Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa
File: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (raw, json)
Hash identifier: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=
Subject key identifier: 66:D0:A7:5D:BA:7F:62:BC:20:0A:72:8B:54:A9:D5:D1:64:A6:39:C5
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0194258F6C77E2ED462C8584DC511833D940
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51011
IP address blocks: 2a03:5a00:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6c:77:e2:ed:46:2c:85:84:dc:51:18:33:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d0a75dba7f62bc200a728b54a9d5d164a639c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:e9:b7:4b:c4:c7:eb:af:f5:97:a1:14:ff:
ae:4a:7d:ff:45:c0:09:68:09:25:07:fa:63:79:e9:
ce:90:dd:99:0f:37:60:09:f7:b9:6b:26:52:43:d8:
70:98:78:50:18:75:d6:8f:5e:9f:e4:ea:a7:65:7b:
6b:1a:7d:c0:f7:02:f1:6e:cb:77:9c:ec:27:a6:bd:
76:bb:49:9d:f1:ab:42:eb:da:46:82:cf:02:93:79:
cc:ff:1f:ec:70:ff:49:1d:66:bc:94:f5:7f:40:f0:
5d:da:9b:65:93:68:99:bb:f1:2d:b4:d2:86:4a:af:
79:ba:71:db:5e:c1:11:23:ca:39:5f:3c:53:3c:2f:
be:91:99:ab:c6:2a:6e:8c:65:7b:51:be:d8:6a:33:
9f:c1:d6:9f:99:de:d4:87:a3:64:71:69:ea:2b:e4:
1f:9f:07:73:c0:a5:64:a2:49:6d:02:52:60:85:51:
ad:37:78:2c:bc:6c:58:31:af:c3:78:58:83:5c:2c:
dd:4d:6e:d0:b8:99:35:07:d3:e6:34:38:12:5c:f4:
68:ac:1d:48:af:75:c3:9d:01:55:da:12:4c:9a:95:
2c:ba:bf:77:bd:e3:5d:90:9e:6c:ab:db:c2:67:cc:
d7:fb:fb:10:5c:6b:94:43:5e:e0:9f:51:04:4d:f6:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:A7:5D:BA:7F:62:BC:20:0A:72:8B:54:A9:D5:D1:64:A6:39:C5
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5a00:2e::/48
Signature Algorithm: sha256WithRSAEncryption
09:4d:a2:00:7c:af:30:e8:06:66:2d:c5:08:ed:bf:04:b6:34:
1a:43:99:8d:cf:b9:89:25:11:e3:e1:83:f3:21:d0:5f:08:67:
d4:3a:10:a9:1f:0b:f3:1b:2b:66:c2:01:de:cc:b2:a6:06:31:
ca:05:23:e2:8f:66:e2:43:48:dc:2b:43:5c:a7:13:39:37:47:
d1:39:08:6d:b5:3d:02:3b:da:00:56:1a:ea:7f:0c:d8:fa:db:
01:4d:1d:32:c8:90:f7:97:3f:da:2e:fd:b2:05:a7:f2:e1:38:
ad:64:90:d9:47:62:01:6a:5a:38:7f:70:54:1e:28:90:9b:d8:
bd:86:b7:04:5c:d4:78:25:a6:1e:54:bc:0b:15:52:83:9c:ba:
95:6c:a7:1c:5e:dd:bf:e4:3d:0c:5d:df:6e:e2:fd:88:f6:df:
10:67:d4:e6:44:41:61:98:cf:28:2b:3e:d5:d6:3b:5f:25:81:
69:8b:31:73:b2:60:1d:fe:b1:19:35:ad:82:6b:19:5a:98:19:
b5:1d:db:5f:ef:7b:d2:e9:dd:ba:ef:8f:63:83:e2:c6:a3:90:
23:8f:15:72:09:92:70:b2:99:17:1d:dc:0a:be:80:a1:0f:8e:
77:24:5c:45:cb:d9:9d:09:e1:18:55:4c:3c:ef:b6:86:53:42:
54:91:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:30:06 2025 by rpki-client