Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa
File: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (raw, json)
Hash identifier: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=
Subject key identifier: EE:03:6E:A5:38:8A:BE:C0:FE:2F:92:64:70:38:85:23:25:C0:60:9F
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0194258F73F238D8064F938E4A9931481586
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213064
IP address blocks: 2a09:d2c2:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:f2:38:d8:06:4f:93:8e:4a:99:31:48:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee036ea5388abec0fe2f92647038852325c0609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:13:26:9b:83:08:c1:0b:47:55:90:84:81:
fa:01:19:c7:0b:73:0d:5e:01:7c:c5:a2:2e:38:c9:
db:e0:07:1a:eb:00:3e:38:25:a7:a3:bb:82:bf:86:
d3:22:bc:25:92:bd:f1:d2:cf:19:1a:25:56:61:d8:
d1:51:83:7b:b4:ee:f0:67:b9:db:56:1e:4a:ad:ea:
92:32:f5:3b:be:e4:0a:51:c9:cf:4d:27:c1:1d:8d:
d6:7d:c5:2e:f5:8d:06:f0:79:13:df:9f:58:21:b3:
17:bf:ef:4a:90:76:dd:9d:fb:13:a9:40:ae:9f:78:
37:2b:1e:d2:ef:60:da:db:17:a4:81:dc:1a:19:fc:
8c:bf:13:40:82:f4:da:81:e9:02:57:02:b5:c1:ff:
d5:1b:19:68:2f:43:60:8a:74:96:32:47:37:6e:7f:
f9:6e:d3:34:5e:fa:03:d6:48:91:a5:8d:e8:81:bc:
92:3b:0b:54:3f:67:2e:ff:56:b7:1a:1a:49:59:45:
01:77:fe:d9:94:a0:67:bc:ff:0b:76:12:97:90:4a:
03:2a:b7:c1:ca:d2:01:35:0a:71:af:28:51:41:72:
a7:55:ca:66:f6:fa:48:20:83:64:8d:01:04:77:a3:
80:21:2a:53:a3:b2:6a:7d:47:7f:d3:d4:71:59:68:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:6E:A5:38:8A:BE:C0:FE:2F:92:64:70:38:85:23:25:C0:60:9F
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c2:1::/48
Signature Algorithm: sha256WithRSAEncryption
74:8f:76:9a:b7:3e:c1:6a:12:6a:c8:b2:6f:e0:d1:0e:a1:5e:
c9:21:cc:26:ad:f7:a3:d6:fe:a0:1c:56:fb:50:d8:73:e9:11:
45:24:3b:dc:0f:55:c8:35:49:2d:23:94:05:a3:52:e9:9d:e2:
10:28:85:7a:4b:3e:77:a5:45:22:19:a7:3f:66:19:10:39:b1:
89:75:8e:e3:62:85:cf:a4:c5:88:c3:3d:2b:dd:ba:af:a1:33:
1d:dd:cc:25:9e:31:59:cc:0f:37:a9:a0:e4:96:87:19:2e:32:
09:b9:c7:93:06:67:3c:bc:b4:07:d5:b3:fa:fd:9d:d5:a6:e8:
07:89:d2:94:ba:62:1f:bb:0f:e9:cb:21:08:a2:bf:a1:b7:85:
fb:67:c6:17:52:14:d7:10:52:b0:4d:a6:1d:3b:88:da:b5:7f:
29:50:c5:5b:e8:19:07:49:ea:e2:9c:28:9c:83:e4:eb:e7:bd:
93:82:af:28:1c:67:52:0c:e2:93:bd:27:ce:81:e7:eb:e5:36:
22:88:40:3c:74:73:f9:6d:40:60:e1:92:f9:f7:b7:49:92:39:
94:c7:a4:c5:d5:f2:49:ad:15:30:38:33:c1:35:f8:bf:a0:36:
75:19:d8:11:05:fd:85:c0:be:77:1d:e5:76:c8:c6:a5:12:e2:
53:36:84:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj3PyONgGT5OOSpkxSBWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1
NTI2ZmEwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTAzNmVhNTM4OGFiZWMwZmUyZjkyNjQ3MDM4ODUyMzI1YzA2MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJATJpuDCMELR1WQhIH6ARnHC3MN
XgF8xaIuOMnb4Aca6wA+OCWno7uCv4bTIrwlkr3x0s8ZGiVWYdjRUYN7tO7wZ7nb
Vh5KreqSMvU7vuQKUcnPTSfBHY3WfcUu9Y0G8HkT359YIbMXv+9KkHbdnfsTqUCu
n3g3Kx7S72Da2xekgdwaGfyMvxNAgvTagekCVwK1wf/VGxloL0NginSWMkc3bn/5
btM0XvoD1kiRpY3ogbySOwtUP2cu/1a3GhpJWUUBd/7ZlKBnvP8LdhKXkEoDKrfB
ytIBNQpxryhRQXKnVcpm9vpIIINkjQEEd6OAISpTo7JqfUd/09RxWWg2TwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO4DbqU4ir7A/i+SZHA4hSMlwGCfMB8GA1UdIwQY
MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct
NmVkYzFiMjI1NjI1LzEvN2dOdXBUaUt2c0QtTDVKa2NEaUZJeVhBWUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1
LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgnSwgAB
MA0GCSqGSIb3DQEBCwUAA4IBAQB0j3aatz7BahJqyLJv4NEOoV7JIcwmrfej1v6g
HFb7UNhz6RFFJDvcD1XINUktI5QFo1LpneIQKIV6Sz53pUUiGac/ZhkQObGJdY7j
YoXPpMWIwz0r3bqvoTMd3cwlnjFZzA83qaDklocZLjIJuceTBmc8vLQH1bP6/Z3V
pugHidKUumIfuw/pyyEIor+ht4X7Z8YXUhTXEFKwTaYdO4jatX8pUMVb6BkHSeri
nCicg+Tr572Tgq8oHGdSDOKTvSfOgefr5TYiiEA8dHP5bUBg4ZL597dJkjmUx6TF
1fJJrRUwODPBNfi/oDZ1GdgRBf2FwL53HeV2yMalEuJTNoRX
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:59 2025 by rpki-client