Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/zag9EMVMQmmPCVwwU3_0aOJuzic.roa
File: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (raw, json)
Hash identifier: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=
Subject key identifier: CD:A8:3D:10:C5:4C:42:69:8F:09:5C:30:53:7F:F4:68:E2:6E:CE:27
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01941F8C795E6120B078034C9E5C1181B373
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/zag9EMVMQmmPCVwwU3_0aOJuzic.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60115
IP address blocks: 2a07:2918:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:79:5e:61:20:b0:78:03:4c:9e:5c:11:81:b3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda83d10c54c42698f095c30537ff468e26ece27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:30:8d:1d:8f:07:2b:04:c4:f0:52:da:a9:
53:bb:9a:41:7c:94:fa:b0:bb:eb:c4:54:21:9b:1d:
c6:8e:07:9d:b1:ca:64:10:1a:33:51:04:52:af:04:
36:59:e8:64:04:8d:bc:a1:ab:c1:a4:e8:fb:d4:a5:
a7:b5:b1:0c:dc:41:52:bd:55:03:be:bb:25:c4:70:
0f:49:ce:20:7d:61:a9:6f:4a:3a:c9:72:e0:80:22:
5b:63:c2:a8:83:3c:e0:62:7d:ff:df:da:34:5a:a7:
31:1b:74:2f:53:ea:f0:cd:25:87:7b:d1:e5:cf:2b:
ef:77:b1:e9:14:0d:6c:be:00:c0:4c:f9:7c:04:c2:
3d:05:e5:bd:8f:34:bc:88:ef:ad:9b:21:ce:48:d8:
0a:02:5e:a1:f2:44:6d:35:b1:f9:fe:a8:18:aa:f2:
09:6b:0e:14:ef:a0:08:34:5b:a6:2e:43:e8:48:2c:
02:b3:f5:ee:6f:31:57:2a:5a:67:a6:0c:40:0a:73:
a1:17:7f:ee:78:09:2a:bc:42:be:8c:70:20:f9:91:
4c:fd:4a:22:0b:2a:d4:72:e0:5d:23:dc:7d:e0:a3:
96:4f:58:08:26:ea:83:99:89:f1:c2:e2:3d:ae:6b:
4e:4e:a9:cb:11:38:d7:5a:c3:a0:a0:0d:0e:1a:91:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:3D:10:C5:4C:42:69:8F:09:5C:30:53:7F:F4:68:E2:6E:CE:27
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/zag9EMVMQmmPCVwwU3_0aOJuzic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2918:6000::/36
Signature Algorithm: sha256WithRSAEncryption
84:44:df:02:0c:29:33:ad:65:5d:91:d3:0e:36:f1:d0:18:ed:
23:7f:c9:43:07:a5:a6:77:e3:09:f6:10:e1:06:06:36:46:bd:
dd:fe:2e:ee:be:c7:89:68:69:36:d3:0b:5f:9e:a3:2d:e0:c9:
b4:a8:14:10:42:d0:96:3e:24:0e:f6:95:81:02:b0:e4:71:1a:
a7:cb:7a:b8:3f:ec:9f:50:55:dc:41:bf:29:01:f8:25:ef:09:
da:cc:15:bc:6b:8b:26:12:11:db:b3:9d:3a:72:f4:ac:91:5a:
a5:32:47:27:23:27:48:46:18:a6:69:3f:d7:1d:8c:15:06:7f:
86:b7:97:79:3e:61:57:4a:2e:f0:28:f4:a7:29:ee:82:ff:2c:
59:c8:78:53:46:b5:d2:33:f2:34:d0:f5:1c:03:4d:6b:0c:9f:
39:37:9d:0a:c6:fc:3a:ea:69:40:a0:f2:3d:9c:81:4a:84:06:
ac:20:44:bc:c6:30:f3:ce:14:de:be:fa:41:cc:f8:36:bc:0d:
5e:11:be:1d:f3:cc:09:98:b1:63:86:6f:87:02:43:d7:f3:3e:
1b:3c:0f:ac:7b:6e:ac:1f:13:62:56:22:f2:97:a5:3a:cf:a6:
10:b2:64:b0:e8:e4:36:e9:dd:d7:a6:28:87:dd:19:db:bf:42:
72:23:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:23:40 2025 by rpki-client