Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zyM6X79ZQOsHpBTle9j_8V4QHSI.roa
File: zyM6X79ZQOsHpBTle9j_8V4QHSI.roa (raw, json)
Hash identifier: ON9ygDgPgS5mdaELaB0pyzVpXL6FYiIuiOt8CKRS97U=
Subject key identifier: CF:23:3A:5F:BF:59:40:EB:07:A4:14:E5:7B:D8:FF:F1:5E:10:1D:22
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E1CB5D725914CFC83B9C47F39272
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zyM6X79ZQOsHpBTle9j_8V4QHSI.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207649
IP address blocks: 2a0b:b87:ffb6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:cb:5d:72:59:14:cf:c8:3b:9c:47:f3:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf233a5fbf5940eb07a414e57bd8fff15e101d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:1e:84:85:5e:29:bb:f8:e2:5f:39:c6:54:
39:c9:e9:ac:60:88:8b:af:71:fa:14:1e:b4:2d:0b:
ca:88:cd:1c:1b:fb:64:40:0d:7e:b7:f7:f2:21:4f:
b1:79:12:8b:56:38:84:d0:14:13:b4:eb:8b:91:78:
3b:f4:39:b1:33:94:7b:2a:38:de:6a:bc:fc:2d:3a:
5f:65:f7:66:e3:ba:45:76:c4:d6:bd:aa:b5:c0:d8:
56:18:06:79:9f:da:7b:43:fb:a8:5c:69:73:a7:11:
ad:ef:be:fb:ee:70:f6:d9:ec:ad:c0:77:7a:96:ef:
c0:39:ef:93:85:38:66:c7:f8:9e:f9:98:51:5e:b4:
d3:2d:35:50:4a:9e:db:c2:72:24:bd:d6:80:10:ea:
97:e4:fc:93:50:af:71:fd:3b:21:05:b1:f0:f6:ea:
dc:7e:98:c9:0a:66:a0:a4:6c:ac:bf:c5:12:0a:c7:
4d:4c:1c:e2:f7:b7:8b:71:72:8b:ad:75:18:75:40:
3c:6f:6b:43:30:44:6c:d2:28:3c:58:89:71:75:d3:
1c:ca:96:ff:7b:a7:21:53:0d:fa:9d:7b:fe:57:44:
44:25:4f:57:74:f3:d0:9b:24:ae:e7:82:6a:0a:30:
d0:01:7f:5c:a2:9d:7e:aa:61:68:97:78:50:4a:60:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:3A:5F:BF:59:40:EB:07:A4:14:E5:7B:D8:FF:F1:5E:10:1D:22
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zyM6X79ZQOsHpBTle9j_8V4QHSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb6::/48
Signature Algorithm: sha256WithRSAEncryption
3d:3c:5d:cb:6f:4e:50:bc:5e:cc:75:8f:e8:f1:79:33:63:51:
b2:90:1c:6c:b3:7c:90:08:68:48:70:e6:e9:b6:0a:b6:3c:a0:
f0:74:3f:8c:77:60:dd:96:ee:46:c4:5b:10:db:90:b1:8b:78:
6f:d5:da:af:d5:26:f9:c5:12:a8:9a:43:7c:1f:26:ae:6f:6f:
3d:7a:91:ab:38:1a:68:c9:f8:50:7a:e3:7f:5e:10:7e:88:db:
01:49:88:98:01:31:a4:99:8d:61:09:f7:b2:1a:a2:12:72:bb:
3e:b3:96:b4:cf:0d:5f:29:dc:f5:ae:fb:5c:37:f2:b4:70:9f:
32:a1:51:83:57:b4:f4:68:5f:5d:1b:52:f2:97:c3:2e:d1:22:
5d:75:dd:9e:b0:60:ec:fa:22:63:b5:02:a6:02:d1:b0:1e:4f:
a4:c3:51:4b:ac:16:83:88:a2:1e:bf:78:15:b7:64:aa:03:5d:
59:1c:95:a1:c9:6a:35:97:bd:85:d5:14:ab:b1:88:a4:e2:98:
56:87:b7:4e:34:0b:f1:2c:a3:88:80:df:f8:f3:99:fa:eb:af:
b7:65:0a:19:47:d1:3c:a7:f1:49:0a:41:12:2d:bf:48:53:e2:
59:ed:7c:54:ef:0d:1d:b2:cd:01:3e:76:57:91:d1:eb:94:49:
8b:cd:50:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR+HLXXJZFM/IO5xH85JyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjIzM2E1ZmJmNTk0MGViMDdhNDE0ZTU3YmQ4ZmZmMTVlMTAxZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEQehIVeKbv44l85xlQ5yemsYIiL
r3H6FB60LQvKiM0cG/tkQA1+t/fyIU+xeRKLVjiE0BQTtOuLkXg79DmxM5R7Kjje
arz8LTpfZfdm47pFdsTWvaq1wNhWGAZ5n9p7Q/uoXGlzpxGt77777nD22eytwHd6
lu/AOe+ThThmx/ie+ZhRXrTTLTVQSp7bwnIkvdaAEOqX5PyTUK9x/TshBbHw9urc
fpjJCmagpGysv8USCsdNTBzi97eLcXKLrXUYdUA8b2tDMERs0ig8WIlxddMcypb/
e6chUw36nXv+V0REJU9XdPPQmySu54JqCjDQAX9cop1+qmFol3hQSmClIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM8jOl+/WUDrB6QU5XvY//FeEB0iMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvenlNNlg3OVpRT3NIcEJUbGU5al84VjRRSFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+2
MA0GCSqGSIb3DQEBCwUAA4IBAQA9PF3Lb05QvF7MdY/o8XkzY1GykBxss3yQCGhI
cObptgq2PKDwdD+Md2Ddlu5GxFsQ25Cxi3hv1dqv1Sb5xRKomkN8Hyaub289epGr
OBpoyfhQeuN/XhB+iNsBSYiYATGkmY1hCfeyGqIScrs+s5a0zw1fKdz1rvtcN/K0
cJ8yoVGDV7T0aF9dG1Lyl8Mu0SJddd2esGDs+iJjtQKmAtGwHk+kw1FLrBaDiKIe
v3gVt2SqA11ZHJWhyWo1l72F1RSrsYik4phWh7dONAvxLKOIgN/485n666+3ZQoZ
R9E8p/FJCkESLb9IU+JZ7XxU7w0dss0BPnZXkdHrlEmLzVCs
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:36 2025 by rpki-client