Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa
File: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (raw, json)
Hash identifier: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=
Subject key identifier: CD:72:CC:C1:54:E4:BE:D4:6D:A8:11:04:2B:C9:BB:90:52:15:F9:B5
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 019425FCCA6B428C04C631C688BB6344922A
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215494
IP address blocks: 2001:67c:df0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ca:6b:42:8c:04:c6:31:c6:88:bb:63:44:92:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd72ccc154e4bed46da811042bc9bb905215f9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:2f:2a:c3:bc:94:a0:47:3b:d9:bf:dc:3b:
55:9d:10:a8:ed:ef:06:f8:bb:cd:53:f6:53:92:cb:
00:84:02:91:7b:28:75:85:78:21:20:61:56:45:e2:
a0:13:35:51:89:bb:dd:fc:6b:87:0a:67:21:36:3d:
7b:6d:0f:02:52:ee:f1:e4:06:3d:5c:f5:ea:3b:2b:
ad:c9:ea:d8:cb:8a:25:fb:91:48:19:e4:c7:a4:79:
59:c9:db:23:41:38:50:54:be:79:60:a8:48:6e:cd:
f3:d1:a1:6c:2a:f6:b2:3b:8f:39:19:66:7f:08:9a:
eb:a3:0c:ff:27:58:b3:c3:04:2b:18:e7:b7:03:4c:
bd:86:27:ad:b2:8a:aa:ee:27:31:1b:f5:52:80:91:
5e:2f:ab:a8:2f:2b:d1:5f:d9:80:9d:d0:51:52:1d:
b1:20:3e:7c:ed:c8:4b:7f:b0:2b:f8:b1:1a:75:18:
76:70:be:4e:63:98:f9:9f:cb:9b:49:30:91:06:ab:
55:c5:17:d1:84:61:43:1f:81:d9:b1:23:5e:8a:d7:
c2:52:cb:cf:41:78:5b:0c:eb:40:24:81:7c:a7:fa:
b9:f2:7f:20:97:f5:38:54:1e:2e:e2:7b:03:f4:e8:
90:22:09:39:69:07:79:4c:4f:ed:6a:51:8b:18:f4:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:CC:C1:54:E4:BE:D4:6D:A8:11:04:2B:C9:BB:90:52:15:F9:B5
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:df0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6c:76:b7:09:ad:c7:3d:af:b6:53:18:cd:b2:70:cc:cc:d1:
48:b5:27:57:5c:5b:aa:8b:ee:c9:e5:bd:d6:f5:ef:81:8d:67:
aa:ce:62:c6:ab:a4:86:f3:5b:05:6c:09:d6:b6:5d:10:33:a4:
0e:15:c1:22:ea:ba:ac:7a:cd:3d:a6:34:ff:b9:ae:71:13:e5:
f4:6d:09:53:e5:29:79:47:0c:b0:ef:ca:05:9f:91:08:02:93:
54:c3:60:79:a8:81:82:64:4d:f9:e2:7e:a0:09:42:9a:cc:11:
8c:25:df:80:2d:50:97:0f:4c:37:e7:0f:be:1c:58:29:70:76:
f7:d3:bd:f0:25:2c:20:f7:54:6f:20:68:aa:2f:0f:f7:24:17:
e4:89:82:4d:e6:d5:c7:3d:d1:78:22:50:83:fb:63:0e:2e:0d:
3c:cd:b0:d9:34:89:cd:1b:aa:3c:9b:62:62:8e:48:06:fe:e8:
57:f1:4f:a2:eb:31:90:ae:f9:3b:2f:eb:ef:a1:eb:dc:89:07:
bb:19:c7:60:52:44:8a:75:9a:5d:fb:75:df:e0:d3:0d:8f:1e:
0c:b4:74:71:da:88:86:eb:c5:89:70:ce:e7:ae:0e:46:92:b5:
a2:64:42:dc:2a:a2:74:4f:6a:98:d5:bb:a3:8b:cc:61:bd:10:
7d:0e:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:49 2025 by rpki-client