Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa
File: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (raw, json)
Hash identifier: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=
Subject key identifier: 66:FD:CA:7F:BF:DA:ED:B8:B5:C9:C2:59:9C:B3:7C:E8:C2:68:43:A4
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 0194282527516001DC4DEAB28AC8B0220CBB
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa
Signing time: Thu 02 Jan 2025 17:51:51 +0000
ROA not before: Thu 02 Jan 2025 17:51:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205602
IP address blocks: 2001:67c:fd4::/48 maxlen: 48
2001:67c:fd8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:27:51:60:01:dc:4d:ea:b2:8a:c8:b0:22:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Jan 2 17:51:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66fdca7fbfdaedb8b5c9c2599cb37ce8c26843a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:02:16:fc:3b:06:df:15:37:a9:c2:d9:21:
c4:1d:d6:25:be:4c:95:c8:e2:be:bd:8d:5d:c1:31:
44:b7:db:d9:ba:92:21:2f:4a:32:bf:7f:5c:9a:46:
ee:72:d8:64:67:87:3f:7d:4c:ca:49:7f:7f:c8:dd:
69:26:53:df:3a:17:d1:1c:63:85:e2:33:1c:bd:58:
f7:c5:0a:12:f4:5a:81:d8:57:cc:35:0c:13:7b:77:
88:df:6b:a8:97:55:96:24:a9:7d:de:7b:47:ab:1c:
ee:88:fc:6f:48:bd:cb:1b:5f:ac:e0:58:7b:20:ce:
55:af:21:a8:12:ef:76:ee:0b:8e:e0:82:b7:4d:16:
11:8f:fa:d5:1c:c1:c4:4f:ba:35:1c:10:73:26:cf:
b2:e1:7c:e1:42:55:69:44:1c:ba:6f:97:53:29:02:
8e:d4:04:ae:5f:54:b3:77:56:8d:dd:39:21:b3:03:
66:0e:7d:42:2b:52:af:08:76:4e:76:d9:80:e3:55:
15:4f:66:2c:eb:a3:75:c3:f6:62:3f:f2:a5:c2:54:
59:0b:da:91:f1:3e:c7:98:bb:5a:41:52:8c:d2:2d:
af:f2:1c:f0:43:7b:f6:6e:b7:cc:25:38:f4:06:11:
fb:b1:69:06:d8:76:4e:07:d8:ac:d1:d7:3c:05:5b:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:CA:7F:BF:DA:ED:B8:B5:C9:C2:59:9C:B3:7C:E8:C2:68:43:A4
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fd4::/48
2001:67c:fd8::/48
Signature Algorithm: sha256WithRSAEncryption
5f:5c:a8:74:46:3f:e5:f3:3c:8d:3a:97:06:fe:b5:c3:11:9d:
2d:73:df:7c:7b:77:b9:15:cb:b6:04:81:f5:09:08:28:fb:eb:
5b:d1:a8:48:d9:89:fd:1b:71:33:44:8a:c5:7b:13:74:f7:7d:
a6:90:96:01:a6:24:1e:47:08:9b:7d:10:dc:de:bc:dd:9a:af:
ba:96:6e:4a:8b:e2:20:0c:0c:41:7e:b2:24:81:b4:fb:13:6b:
3c:70:dd:49:ef:a8:59:dc:4c:78:89:31:98:68:fc:eb:40:85:
cb:c1:5d:16:6e:dd:aa:77:14:d0:57:53:d1:7e:68:ca:99:31:
99:92:c2:2d:33:76:88:03:92:8b:b9:01:f9:73:63:c7:97:8c:
bb:78:a7:f4:ca:4b:fd:78:ec:7f:62:9c:67:66:7e:47:65:5e:
9d:04:91:ff:b3:73:80:65:00:a7:af:cf:e9:7f:ff:a7:df:b3:
48:02:a8:d1:c2:e7:13:e5:a5:cd:96:65:d8:88:c0:c0:b5:3f:
1b:f6:3b:ba:20:ab:25:4b:c3:dd:70:87:54:4f:cd:87:53:54:
a2:4b:4c:e4:59:2b:55:0a:02:ca:2a:9f:c5:9a:78:b1:0a:f8:
80:6f:ff:38:22:ab:cb:07:0f:71:77:f0:dd:13:b1:fd:05:f1:
b4:7b:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:39:35 2025 by rpki-client