Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/ZwHdEqulD1m_3ODalRm8KKpV4D8.roa
File: ZwHdEqulD1m_3ODalRm8KKpV4D8.roa (raw, json)
Hash identifier: AgKObURVZ2No/6B5xbYFDC7jFhFUnrv7+FottsPk3vg=
Subject key identifier: 67:01:DD:12:AB:A5:0F:59:BF:DC:E0:DA:95:19:BC:28:AA:55:E0:3F
Certificate issuer: /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial: 0195185425E0B00A117436E213C49602C6D0
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/ZwHdEqulD1m_3ODalRm8KKpV4D8.roa
Signing time: Tue 18 Feb 2025 09:12:02 +0000
ROA not before: Tue 18 Feb 2025 09:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.68.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:54:25:e0:b0:0a:11:74:36:e2:13:c4:96:02:c6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Validity
Not Before: Feb 18 09:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6701dd12aba50f59bfdce0da9519bc28aa55e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:3a:70:2f:0f:e5:83:40:c8:5a:f2:63:0d:
63:86:4c:1b:69:41:52:f6:2d:c5:f1:64:b4:03:9a:
30:74:28:60:4c:42:71:7e:b6:ed:bb:2d:a8:0e:42:
ee:68:28:27:91:be:1d:e8:b6:de:13:f0:75:97:25:
da:24:3b:3e:9b:d9:c4:2f:3f:d7:8b:41:b8:59:e7:
92:0c:68:f5:53:65:d8:be:ea:eb:ba:49:d0:f6:fb:
c5:58:b0:2c:33:ed:d7:20:a3:18:65:12:17:55:de:
20:91:dc:a9:69:41:ee:46:f2:a7:7e:29:e7:7d:84:
11:41:72:6e:10:45:67:6c:03:49:6a:8f:ec:21:2a:
d4:f9:e3:93:45:dd:67:8a:78:33:a6:ac:2c:03:e5:
4c:3e:e0:f2:49:0d:56:4b:b6:8f:0f:b5:07:43:eb:
4c:44:32:44:83:89:b7:f4:a9:68:bf:23:3d:cb:4f:
d7:99:02:79:41:19:97:59:e8:3b:8a:e7:f3:35:b9:
f9:b0:5b:31:c5:c9:d2:83:e7:8b:80:96:d2:36:eb:
c0:a8:e6:02:3f:3f:f8:11:70:00:d6:8e:e7:b7:3f:
65:f0:9d:22:af:6c:09:da:64:f5:95:08:b4:46:31:
ff:6a:37:47:59:b7:ff:ec:16:aa:8d:04:7f:1d:dc:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:DD:12:AB:A5:0F:59:BF:DC:E0:DA:95:19:BC:28:AA:55:E0:3F
X509v3 Authority Key Identifier:
keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/ZwHdEqulD1m_3ODalRm8KKpV4D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:81:06:aa:cf:39:5e:80:88:9a:bf:ee:5a:30:42:e2:1b:22:
5c:e9:a0:f0:bb:ae:fe:22:e5:35:b4:54:29:ef:66:eb:f5:6b:
be:d1:9f:6c:1d:d9:39:1d:5f:83:ff:45:76:f2:fc:05:28:a8:
b4:ed:06:b2:1e:ea:85:31:5f:56:1c:1a:be:3e:94:56:09:56:
c5:97:ab:de:8d:3e:aa:ee:b2:d2:c0:d8:32:cb:19:99:aa:c1:
5b:22:60:0e:f8:01:4b:79:45:05:a8:28:28:bc:f2:28:16:aa:
dd:01:35:a8:11:31:15:9d:af:9b:db:4a:63:2c:f4:4f:49:b4:
9c:63:d0:f7:b9:a1:27:70:fe:fd:e3:76:ef:d5:1e:50:ad:7d:
5d:58:ce:46:2e:6e:6b:70:de:e5:11:32:9b:98:1f:35:2b:e8:
7f:a0:fb:a0:60:a4:30:35:bb:07:28:47:25:83:6a:17:e7:04:
f9:98:b1:88:7b:8e:33:3d:53:bd:a8:c3:e5:40:99:5b:61:7c:
7b:b4:e6:66:b7:bf:cd:db:78:53:f8:67:73:15:19:cf:2c:15:
93:02:41:59:72:db:7c:6e:7f:c6:de:94:a1:41:a4:f8:31:57:
34:90:07:6f:9f:5b:c3:7f:2b:98:d2:cc:0b:c3:95:cd:91:a9:
5f:cb:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:47 2025 by rpki-client