Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/zeAS4VBfD_G5NUFuPYAo5tKUnP8.roa
File: zeAS4VBfD_G5NUFuPYAo5tKUnP8.roa (raw, json)
Hash identifier: QzdKXOIOOEX47I5I7UUkiMcrV6dR6cadethausZBxlY=
Subject key identifier: CD:E0:12:E1:50:5F:0F:F1:B9:35:41:6E:3D:80:28:E6:D2:94:9C:FF
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D027EFD8D15D5FFF5C67EEF8F172
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/zeAS4VBfD_G5NUFuPYAo5tKUnP8.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50529
IP address blocks: 2a05:3d40::/29 maxlen: 29
2a05:b440::/29 maxlen: 29
2a05:c500::/29 maxlen: 29
2a06:5c00::/29 maxlen: 29
2a06:77c0::/29 maxlen: 29
2a06:b180::/29 maxlen: 29
2a07:3700::/29 maxlen: 29
2a07:bc40::/29 maxlen: 29
2a07:cc40::/29 maxlen: 29
2a09:a80::/29 maxlen: 29
2a09:1100::/29 maxlen: 29
2a09:1200::/29 maxlen: 29
2a09:2380::/29 maxlen: 29
2a09:2a80::/29 maxlen: 29
2a09:2c80::/29 maxlen: 29
2a09:2d00::/29 maxlen: 29
2a09:3280::/29 maxlen: 29
2a09:3480::/29 maxlen: 29
2a09:3780::/29 maxlen: 29
2a09:3f80::/29 maxlen: 29
2a09:4000::/29 maxlen: 29
2a09:4100::/29 maxlen: 29
2a09:4a00::/29 maxlen: 29
2a09:5200::/29 maxlen: 29
2a09:5280::/29 maxlen: 29
2a09:7980::/29 maxlen: 29
2a09:7c80::/29 maxlen: 29
2a09:8100::/29 maxlen: 29
2a09:8800::/29 maxlen: 29
2a09:8e00::/29 maxlen: 29
2a09:8f00::/29 maxlen: 29
2a09:8f40::/29 maxlen: 29
2a09:91c0::/29 maxlen: 29
2a09:9480::/29 maxlen: 29
2a09:9640::/29 maxlen: 29
2a09:9800::/29 maxlen: 29
2a09:9d80::/29 maxlen: 29
2a09:a880::/29 maxlen: 29
2a09:b980::/29 maxlen: 29
2a09:cb40::/29 maxlen: 29
2a09:d440::/29 maxlen: 29
2a09:e000::/29 maxlen: 29
2a09:ed00::/29 maxlen: 29
2a09:f500::/29 maxlen: 29
2a0a:6c0::/29 maxlen: 29
2a0a:780::/29 maxlen: 29
2a0a:1f80::/29 maxlen: 29
2a0a:c500::/29 maxlen: 29
2a0a:ebc0::/29 maxlen: 29
2a0b:5780::/29 maxlen: 29
2a0b:9c80::/29 maxlen: 29
2a0b:ac80::/29 maxlen: 29
2a0b:f340::/29 maxlen: 29
2a0c:3740::/29 maxlen: 29
2a0c:4a80::/29 maxlen: 29
2a0c:5580::/29 maxlen: 29
2a0c:8580::/29 maxlen: 29
2a0c:a280::/29 maxlen: 29
2a0d:1800::/29 maxlen: 29
2a0d:4840::/29 maxlen: 29
2a0d:64c0::/29 maxlen: 29
2a0d:8740::/29 maxlen: 29
2a0d:d2c0::/29 maxlen: 29
2a0d:e040::/29 maxlen: 29
2a0d:fac0::/29 maxlen: 29
2a0e:2340::/29 maxlen: 29
2a0e:2bc0::/29 maxlen: 29
2a0e:4e40::/29 maxlen: 29
2a0e:4ec0::/29 maxlen: 29
2a0e:5500::/29 maxlen: 29
2a0e:61c0::/29 maxlen: 29
