Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/zStWlFKn8ajT-k4L_oV1Ttw-akk.roa
File: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (raw, json)
Hash identifier: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=
Subject key identifier: CD:2B:56:94:52:A7:F1:A8:D3:FA:4E:0B:FE:85:75:4E:DC:3E:6A:49
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0194221FD7FC4FA470F9CDFD3D5F46F90AD8
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/zStWlFKn8ajT-k4L_oV1Ttw-akk.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215434
IP address blocks: 2a01:f340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d7:fc:4f:a4:70:f9:cd:fd:3d:5f:46:f9:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2b569452a7f1a8d3fa4e0bfe85754edc3e6a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:f3:d6:0b:67:99:fb:a9:5b:6c:cc:4e:2c:
1f:e4:d0:96:d0:00:b7:98:3c:73:0f:9b:8f:ab:10:
a7:5e:9a:ae:59:22:be:65:2b:69:a5:5f:38:af:62:
9b:f8:db:a8:ba:f8:a3:21:8d:9f:ea:b0:34:2b:2c:
f7:43:53:f7:3b:a3:58:3c:45:8f:aa:d3:d0:41:d9:
fd:9b:23:de:9d:1d:07:6a:86:14:14:50:46:9a:d8:
2d:1f:d3:8a:da:5d:b6:de:a2:9e:fa:3a:89:f3:80:
70:46:f0:43:60:67:79:68:9b:12:40:46:c4:f3:c3:
e2:1f:00:62:b3:97:a0:3c:5e:b5:1b:a7:bd:36:18:
d7:a8:ca:e2:bd:6f:33:f7:8b:a6:17:3e:ac:af:03:
df:14:15:54:82:37:97:7e:5a:5d:0d:58:6e:9c:8a:
bd:e0:04:df:ba:04:75:62:ca:ae:68:aa:9a:0b:2c:
68:f5:37:5c:b3:de:0d:e5:0f:ae:91:ca:79:f5:d6:
0b:12:6b:85:79:ed:8f:8c:a6:fc:39:11:bb:a2:0d:
f8:97:3b:77:06:c7:cb:0a:b1:7a:56:63:96:f3:34:
39:73:05:c2:17:b0:b1:2c:fa:99:f6:cc:b8:d3:95:
70:c1:a0:c3:71:97:3c:57:62:5e:ad:c1:12:00:ca:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:56:94:52:A7:F1:A8:D3:FA:4E:0B:FE:85:75:4E:DC:3E:6A:49
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/zStWlFKn8ajT-k4L_oV1Ttw-akk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f340::/29
Signature Algorithm: sha256WithRSAEncryption
52:8e:2d:18:aa:e0:52:4b:8a:02:c0:68:eb:f3:19:84:30:1b:
04:ff:ac:29:06:38:7c:28:c2:91:76:72:e3:d6:a3:5e:3b:cd:
11:9c:ab:be:6b:c7:54:63:9f:0b:9e:f3:a8:0e:e6:e4:a8:af:
80:41:c5:0e:07:cd:b3:6d:d3:f9:c3:7c:f7:79:03:7d:a3:3d:
aa:a4:e3:4c:82:47:4c:c4:6e:3b:92:6b:ea:56:85:43:78:ef:
ea:6c:0e:7c:c3:e2:0f:a7:bf:f3:02:bf:41:54:e9:37:64:01:
00:27:4c:6b:3c:6c:ce:e1:96:75:29:aa:37:65:ca:41:4b:e5:
db:ba:93:25:c9:32:dc:c2:f7:66:0b:f4:31:0d:17:94:d4:76:
38:00:fa:44:04:2e:7d:ce:0d:0d:33:b1:f1:e3:fb:b1:35:26:
28:df:0c:41:6b:cc:35:5b:79:47:d5:c1:40:34:f8:6f:36:19:
a9:b5:7d:b9:ab:2d:10:1a:35:dc:91:63:5d:47:4f:e0:24:41:
be:a9:a7:6c:04:17:30:fb:b2:56:6f:61:0e:07:86:9e:68:7d:
eb:d4:de:f4:45:57:fc:ac:73:5c:52:7b:4a:2e:ca:a9:96:3c:
70:fe:d9:ef:16:53:6d:c7:77:bd:30:70:e2:11:0c:b7:40:c8:
12:7c:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:44:30 2025 by rpki-client