Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/MzdQsDB1AACOG2EyiBlrqIPuVdY.roa
File: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (raw, json)
Hash identifier: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=
Subject key identifier: 33:37:50:B0:30:75:00:00:8E:1B:61:32:88:19:6B:A8:83:EE:55:D6
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 01946A1F394900726ABAE46041364323E3EC
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/MzdQsDB1AACOG2EyiBlrqIPuVdY.roa
Signing time: Wed 15 Jan 2025 13:20:18 +0000
ROA not before: Wed 15 Jan 2025 13:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 2001:67c:fc4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:1f:39:49:00:72:6a:ba:e4:60:41:36:43:23:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Jan 15 13:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333750b0307500008e1b613288196ba883ee55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:9f:6f:d9:23:a4:72:2c:92:12:3c:31:3d:
48:bb:4a:ab:73:bf:b9:60:4c:ec:e5:b1:f5:f9:d4:
7a:45:5d:39:6f:dc:da:de:6f:00:be:ff:58:42:10:
26:65:cd:0b:89:27:29:51:d9:e0:81:eb:57:39:a3:
11:d6:9b:95:88:e2:69:a6:ba:6a:ab:6f:eb:55:27:
01:07:1b:2c:74:c6:06:4b:ee:13:41:d1:76:9c:2b:
3e:5b:04:2e:39:9f:bb:32:ca:6c:ba:bd:da:b6:c6:
1e:d2:21:4f:b9:ed:f5:dc:49:10:27:98:34:2d:13:
03:54:d4:4c:c2:1d:f0:34:17:6f:20:9b:89:ed:3e:
e9:ff:74:dc:ba:22:5c:2d:d2:54:a5:01:a0:75:01:
97:8a:4f:3e:d0:d3:fd:d1:83:db:ba:ed:cc:bf:9e:
d7:ce:a4:cd:ff:61:12:3c:75:21:33:d4:72:02:5a:
18:6e:90:78:38:f4:03:69:bc:e0:dc:f0:83:ac:aa:
c9:de:33:69:1b:2a:f5:16:d8:ab:7c:e5:c0:b8:c1:
56:bd:a4:6f:08:c0:03:6d:3c:00:1a:9e:91:55:b5:
55:0f:b6:d4:de:e3:4a:79:58:76:f9:c5:f3:97:23:
5d:9f:e3:bc:f1:be:54:86:81:f9:5a:f9:3a:cf:f3:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:50:B0:30:75:00:00:8E:1B:61:32:88:19:6B:A8:83:EE:55:D6
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/MzdQsDB1AACOG2EyiBlrqIPuVdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fc4::/48
Signature Algorithm: sha256WithRSAEncryption
92:8e:98:8f:29:37:ec:88:0f:d2:3e:5d:a2:84:28:35:b9:c7:
01:d4:f9:c7:13:e1:3d:9b:49:80:4b:38:f0:83:5b:08:d5:34:
d4:3b:33:45:f3:4a:2f:1f:d4:dc:1b:c4:9f:1f:e5:5d:dc:54:
61:e2:49:70:61:26:e9:90:24:e0:67:f1:43:6c:6f:16:19:b4:
2f:39:3b:df:4a:d9:43:ae:03:45:b2:c6:95:0d:4c:e0:49:d0:
46:01:8d:99:73:68:a4:c7:a3:5d:75:8e:e9:8b:fc:d6:c1:04:
72:91:10:81:ba:b8:13:92:fd:ce:ed:28:1b:a7:80:95:b5:b9:
d4:ad:b3:d8:4b:ab:38:90:fa:46:02:35:4a:88:06:ed:03:1c:
c5:56:ec:85:a3:8d:19:7a:a2:49:cd:14:6e:13:bb:bf:49:42:
2a:33:cc:3d:6f:97:04:90:d9:ba:12:d5:79:fc:c8:ca:b2:5f:
ec:e2:4c:cb:47:80:ee:4e:7a:fb:3d:f0:50:16:3c:4e:19:01:
58:52:05:5d:15:94:41:8e:eb:ca:c0:a9:4c:d2:5c:2e:06:e1:
97:f8:38:82:50:31:2b:dc:88:12:8a:29:58:e4:d5:ac:05:c8:
5d:6f:5d:e3:91:6d:d1:ee:aa:dc:62:6b:7e:76:50:65:b2:d2:
63:c2:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:43 2025 by rpki-client