2a0e:6d80::/29 maxlen: 29
2a0e:7840::/29 maxlen: 29
2a0e:7940::/29 maxlen: 29
2a0e:86c0::/29 maxlen: 29
2a0e:90c0::/29 maxlen: 29
2a0e:9600::/29 maxlen: 29
2a0e:a040::/29 maxlen: 29
2a0e:a340::/29 maxlen: 29
2a0e:a740::/29 maxlen: 29
2a0e:b840::/29 maxlen: 29
2a0e:bc80::/29 maxlen: 29
2a0e:bcc0::/29 maxlen: 29
2a0e:bd40::/29 maxlen: 29
2a0e:c540::/29 maxlen: 29
2a0e:c8c0::/29 maxlen: 29
2a0e:cc40::/29 maxlen: 29
2a0e:d900::/29 maxlen: 29
2a0e:da00::/29 maxlen: 29
2a0e:ea40::/29 maxlen: 29
2a0e:fbc0::/29 maxlen: 29
2a0f:880::/29 maxlen: 29
2a0f:ec0::/29 maxlen: 29
2a0f:1280::/29 maxlen: 29
2a0f:26c0::/29 maxlen: 29
2a0f:4140::/29 maxlen: 29
2a0f:5600::/29 maxlen: 29
2a0f:5a00::/29 maxlen: 29
2a0f:65c0::/29 maxlen: 29
2a0f:9e40::/29 maxlen: 29
2a0f:aa00::/29 maxlen: 29
2a0f:b600::/29 maxlen: 29
2a0f:b800::/29 maxlen: 29
2a0f:c880::/29 maxlen: 29
2a12:4bc0::/29 maxlen: 29
2a12:4cc0::/29 maxlen: 29
2a12:4d40::/29 maxlen: 29
2a12:4dc0::/29 maxlen: 29
2a12:4fc0::/29 maxlen: 29
2a12:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d0:27:ef:d8:d1:5d:5f:ff:5c:67:ee:f8:f1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde012e1505f0ff1b935416e3d8028e6d2949cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:ef:1d:96:6d:4f:17:f3:fd:60:22:3c:04:
7a:21:c4:5f:68:10:e2:b4:3e:96:b3:91:c9:c9:1a:
dc:09:56:b9:4e:03:e4:48:98:ea:68:64:55:99:09:
aa:6b:6b:8d:6f:59:cd:08:ea:17:34:b2:37:3e:12:
b5:75:6f:52:a6:91:14:b3:b5:da:69:2f:2f:98:c7:
bb:4f:77:70:4a:22:2f:c8:82:6d:53:77:1e:66:ff:
9b:cd:04:13:76:06:aa:87:0f:27:8c:18:6c:67:56:
74:ea:d5:6c:ea:37:08:12:53:52:34:66:e5:0a:ca:
9c:df:d4:2c:21:fc:ce:c4:38:3b:a8:95:f5:88:77:
92:ee:f9:cf:6d:ab:0e:64:a4:32:6b:b0:2d:73:69:
79:e0:4c:c7:39:77:a4:0c:0d:a4:1d:db:20:4b:e6:
7f:75:e8:07:54:88:11:88:73:52:7e:d5:ed:eb:dd:
1e:e0:6d:e2:73:8a:8e:da:5a:79:9a:82:be:08:26:
8d:c4:dd:50:0f:05:bd:01:6f:af:dc:2c:62:b1:3b:
0a:73:86:38:f5:b2:02:a5:a1:be:c6:c3:0b:1d:63:
40:99:eb:f1:03:6f:d3:b2:8e:e4:eb:a3:d4:b3:41:
a5:74:76:01:b8:13:00:78:1f:c7:54:6d:dd:db:f0:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:12:E1:50:5F:0F:F1:B9:35:41:6E:3D:80:28:E6:D2:94:9C:FF
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/zeAS4VBfD_G5NUFuPYAo5tKUnP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3d40::/29
2a05:b440::/29
2a05:c500::/29
2a06:5c00::/29
2a06:77c0::/29
2a06:b180::/29
2a07:3700::/29
2a07:bc40::/29
2a07:cc40::/29
2a09:a80::/29
2a09:1100::/29
