Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/zL35t8BDN0UWabYFAdJ0x4epcpI.roa
File: zL35t8BDN0UWabYFAdJ0x4epcpI.roa (raw, json)
Hash identifier: DYmX6mp+L+x4VSU55VF4vZk7Ov467YqbeIVwbMaSCO4=
Subject key identifier: CC:BD:F9:B7:C0:43:37:45:16:69:B6:05:01:D2:74:C7:87:A9:72:92
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01950AAAD4FFB796260CFD578B0695E25DCE
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/zL35t8BDN0UWabYFAdJ0x4epcpI.roa
Signing time: Sat 15 Feb 2025 17:32:02 +0000
ROA not before: Sat 15 Feb 2025 17:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80:2::/48 maxlen: 48
2a09:2b80:3::/48 maxlen: 48
2a09:2b80:4::/48 maxlen: 48
2a09:2b80:5::/48 maxlen: 48
2a09:2b80:6::/48 maxlen: 48
2a09:2b80:7::/48 maxlen: 48
2a09:2b80:8::/48 maxlen: 48
2a09:2b80:9::/48 maxlen: 48
2a09:2b80:10::/48 maxlen: 48
2a09:2b80:12::/48 maxlen: 48
2a09:2b80:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0a:aa:d4:ff:b7:96:26:0c:fd:57:8b:06:95:e2:5d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Feb 15 17:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccbdf9b7c04337451669b60501d274c787a97292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:6d:6e:fb:9c:72:53:3a:18:19:26:99:ad:
c6:38:3d:1e:3d:8c:af:49:a9:71:44:86:b5:a2:04:
37:5c:42:7b:da:1f:28:8a:f6:f6:b9:73:67:78:07:
b2:6e:33:8c:9d:11:df:7e:40:e4:d2:a6:8c:2a:d4:
9c:e1:09:c2:29:50:c2:2f:4a:8b:9e:9d:f1:67:df:
7a:72:bb:42:33:14:03:11:a3:19:d3:c9:09:6a:72:
21:18:4c:03:c8:21:c0:91:13:63:07:e8:24:ea:f8:
ff:8d:87:a1:e2:17:ae:23:45:ee:b8:cf:d7:ed:85:
63:84:17:c2:31:46:b6:c3:c1:b7:b7:83:b3:11:79:
bd:4b:68:bf:2f:03:b6:25:0c:49:b6:5d:66:2a:44:
d5:55:58:10:6b:06:17:7a:70:83:c9:a8:9b:f2:cf:
d9:db:0e:12:69:3e:7e:ba:6d:8b:e9:69:2e:13:32:
c8:24:e2:1c:77:1e:5a:ea:b5:36:11:82:64:1c:1d:
4b:e4:ed:c6:6c:5d:33:25:dc:c2:8f:e0:29:54:2a:
e1:9e:54:ee:94:89:3b:d1:61:c8:6a:b1:2b:6d:04:
9c:e7:a9:3b:d6:62:47:08:49:d6:53:49:fc:e4:64:
66:f9:a7:6d:6e:de:00:20:5f:d6:92:6c:89:25:0c:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:F9:B7:C0:43:37:45:16:69:B6:05:01:D2:74:C7:87:A9:72:92
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/zL35t8BDN0UWabYFAdJ0x4epcpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:2::-2a09:2b80:9:ffff:ffff:ffff:ffff:ffff
2a09:2b80:10::/48
2a09:2b80:12::/47
Signature Algorithm: sha256WithRSAEncryption
af:2d:64:28:d3:87:4d:22:b7:9d:08:e3:7a:93:44:ff:8c:48:
ed:12:6b:34:0b:91:e0:2d:5a:99:7f:2f:15:a1:74:7b:14:82:
e0:02:ee:ee:b7:a1:35:a7:71:f3:f4:ad:41:77:50:8c:df:51:
bf:d1:42:1e:d4:73:a2:d9:96:b5:36:30:c5:d8:30:12:b6:67:
92:3e:ef:71:65:b0:43:13:02:19:20:57:ef:5b:bc:ba:08:55:
1c:7a:5f:fa:96:40:8c:0d:00:5b:69:51:7a:54:08:07:92:d6:
a4:70:25:62:87:c7:72:c4:28:af:0c:7b:b5:88:b6:5c:e2:99:
ac:21:66:40:aa:05:7d:15:77:fa:fb:bc:5c:c0:dd:18:a5:4f:
d1:f0:56:02:4f:00:a7:88:6b:d0:2f:87:04:e6:8f:13:98:74:
62:81:e8:d9:9f:9b:31:73:fa:c9:ca:4b:81:b5:e8:e5:fc:a5:
58:14:48:cb:39:b2:ac:bf:02:7f:b1:a1:f9:74:a4:92:a8:b3:
fe:1e:6d:47:fe:b7:3e:51:9d:b6:54:4b:2f:44:26:fd:45:24:
0a:cc:6c:c0:63:d3:4b:ea:ad:36:f0:46:fb:c6:eb:bf:78:90:
e2:4a:17:c0:e1:0c:85:4a:47:1c:12:a3:ad:b5:57:97:39:a5:
66:1f:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:14 2025 by rpki-client