Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/kzypufx1A54QL9RnefA55meWSPM.roa
File: kzypufx1A54QL9RnefA55meWSPM.roa (raw, json)
Hash identifier: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=
Subject key identifier: 93:3C:A9:B9:FC:75:03:9E:10:2F:D4:67:79:F0:39:E6:67:96:48:F3
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 0194228DF3D3DF6270E0162DA195C23F7967
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/kzypufx1A54QL9RnefA55meWSPM.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212488
IP address blocks: 2001:67c:3f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f3:d3:df:62:70:e0:16:2d:a1:95:c2:3f:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=933ca9b9fc75039e102fd46779f039e6679648f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:4c:d3:28:0f:35:12:da:84:0c:d5:cd:19:
fd:b9:98:d1:15:93:dc:f8:16:58:fc:bf:97:39:92:
ad:ad:0f:86:c7:4d:8e:0c:6d:3d:61:8a:a2:5f:ec:
14:92:fc:28:1a:b1:66:d2:c8:73:1e:e5:fb:2f:af:
03:0b:04:a4:28:09:fa:cd:09:ae:c2:b9:f0:17:5c:
24:6d:2f:20:71:68:6a:00:b3:dc:bf:ef:ab:89:eb:
9b:b4:2b:ac:55:e8:c7:a1:25:23:f2:55:3c:24:ad:
5f:b6:01:f8:a4:4c:76:e2:fb:00:24:44:c6:d3:a2:
79:9b:b2:90:11:17:3d:63:8e:f4:f9:42:17:18:05:
73:86:cf:09:42:e6:6e:13:16:24:f4:a0:fb:b6:66:
c2:9b:c3:a2:83:ce:9d:96:ef:cd:98:a6:9a:c0:58:
a4:bc:ce:46:36:50:53:fd:e1:a8:72:49:80:fc:4c:
0d:34:93:7e:bb:1b:2f:0f:48:72:dc:6d:29:99:3e:
fe:6d:a8:24:57:d1:b5:7a:f2:b8:d7:40:44:63:73:
11:90:69:78:2d:22:39:8d:c3:e1:e3:8b:cc:a3:61:
a5:eb:42:6f:40:3d:51:c3:4a:4d:77:d0:28:56:9d:
68:04:ae:fe:28:a3:0d:5e:1f:15:9e:3b:9e:09:e2:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:A9:B9:FC:75:03:9E:10:2F:D4:67:79:F0:39:E6:67:96:48:F3
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/kzypufx1A54QL9RnefA55meWSPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:3f8::/48
Signature Algorithm: sha256WithRSAEncryption
37:d5:4d:87:0d:3a:59:fe:f8:c4:ce:45:cb:d7:91:9b:93:8e:
6b:48:2d:d6:bb:4b:ce:55:69:7a:f2:16:6a:45:95:a9:50:6d:
41:7d:ef:5f:9e:77:40:65:b3:04:ec:cc:0c:71:ba:86:04:a2:
ac:ef:3b:97:6b:ab:b3:8c:e8:88:5c:b9:12:36:ee:80:1f:d9:
a8:49:eb:e4:79:71:bd:00:e7:3b:4d:59:50:a7:35:03:6f:93:
c1:cc:fc:cd:fa:39:8b:83:a2:ed:c6:8f:c3:56:72:0f:c3:2d:
2d:63:fd:bb:14:dc:55:7d:2d:ca:b4:f1:01:d5:c9:67:73:d8:
cd:b0:e1:93:e9:e3:1d:4e:c0:f7:79:77:1a:9a:b4:19:8b:db:
02:95:8a:6e:b6:6a:c7:f9:30:a5:e7:8a:18:25:ae:33:db:79:
5b:6e:03:fb:0b:01:c2:93:a4:05:50:9a:a0:cf:75:b0:f5:73:
bd:9e:91:73:3a:de:29:58:c9:da:59:18:39:78:28:a6:11:0b:
c1:d6:a0:84:8d:8b:a6:fd:d2:c5:d5:02:bc:26:d3:eb:b6:34:
a5:64:62:bf:10:9e:8a:70:6f:3e:0c:bf:9f:8a:19:e2:99:cc:
a5:cd:07:d8:91:1e:7a:cf:50:17:48:c0:96:58:c7:cf:82:84:
fd:6e:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:43 2025 by rpki-client