Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/znbCSfa62MjugadmDs4WgFylkOE.roa
File: znbCSfa62MjugadmDs4WgFylkOE.roa (raw, json)
Hash identifier: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=
Subject key identifier: CE:76:C2:49:F6:BA:D8:C8:EE:81:A7:66:0E:CE:16:80:5C:A5:90:E1
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019584A9FC88A371CB19F923404C1E805B8B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/znbCSfa62MjugadmDs4WgFylkOE.roa
Signing time: Tue 11 Mar 2025 10:04:47 +0000
ROA not before: Tue 11 Mar 2025 10:04:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2a00:15c8::/29 maxlen: 29
2a00:15c9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:a9:fc:88:a3:71:cb:19:f9:23:40:4c:1e:80:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Mar 11 10:04:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce76c249f6bad8c8ee81a7660ece16805ca590e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:a9:93:61:09:10:7a:f1:a5:05:ae:3a:15:
57:95:ad:fb:94:4f:81:3d:51:54:2e:25:4b:f6:13:
0d:6e:bd:48:38:52:2a:f1:1d:6d:01:80:94:74:64:
bb:63:97:09:29:43:92:d4:f9:0b:00:40:20:65:43:
39:5b:77:2c:2a:49:6b:11:0b:f4:4b:c6:3c:f0:14:
f7:f6:1a:29:2f:8d:d4:cb:ec:73:cc:e3:80:69:0d:
4c:4a:0a:00:dd:09:eb:99:cf:2a:86:ac:87:83:3a:
d7:11:ef:48:15:76:22:29:2e:8f:9b:4f:3a:61:62:
8b:ce:f7:33:17:d8:f8:20:a3:27:f2:98:eb:97:9e:
58:34:bc:3f:71:25:1a:81:e0:12:30:ac:1c:80:ef:
e2:e4:f9:ef:75:d8:04:09:16:41:8b:d8:57:4a:8b:
c8:80:87:03:44:9a:c4:c6:62:2b:2e:11:df:a7:fc:
a9:c8:8e:73:f2:ab:5f:c8:ea:27:9d:9f:c9:63:7d:
e2:33:b3:c1:1a:b9:67:6f:f4:47:46:dc:6a:5d:de:
d3:e5:51:40:41:4b:ca:4c:ed:96:cd:4e:61:02:51:
0a:b3:4e:f1:c3:91:26:a3:f8:6b:59:cf:c4:1b:88:
1a:8a:65:7a:6c:f8:89:ff:f4:e6:93:8d:d9:2c:6e:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:C2:49:F6:BA:D8:C8:EE:81:A7:66:0E:CE:16:80:5C:A5:90:E1
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/znbCSfa62MjugadmDs4WgFylkOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:15c8::/29
Signature Algorithm: sha256WithRSAEncryption
91:00:bc:ac:34:fb:e6:49:d3:eb:31:9a:71:0b:5d:53:6b:1a:
5d:d0:b0:c3:d1:56:ef:93:e5:1d:06:c0:1d:91:0e:ac:fb:80:
ec:2f:5e:0e:3e:f5:09:bc:e7:fa:bd:7b:dc:18:01:0a:45:91:
81:98:5a:40:87:b6:a5:b3:7e:c8:82:20:df:6c:d6:ac:c5:1d:
e5:26:dc:59:f8:29:51:5e:f4:be:e9:7e:42:e2:7f:e7:d0:76:
56:31:82:e1:f5:3b:d6:9a:cd:d4:2d:5e:36:63:95:82:16:ef:
0e:6e:83:ef:da:59:05:f4:4a:7e:00:d1:99:47:c6:f1:e7:76:
b3:fe:78:cb:42:ee:ed:6c:18:d5:65:f2:11:3b:0e:a9:7b:b0:
ca:a9:32:8b:d3:15:01:4f:cb:c4:fc:d6:7b:12:27:a9:3a:02:
b2:fa:93:10:7f:bb:95:8b:31:cc:ce:21:9b:cb:58:6d:15:73:
9e:c4:31:e0:a3:79:07:4c:92:b8:ee:cd:e9:89:45:35:7d:76:
93:6d:17:29:b9:5a:d9:85:26:c3:8e:50:14:66:04:38:59:dc:
d2:71:64:f8:8a:55:eb:d1:70:e5:f8:5b:b3:06:99:f4:3a:59:
3c:87:03:f5:ed:b5:cc:1f:59:87:f2:ac:64:a4:cd:7e:e4:77:
e9:e7:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:56:01 2025 by rpki-client