Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoB69oQjEGlcP6uPKRLALFs7TnE.roa
File: ZoB69oQjEGlcP6uPKRLALFs7TnE.roa (raw, json)
Hash identifier: mVGsWep9PDOVLkOpO0FIw4oacM4tDCnrpbFrcxVVKwE=
Subject key identifier: 66:80:7A:F6:84:23:10:69:5C:3F:AB:8F:29:12:C0:2C:5B:3B:4E:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522639734CBA23C59FD5F91DE69F8AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoB69oQjEGlcP6uPKRLALFs7TnE.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212503
IP address blocks: 2a0e:b107:1d08::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:63:97:34:cb:a2:3c:59:fd:5f:91:de:69:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66807af6842310695c3fab8f2912c02c5b3b4e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:3c:d3:cf:de:c9:40:a9:0b:4e:d2:72:86:
c9:70:91:d8:94:9e:c3:7b:e2:9b:29:61:84:a9:69:
c7:8f:c1:63:cb:89:03:2e:d5:40:8f:80:c4:e8:6a:
f3:ed:ef:3a:6a:65:ee:b0:7b:53:4b:a7:15:04:2b:
91:4f:98:60:10:fa:e3:97:8f:63:cb:67:32:d4:73:
bb:24:fc:da:50:74:2c:98:32:ee:52:d9:07:ed:67:
3c:64:d0:6a:1a:c8:51:b2:38:f7:6c:cb:0a:5a:d0:
a2:9c:50:23:15:5f:91:8e:c0:f9:6f:79:4e:1d:86:
df:17:54:64:37:a0:d1:35:1e:35:5d:f2:6f:f0:86:
cf:44:ac:9a:7f:06:18:1c:cf:e4:20:21:95:4e:24:
1d:d6:9a:a7:0f:a1:44:ef:ce:24:36:a3:fc:c9:af:
05:b6:d4:78:c6:bb:00:32:5a:fd:93:0e:68:0e:67:
3e:15:93:41:fa:33:c5:bc:34:fc:f1:ba:77:16:b8:
29:18:02:79:c1:7c:08:3e:40:46:74:f2:02:eb:12:
a6:48:96:f3:27:37:d9:9b:03:22:4c:9f:e2:70:c6:
36:b9:36:6c:9d:45:ea:56:11:b8:e7:17:38:b3:93:
0b:d4:06:0f:71:f9:cd:0d:be:de:98:b3:0c:7c:f0:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:7A:F6:84:23:10:69:5C:3F:AB:8F:29:12:C0:2C:5B:3B:4E:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoB69oQjEGlcP6uPKRLALFs7TnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d08::/45
Signature Algorithm: sha256WithRSAEncryption
93:d3:39:c5:14:59:38:c6:63:2b:7a:e2:53:fb:c0:3a:bc:89:
8e:3c:2f:0d:37:6a:4c:0c:6a:87:88:56:5a:6f:5f:f6:4b:e5:
e4:63:4e:3e:19:e3:72:f4:7c:8f:e5:a8:3a:e5:c6:c6:96:85:
15:af:31:f3:85:9b:5c:36:c8:18:bb:c8:d2:20:9f:1d:ff:c7:
a6:bc:8e:2b:e4:51:96:76:32:9f:08:b3:60:08:26:29:52:7c:
92:d2:de:3d:1c:4e:81:11:38:9c:83:58:17:77:c7:ed:e1:39:
26:b6:6b:92:89:99:a7:d2:05:eb:af:46:d4:d3:fd:f1:cb:ab:
c5:90:b7:54:99:44:51:aa:4a:87:41:1b:27:ab:95:11:8a:a5:
34:75:80:1e:4f:85:6c:29:be:58:d5:b3:31:ac:6b:04:6b:49:
de:d1:ec:c3:04:c7:0c:00:be:af:b5:c1:c2:64:bf:7d:d7:4a:
7f:2a:17:ca:f1:00:d4:1c:91:16:38:ac:ac:dd:01:55:48:42:
6d:a8:ef:b3:b1:10:fb:64:59:44:32:ba:20:ef:b0:67:e7:b3:
7f:56:6a:b3:ff:65:7d:d4:29:e9:d1:b5:61:15:21:1c:2a:af:
0d:9d:5d:6b:f0:dc:06:1e:46:f8:5a:02:4a:26:74:fc:18:81:
6e:8b:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:40 2025 by rpki-client