZjBh
YWNmOGIwHhcNMjUwMTAxMDk0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzkyODMxZjM3ZjlkYmI1MzVhOTEwMDgxZjA4MWMxZGE1OGI3N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQnBJvJBOeIbs3V+XOzAemoWxUYp
GMR5/EjSnyZYEDut085TVCFSVGkXgzwwUilGTMcPBRFw9K0HHf6PmCZpLqOQ/fcG
jdTvJEHfEQvVD+oK488DVaKW8c/Js5WVaKkSBCvpiEFdd1oE+8Rik551LeTODr43
z5IdIuDsg35Iz9XoXC6w7MwBup27Tno8h004o3TqY3c8dHK3jj43yrlzYmYNmv9A
uc/SR+a2Xnw01f5ZNDDl61P1sc/+czwGN0JHI2RJSQK+5zJqrrEWWO8oSKv4Idfg
bqzAEGM3XlUWHRIbz+emcsA97HdIdIr3e6aaWLwLbKMWBop1Q8UezVkgyQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGeSgx83+du1NakQCB8IHB2li3fGMB8GA1UdIwQY
MBaAFECPoBdTL/bZ+zi0ADeJavrwqs+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAt
ZjE5ODJhNjkxZDQ1LzEvWjVLREh6ZjUyN1UxcVJBSUh3Z2NIYVdMZDhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZGI4NzEtNjk3Mi00ZGQ2LTgzNjAtZjE5ODJhNjkxZDQ1
LzEvUUktZ0YxTXY5dG43T0xRQU40bHEtdkNxejRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAEM
MA0GCSqGSIb3DQEBCwUAA4IBAQA/cazVJdRvGi3SV81Gd8Qez7Qyxxe26/M4Mp2E
6iNRU/Ha4LRolk8x4NBd9e6UYbZsvhpnpver72OLdc9mHGvgd3EFwZY/XYEtSlXI
0tN238OoiuE+uw8rIzbxG9M1mkWV4NESF946TXILRuG3i78lBOOfTEIu2f+75wcu
rhaiV6E3Z/e6saHg5R9480FoVm/YmRkfNxKewRy3pU0pG6OGEtB40oNMPZnQcKl+
CoF5Hp6MgpaZVzE2MZTdzzPnwWDG5Eo1y7MbjAkI3FS96imI78vDyA+WEwtKRz2n
IzbqQUOOxiOQSuYiRSDubSykt+FLwOS6c3xev36gq3uiwhU+
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:52 2025 by rpki-client