Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zyZ78bjjA4tIA3fv3utJmc55bbo.roa
File: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (raw, json)
Hash identifier: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=
Subject key identifier: CF:26:7B:F1:B8:E3:03:8B:48:03:77:EF:DE:EB:49:99:CE:79:6D:BA
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747062641F2DE3DC981E15CA24DF5FF
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zyZ78bjjA4tIA3fv3utJmc55bbo.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48292
IP address blocks: 2a0f:6580::/48 maxlen: 48
2a0f:6580:1::/48 maxlen: 48
2a0f:6580:2::/48 maxlen: 48
2a0f:6580:3::/48 maxlen: 48
2a0f:6580:4::/48 maxlen: 48
2a0f:6580:5::/48 maxlen: 48
2a0f:6580:6::/48 maxlen: 48
2a0f:6580:7::/48 maxlen: 48
2a0f:6580:8::/48 maxlen: 48
2a0f:6580:9::/48 maxlen: 48
2a0f:6580:a::/48 maxlen: 48
2a0f:6580:b::/48 maxlen: 48
2a0f:6580:c::/48 maxlen: 48
2a0f:6580:d::/48 maxlen: 48
2a0f:6580:e::/48 maxlen: 48
2a0f:6580:f::/48 maxlen: 48
2a0f:6580:101::/48 maxlen: 48
2a0f:6580:102::/48 maxlen: 48
2a0f:6580:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:06:26:41:f2:de:3d:c9:81:e1:5c:a2:4d:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf267bf1b8e3038b480377efdeeb4999ce796dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:13:1d:cd:c3:ec:a0:07:df:54:3a:23:aa:
69:84:21:28:c6:00:ea:73:06:04:b7:11:2e:ac:6e:
bc:9d:ed:d4:46:ab:f1:d0:5f:e9:4a:af:41:a9:e7:
74:75:39:8f:e6:f6:25:54:4e:d0:d1:3d:4d:a8:4e:
b7:7d:2a:21:38:95:24:a3:a9:fd:ee:85:fd:6c:c5:
2f:47:8d:5d:06:dd:2e:16:8b:77:b9:b1:23:72:4a:
01:85:5a:bf:39:4e:ef:ae:33:dc:11:f0:46:bc:3d:
32:1f:89:48:c4:a8:d8:4c:4a:59:de:c7:e8:88:89:
a1:3f:0e:c2:2f:74:82:9a:53:a8:22:a0:19:24:db:
0b:1b:92:84:af:2c:32:f9:55:31:93:dc:65:a9:96:
26:8f:95:8b:1f:d1:1b:b2:59:f8:66:f0:5c:2b:e7:
e2:1f:c9:08:99:27:e4:39:48:48:1c:9c:6e:66:e7:
ad:16:f2:23:07:cd:6b:83:16:71:88:cd:c8:62:62:
c1:2c:a9:0b:03:f1:70:8a:1e:a2:4a:9b:3e:98:38:
70:a5:5b:10:67:56:ef:c0:e7:1f:ba:17:44:56:37:
db:71:ee:76:f9:1f:60:11:50:e8:18:65:17:1b:a8:
e2:f6:41:03:e5:ae:65:0b:74:51:a8:78:34:b8:66:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:7B:F1:B8:E3:03:8B:48:03:77:EF:DE:EB:49:99:CE:79:6D:BA
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/zyZ78bjjA4tIA3fv3utJmc55bbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580::/44
2a0f:6580:101::-2a0f:6580:103:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:ed:c2:c2:c9:19:ed:ff:27:1a:44:a9:7c:67:14:6d:12:48:
d3:5a:1b:3c:97:04:43:fb:d3:27:79:34:db:3f:66:d3:40:9f:
e9:ca:42:bd:66:30:8e:fd:f6:6e:8e:b6:36:f6:47:86:53:bc:
27:ae:b0:e3:46:55:58:39:6e:27:0b:c4:86:17:18:da:fd:e9:
28:71:33:3b:b1:3a:a6:80:c2:0f:0b:18:48:0a:eb:35:fd:a8:
8e:d5:4b:4e:73:19:98:36:d0:e1:6a:ef:15:bd:83:39:f3:af:
5e:2e:f9:e9:97:0f:ba:d1:9d:cf:ba:10:4a:98:84:78:6f:1a:
2a:60:f6:91:e0:58:ae:c1:8f:65:5a:da:16:e3:96:6e:2b:36:
17:3d:ba:17:ab:5a:3e:15:cd:d5:d8:1e:80:4c:7b:c7:e6:ea:
6c:1f:e2:f8:90:a0:13:c6:2d:ab:32:43:15:03:32:8f:c5:6b:
90:b9:dc:04:8f:53:48:e8:dc:fd:79:c7:11:9a:fa:a3:24:f3:
0a:26:9e:7e:74:0a:5c:81:51:1b:4e:75:2e:a4:23:30:2c:6b:
76:9b:c3:28:37:55:0d:e1:6a:08:a6:d3:ed:a7:36:19:19:36:
67:54:85:9e:bd:87:e0:35:c9:ee:e6:b3:52:f6:03:23:ab:61:
c5:f0:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:13 2025 by rpki-client