Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/Zwk791BjXFiWW_GWZuipoheVevk.roa
File: Zwk791BjXFiWW_GWZuipoheVevk.roa (raw, json)
Hash identifier: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=
Subject key identifier: 67:09:3B:F7:50:63:5C:58:96:5B:F1:96:66:E8:A9:A2:17:95:7A:F9
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 019423D6CC6CAF4AF3BB178217366B2AC97A
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/Zwk791BjXFiWW_GWZuipoheVevk.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204710
IP address blocks: 2a09:2280:61::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cc:6c:af:4a:f3:bb:17:82:17:36:6b:2a:c9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67093bf750635c58965bf19666e8a9a217957af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:ca:c4:aa:63:04:44:0a:72:4a:d4:fb:5b:
c0:d7:d5:29:d4:06:90:79:6a:1b:32:90:8c:68:c4:
69:72:6c:c7:08:96:df:b6:8b:a8:dc:23:8b:0e:f9:
95:95:d4:b2:ca:ce:8e:54:a5:2f:22:1f:d5:a4:71:
c0:e0:39:cc:32:14:98:ce:51:1f:f4:9d:39:64:0b:
ad:5e:e3:7c:4a:34:0f:98:a4:23:a8:91:ac:4c:74:
53:99:15:10:17:47:8e:f9:e2:3a:24:e0:c6:c2:71:
d7:7e:c4:c2:93:3c:2c:26:4e:e6:09:15:e7:ff:e2:
2a:99:f3:23:ae:08:43:cf:41:84:7a:3c:81:dc:4c:
03:fc:f2:af:5e:7e:e6:97:be:bd:f3:68:d5:0f:e6:
27:8b:8e:5d:c2:75:88:28:d5:c8:11:93:d4:c7:67:
e7:da:77:31:80:65:06:44:cc:0b:e8:ea:48:d0:ae:
96:e0:2f:0d:6d:5a:61:ca:e9:cb:b4:3c:7a:c7:37:
f7:9b:9f:b5:f7:3d:ec:a0:0f:a9:f1:ec:7e:e0:f8:
02:38:18:14:d5:59:3c:9a:c1:0c:4d:d4:95:49:0b:
65:55:aa:a4:22:09:52:f5:55:b3:59:e9:8c:19:49:
71:27:df:3d:1b:b2:b5:9e:c9:51:6e:01:b9:c2:9e:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:3B:F7:50:63:5C:58:96:5B:F1:96:66:E8:A9:A2:17:95:7A:F9
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/Zwk791BjXFiWW_GWZuipoheVevk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2280:61::/48
Signature Algorithm: sha256WithRSAEncryption
a5:8d:e3:a6:53:14:32:91:01:db:d2:c2:73:9b:ec:86:58:cf:
a3:82:c3:44:b5:f5:cb:08:a4:d5:67:6c:21:70:aa:d6:6c:e8:
16:9e:a9:3d:19:1a:8b:36:c5:34:08:13:ca:ce:64:c1:4d:c8:
16:d0:13:1a:49:f8:0b:11:16:52:5e:64:2f:9f:54:cf:71:c8:
8c:d1:16:2c:bd:2e:9a:54:99:d9:05:33:33:8c:eb:4a:d1:9f:
78:f6:ca:01:7a:f3:51:fb:00:10:18:0a:57:4d:51:13:53:ab:
14:7e:11:15:50:de:ba:fe:8d:f3:ad:70:07:6c:c7:c0:33:9d:
41:eb:e2:f3:02:c7:e5:35:d8:34:56:89:bd:93:95:70:97:c8:
5b:8c:8b:5f:06:37:30:d9:9c:25:ad:8f:34:30:51:8f:d8:98:
9c:c7:e4:5b:09:c1:9f:4e:3f:b9:53:bd:f1:13:06:d5:a1:6d:
bf:78:ce:14:0f:96:79:6a:df:b9:25:2a:4f:e2:6e:4e:f7:9f:
bc:58:8e:11:56:6d:63:6c:c3:13:c9:f3:98:d0:0a:23:36:cf:
1c:5a:41:06:fb:76:1d:50:f2:08:d5:3e:53:ac:3d:6b:a1:98:
dd:60:bd:d2:10:d1:00:a5:fd:10:6e:0c:d6:6d:e8:81:19:3d:
6c:54:44:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1sxsr0rzuxeCFzZrKsl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzZhZDg3OWM2NDVhZWU5OGFjNGE4OWZjODAwYjlhOTc0
ZTk0MWYwHhcNMjUwMTAxMjE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzA5M2JmNzUwNjM1YzU4OTY1YmYxOTY2NmU4YTlhMjE3OTU3YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfvKxKpjBEQKckrU+1vA19Up1AaQ
eWobMpCMaMRpcmzHCJbftouo3COLDvmVldSyys6OVKUvIh/VpHHA4DnMMhSYzlEf
9J05ZAutXuN8SjQPmKQjqJGsTHRTmRUQF0eO+eI6JODGwnHXfsTCkzwsJk7mCRXn
/+IqmfMjrghDz0GEejyB3EwD/PKvXn7ml76982jVD+Yni45dwnWIKNXIEZPUx2fn
2ncxgGUGRMwL6OpI0K6W4C8NbVphyunLtDx6xzf3m5+19z3soA+p8ex+4PgCOBgU
1Vk8msEMTdSVSQtlVaqkIglS9VWzWemMGUlxJ989G7K1nslRbgG5wp7cOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGcJO/dQY1xYllvxlmboqaIXlXr5MB8GA1UdIwQY
MBaAFIw2rYecZFrumKxKifyAC5qXTpQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4Yjkt
MTRlNmVjMDIwYmZhLzEvWndrNzkxQmpYRmlXV19HV1p1aXBvaGVWZXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4YjktMTRlNmVjMDIwYmZh
LzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkigABh
MA0GCSqGSIb3DQEBCwUAA4IBAQCljeOmUxQykQHb0sJzm+yGWM+jgsNEtfXLCKTV
Z2whcKrWbOgWnqk9GRqLNsU0CBPKzmTBTcgW0BMaSfgLERZSXmQvn1TPcciM0RYs
vS6aVJnZBTMzjOtK0Z949soBevNR+wAQGApXTVETU6sUfhEVUN66/o3zrXAHbMfA
M51B6+LzAsflNdg0Vom9k5Vwl8hbjItfBjcw2ZwlrY80MFGP2Jicx+RbCcGfTj+5
U73xEwbVoW2/eM4UD5Z5at+5JSpP4m5O95+8WI4RVm1jbMMTyfOY0AojNs8cWkEG
+3YdUPII1T5TrD1roZjdYL3SENEApf0QbgzWbeiBGT1sVESg
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:33 2025 by rpki-client