2a09:1200::/29
2a09:2380::/29
2a09:2a80::/29
2a09:2c80::/29
2a09:2d00::/29
2a09:3280::/29
2a09:3480::/29
2a09:3780::/29
2a09:3f80::/29
2a09:4000::/29
2a09:4100::/29
2a09:4a00::/29
2a09:5200::/29
2a09:5280::/29
2a09:7980::/29
2a09:7c80::/29
2a09:8100::/29
2a09:8800::/29
2a09:8e00::/29
2a09:8f00::/29
2a09:8f40::/29
2a09:91c0::/29
2a09:9480::/29
2a09:9640::/29
2a09:9800::/29
2a09:9d80::/29
2a09:a880::/29
2a09:b980::/29
2a09:cb40::/29
2a09:d440::/29
2a09:e000::/29
2a09:ed00::/29
2a09:f500::/29
2a0a:6c0::/29
2a0a:780::/29
2a0a:1f80::/29
2a0a:c500::/29
2a0a:ebc0::/29
2a0b:5780::/29
2a0b:9c80::/29
2a0b:ac80::/29
2a0b:f340::/29
2a0c:3740::/29
2a0c:4a80::/29
2a0c:5580::/29
2a0c:8580::/29
2a0c:a280::/29
2a0d:1800::/29
2a0d:4840::/29
2a0d:64c0::/29
2a0d:8740::/29
2a0d:d2c0::/29
2a0d:e040::/29
2a0d:fac0::/29
2a0e:2340::/29
2a0e:2bc0::/29
2a0e:4e40::/29
2a0e:4ec0::/29
2a0e:5500::/29
2a0e:61c0::/29
2a0e:6d80::/29
2a0e:7840::/29
2a0e:7940::/29
2a0e:86c0::/29
2a0e:90c0::/29
2a0e:9600::/29
2a0e:a040::/29
2a0e:a340::/29
2a0e:a740::/29
2a0e:b840::/29
2a0e:bc80::/29
2a0e:bcc0::/29
2a0e:bd40::/29
2a0e:c540::/29
2a0e:c8c0::/29
2a0e:cc40::/29
2a0e:d900::/29
2a0e:da00::/29
2a0e:ea40::/29
2a0e:fbc0::/29
2a0f:880::/29
2a0f:ec0::/29
2a0f:1280::/29
2a0f:26c0::/29
2a0f:4140::/29
2a0f:5600::/29
2a0f:5a00::/29
2a0f:65c0::/29
2a0f:9e40::/29
2a0f:aa00::/29
2a0f:b600::/29
2a0f:b800::/29
2a0f:c880::/29
2a12:4bc0::/29
2a12:4cc0::/29
2a12:4d40::/29
2a12:4dc0::/29
2a12:4fc0::/29
2a12:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:02:18:68:e5:3d:90:5f:43:3f:d8:27:ed:12:ae:20:7c:1c:
3d:b7:d7:5d:de:7c:fb:e2:80:64:d1:3e:30:8a:b2:ed:7d:66:
79:a1:ec:fd:90:bb:5a:78:6e:40:69:5b:b7:ad:41:17:6d:7f:
da:bf:04:fd:02:b6:61:30:19:01:20:1b:a8:fe:5c:b3:56:ac:
ff:f6:6e:df:cc:c7:77:dd:c3:f5:18:74:a2:be:34:d7:24:15:
a7:49:90:a3:c0:14:1d:06:c6:4a:6d:2e:2d:4e:ef:fd:06:a9:
91:d4:c9:98:52:f9:e1:96:ae:72:f8:39:08:02:53:34:88:ac:
63:1f:cc:4d:ae:94:42:7a:0f:a4:e8:c7:e3:7d:b6:13:da:2c:
49:ff:fb:e8:88:20:28:b4:5a:2d:5e:64:a6:a8:07:0a:da:f5:
97:9d:c4:7b:5f:7a:5a:ce:62:d2:24:fe:37:29:92:8e:e8:8e:
b4:d1:04:69:ed:a7:29:59:6c:bc:bf:f2:56:69:29:4b:5d:cb:
4f:17:65:dc:8f:88:11:08:ee:bc:aa:db:96:90:d8:37:cc:2b:
1c:d6:b4:65:fa:14:82:9c:07:10:81:14:49:92:86:3d:ed:ce:
87:60:e2:d3:f4:5e:8a:c9:56:6b:91:89:6c:66:ad:31:61:a6:
d4:1e:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:48 2025 by rpki-client