Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/z_xZZaAWa8QdNga7zU3z3y_ctgs.roa
File: z_xZZaAWa8QdNga7zU3z3y_ctgs.roa (raw, json)
Hash identifier: 3uv9J0zNy4D6OdhhkaZfxXnVW6d77XB4ndHuoNeUg80=
Subject key identifier: CF:FC:59:65:A0:16:6B:C4:1D:36:06:BB:CD:4D:F3:DF:2F:DC:B6:0B
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C68D6B40BC97CDB557C15E7839539
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/z_xZZaAWa8QdNga7zU3z3y_ctgs.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51604
IP address blocks: 2a02:2698:1800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:68:d6:b4:0b:c9:7c:db:55:7c:15:e7:83:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cffc5965a0166bc41d3606bbcd4df3df2fdcb60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:4a:2b:54:57:ab:9e:28:6a:a3:c9:4d:74:
51:44:b9:07:1d:b7:7b:6e:be:22:f1:12:ac:88:22:
55:a3:b5:66:d7:d8:08:9e:8a:d5:2c:60:7f:f9:05:
d4:f6:87:bc:fb:a7:89:89:0b:47:6d:8d:5b:f7:aa:
bb:5b:e2:32:ae:a4:d0:6a:b1:88:f4:9e:d7:78:f5:
3f:79:ce:87:b0:ba:b9:22:bb:32:c5:88:17:ba:a6:
59:1e:98:61:b0:61:ae:ec:2c:d8:4f:14:0f:3f:c1:
31:05:a3:50:ae:f2:d4:0c:04:1b:35:50:a0:c7:e5:
de:08:a5:13:8b:1a:4c:55:35:68:0d:98:10:61:a0:
22:4f:c8:38:05:1b:b8:7e:dc:66:71:c0:1f:3a:36:
62:33:6c:a8:15:f8:61:4d:f4:75:74:cf:58:38:c5:
c2:2b:9b:bc:c1:34:1e:ff:cd:4b:c9:ce:fe:ba:51:
c9:89:71:5c:f2:dc:66:20:1f:a7:d5:ef:42:7c:d3:
7f:0e:4d:6b:8f:82:99:0a:6e:8a:43:77:0b:fb:71:
0b:f6:53:8b:52:4a:d5:ce:0a:a3:bb:e3:3d:e9:37:
27:17:43:91:e1:34:26:4a:61:b9:6d:76:79:a1:66:
64:b9:11:1f:17:7f:00:ab:fe:8a:82:4b:d8:54:08:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:59:65:A0:16:6B:C4:1D:36:06:BB:CD:4D:F3:DF:2F:DC:B6:0B
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/z_xZZaAWa8QdNga7zU3z3y_ctgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1800::/38
Signature Algorithm: sha256WithRSAEncryption
a8:5f:8f:43:48:7b:c2:4e:a7:6c:c3:31:ea:29:0b:dc:21:dd:
62:78:8e:fd:85:11:92:2e:9a:49:d9:56:ff:f5:60:c0:1d:f0:
2e:61:02:8d:75:a0:f3:db:1f:6e:d5:df:f2:f9:32:df:c3:ff:
51:a4:39:08:46:a0:0f:5f:da:1b:32:ac:fb:db:9b:9f:3e:0a:
59:f8:2c:44:22:91:90:92:1e:f7:8e:0e:d9:ae:32:b5:e5:39:
c3:f3:47:87:d3:b3:20:60:ee:33:57:00:4e:69:b6:5d:10:08:
7b:90:ab:b7:f9:50:5c:8c:99:a4:db:86:29:35:75:4f:21:fd:
c2:27:c1:61:6a:6e:7b:be:7b:e3:8d:60:6b:5f:31:db:5a:6e:
51:a5:9f:af:cc:b4:1a:4d:1b:9c:59:5d:ba:f7:6e:ce:47:1e:
98:85:66:b3:9b:b9:b1:a7:c0:35:e3:6a:11:6f:03:43:c8:28:
af:93:44:09:3e:a1:8d:25:98:60:22:84:f2:49:81:4c:10:1f:
2d:6d:fd:90:84:a8:f7:c3:e3:ee:b9:50:fb:c2:bd:48:1a:4c:
ef:88:48:e8:dc:d0:c6:21:f4:53:29:25:ab:68:d3:34:7c:ed:
c1:26:b2:0a:33:00:8a:52:83:34:e8:9d:ff:fc:09:0b:31:86:
87:5f:00:7c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjGjWtAvJfNtVfBXng5U5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjUwMTAxMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmZjNTk2NWEwMTY2YmM0MWQzNjA2YmJjZDRkZjNkZjJmZGNiNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVhKK1RXq54oaqPJTXRRRLkHHbd7
br4i8RKsiCJVo7Vm19gInorVLGB/+QXU9oe8+6eJiQtHbY1b96q7W+IyrqTQarGI
9J7XePU/ec6HsLq5IrsyxYgXuqZZHphhsGGu7CzYTxQPP8ExBaNQrvLUDAQbNVCg
x+XeCKUTixpMVTVoDZgQYaAiT8g4BRu4ftxmccAfOjZiM2yoFfhhTfR1dM9YOMXC
K5u8wTQe/81Lyc7+ulHJiXFc8txmIB+n1e9CfNN/Dk1rj4KZCm6KQ3cL+3EL9lOL
UkrVzgqju+M96TcnF0OR4TQmSmG5bXZ5oWZkuREfF38Aq/6KgkvYVAg0DwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFM/8WWWgFmvEHTYGu81N898v3LYLMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvel94WlphQVdhOFFkTmdhN3pVM3ozeV9jdGdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmBgw
DQYJKoZIhvcNAQELBQADggEBAKhfj0NIe8JOp2zDMeopC9wh3WJ4jv2FEZIumknZ
Vv/1YMAd8C5hAo11oPPbH27V3/L5Mt/D/1GkOQhGoA9f2hsyrPvbm58+Cln4LEQi
kZCSHveODtmuMrXlOcPzR4fTsyBg7jNXAE5ptl0QCHuQq7f5UFyMmaTbhik1dU8h
/cInwWFqbnu+e+ONYGtfMdtablGln6/MtBpNG5xZXbr3bs5HHpiFZrObubGnwDXj
ahFvA0PIKK+TRAk+oY0lmGAihPJJgUwQHy1t/ZCEqPfD4+65UPvCvUgaTO+ISOjc
0MYh9FMpJato0zR87cEmsgozAIpSgzTonf/8CQsxhodfAHw=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:33 2025 by rpki-client