Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zh8pk-ZS4JbeS0jgjdcEyxudeJE.roa
File: Zh8pk-ZS4JbeS0jgjdcEyxudeJE.roa (raw, json)
Hash identifier: gSHb5XQVeNYaMUIx7wiVp/4ixi+ijVgJCssO3fQYghE=
Subject key identifier: 66:1F:29:93:E6:52:E0:96:DE:4B:48:E0:8D:D7:04:CB:1B:9D:78:91
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223D52D57421FEB4824850A63F4B9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zh8pk-ZS4JbeS0jgjdcEyxudeJE.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210337
IP address blocks: 2a0e:b107:9f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 19:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3d:52:d5:74:21:fe:b4:82:48:50:a6:3f:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661f2993e652e096de4b48e08dd704cb1b9d7891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:1d:5a:1e:19:84:99:f8:83:56:d4:f5:50:
4c:6d:bd:fd:99:30:3b:60:bb:fa:14:6d:b9:1e:d8:
3c:e0:80:37:75:4b:81:fd:f9:74:a1:a0:e5:1d:f4:
5e:a4:c2:61:dc:e6:94:eb:3b:0a:ce:d4:f8:81:86:
e8:76:fa:b1:35:22:ce:93:a1:01:2e:dd:bf:2b:51:
9a:de:6a:dd:56:c9:a8:64:7e:c3:29:51:66:fd:b5:
5e:4e:7e:69:63:c2:5a:9b:88:3e:e1:ad:8c:2a:51:
70:39:1c:47:47:1b:2d:ca:6d:ca:11:c3:1a:c5:dc:
e3:79:f6:4c:14:c2:c4:be:34:cb:7c:ae:fa:06:28:
6e:80:aa:f7:d4:68:94:0e:66:08:1c:3d:2c:09:de:
67:ba:9b:ef:a4:13:dd:84:a3:48:71:65:f4:44:b2:
e5:75:a9:8c:8b:18:de:10:e1:c7:cc:41:ae:55:dc:
a0:dd:72:8e:5e:cb:96:92:78:42:a5:98:94:41:fa:
4d:19:e9:db:08:d5:76:ae:38:a2:a1:08:e3:b4:97:
bf:87:ea:51:6e:48:f3:d9:22:ee:f5:2f:5a:20:a1:
ba:cf:5a:f4:b5:d0:33:4c:0a:02:4d:e4:08:23:e5:
bc:3d:53:62:6f:44:6d:9a:d2:92:22:e6:a4:f4:3c:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:29:93:E6:52:E0:96:DE:4B:48:E0:8D:D7:04:CB:1B:9D:78:91
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zh8pk-ZS4JbeS0jgjdcEyxudeJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:9f7::/48
Signature Algorithm: sha256WithRSAEncryption
7f:dc:51:c7:a9:11:32:fb:61:36:33:32:3d:ba:8b:ac:e9:a9:
71:9f:db:cb:f4:49:2c:90:cd:63:9a:3c:5e:2c:c4:cb:ea:89:
00:42:43:34:18:63:6d:99:bf:8a:b3:0c:dc:22:82:5f:02:b0:
02:3c:b9:4e:a5:02:c7:ca:06:ba:96:e7:eb:65:27:8c:72:8d:
43:dc:97:99:5a:f1:fc:64:05:f3:7c:69:98:25:15:f7:bc:20:
a4:fe:46:15:d5:f0:55:bb:ca:96:46:39:09:67:46:c9:a3:1e:
2b:90:22:b8:c2:52:1c:90:f3:a5:30:d0:0d:77:98:1d:c5:44:
2b:76:c0:39:f6:df:98:94:c6:47:14:b0:ff:80:87:1e:19:f9:
0e:bf:58:a0:ab:cb:e2:b6:4b:eb:bb:0f:ae:7b:c0:b3:bf:04:
b7:be:aa:51:d4:cb:af:80:51:4a:a5:35:be:43:8c:a5:a6:fd:
2a:bc:a3:dc:eb:f0:73:e2:a3:83:71:b1:27:f5:25:0f:f6:f9:
15:c4:8e:5f:dd:5d:43:37:ce:28:0b:bb:ff:48:24:fc:d2:5c:
5a:7a:16:29:5c:45:b5:9e:6e:5c:58:9e:74:68:30:52:7e:f8:
71:e6:28:63:d2:b5:aa:00:a1:64:ce:65:a6:0e:a3:e9:d3:aa:
a2:b3:f7:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIj1S1XQh/rSCSFCmP0ubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjFmMjk5M2U2NTJlMDk2ZGU0YjQ4ZTA4ZGQ3MDRjYjFiOWQ3ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEdWh4ZhJn4g1bU9VBMbb39mTA7
YLv6FG25Htg84IA3dUuB/fl0oaDlHfRepMJh3OaU6zsKztT4gYbodvqxNSLOk6EB
Lt2/K1Ga3mrdVsmoZH7DKVFm/bVeTn5pY8Jam4g+4a2MKlFwORxHRxstym3KEcMa
xdzjefZMFMLEvjTLfK76BihugKr31GiUDmYIHD0sCd5nupvvpBPdhKNIcWX0RLLl
damMixjeEOHHzEGuVdyg3XKOXsuWknhCpZiUQfpNGenbCNV2rjiioQjjtJe/h+pR
bkjz2SLu9S9aIKG6z1r0tdAzTAoCTeQII+W8PVNib0RtmtKSIuak9DwOuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGYfKZPmUuCW3ktI4I3XBMsbnXiRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWmg4cGstWlM0SmJlUzBqZ2pkY0V5eHVkZUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwn3
MA0GCSqGSIb3DQEBCwUAA4IBAQB/3FHHqREy+2E2MzI9uous6alxn9vL9EkskM1j
mjxeLMTL6okAQkM0GGNtmb+KswzcIoJfArACPLlOpQLHyga6lufrZSeMco1D3JeZ
WvH8ZAXzfGmYJRX3vCCk/kYV1fBVu8qWRjkJZ0bJox4rkCK4wlIckPOlMNANd5gd
xUQrdsA59t+YlMZHFLD/gIceGfkOv1igq8vitkvruw+ue8CzvwS3vqpR1MuvgFFK
pTW+Q4ylpv0qvKPc6/Bz4qODcbEn9SUP9vkVxI5f3V1DN84oC7v/SCT80lxaehYp
XEW1nm5cWJ50aDBSfvhx5ihj0rWqAKFkzmWmDqPp06qis/cz
-----END CERTIFICATE-----
Generated at Wed Mar 12 04:38:48 2025 by rpki-client