Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa
File: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (raw, json)
Hash identifier: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=
Subject key identifier: 0B:FB:D9:AF:36:5D:87:2F:AE:7A:33:99:EB:F1:96:65:34:A6:FE:7D
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 01941F8C7B332B566933BA04AB058BF63361
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.72.0.0/16 maxlen: 16
141.72.0.0/17 maxlen: 17
141.72.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:33:2b:56:69:33:ba:04:ab:05:8b:f6:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bfbd9af365d872fae7a3399ebf1966534a6fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:90:ce:ed:f2:30:4b:ab:9a:ad:4d:3c:8d:
2c:02:46:26:11:47:ab:74:fc:ad:27:72:ea:ad:bf:
78:a4:2f:22:c2:ea:fd:14:09:09:90:d1:a5:1a:d2:
15:d7:76:10:e5:48:d3:d2:d2:6c:34:cc:98:e9:fe:
fd:e6:c3:6f:c4:7a:3e:70:b7:54:b6:12:aa:29:db:
12:f9:ab:34:f0:8f:30:29:c6:3e:7c:97:54:b9:bb:
67:45:c4:fe:6b:b8:46:ae:75:f5:72:2a:be:c3:45:
ac:3b:07:11:2b:0d:43:4b:e0:0d:1d:cf:cf:f8:59:
0d:ce:d0:e0:77:28:78:9e:33:9a:33:e6:71:4a:96:
62:14:0f:d4:4a:2d:49:19:5d:41:87:bf:84:e2:c2:
17:2b:4e:e8:09:13:03:41:b1:9e:60:a9:41:df:a9:
56:2f:2b:ef:b8:63:c6:7d:fe:ee:39:eb:41:6c:61:
e3:84:be:9a:2f:a6:6c:39:1a:60:6a:dd:2a:73:70:
9e:86:43:b7:40:89:3a:6f:af:16:2f:2b:d8:36:5c:
06:f9:95:1a:9d:ca:05:b0:92:0d:1a:dd:01:78:61:
46:08:9d:57:f7:23:af:47:f4:7e:8c:ff:07:b3:6b:
39:be:7a:d0:49:0e:9b:5d:e7:5d:9d:9e:df:7d:89:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:D9:AF:36:5D:87:2F:AE:7A:33:99:EB:F1:96:65:34:A6:FE:7D
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:ee:63:5d:53:53:71:9e:33:c5:69:a4:3e:bd:3d:e7:ab:ea:
59:1c:c5:06:db:e1:84:ea:74:16:eb:6e:ba:01:0a:24:30:55:
ca:74:41:9c:3b:f4:e7:3e:c3:55:59:ae:22:ee:dd:b9:6f:37:
5f:37:e3:42:09:30:7b:89:21:a2:d8:f5:71:fb:d4:f1:9e:ab:
d4:1f:2d:6d:64:47:b4:cd:ce:2f:21:7e:88:ec:ad:0d:51:a4:
4e:fa:8f:19:39:87:1d:01:32:46:f4:af:f2:16:5b:4c:92:ed:
bd:60:0e:15:4f:f5:35:b9:99:04:b3:17:8b:dc:91:65:bb:a1:
77:7f:85:f7:16:d4:2b:4e:c8:9a:a9:fa:49:13:9d:4e:d4:45:
04:a7:f5:3f:21:5b:4a:94:fc:11:74:31:65:90:cc:5b:6f:b7:
19:9c:9a:72:2e:1f:38:a3:57:8f:06:9f:42:cd:39:97:a8:d1:
bc:15:3f:c2:ef:1d:5d:aa:c7:3b:00:0f:a9:13:c9:8f:75:a0:
6a:c3:b7:e4:ad:dc:04:7e:3b:16:95:82:24:b2:b7:56:c1:01:
2a:61:c6:92:f3:8e:e5:bd:40:4d:5d:34:dd:f7:43:23:bf:4e:
22:f1:04:16:e4:a4:48:3d:d3:ac:c6:ac:ba:fc:ab:56:92:4a:
78:9f:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:58:14 2025 by rpki-client