Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa
File: ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa (raw, json)
Hash identifier: qgnMNoDlY76gADXwHdrnws2enpTow72z+24Q3TkgA6g=
Subject key identifier: 65:33:71:C5:FF:52:BF:81:01:22:95:69:DB:B0:9C:24:C1:9A:B6:A2
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA089641B411FD1E30B11ADA5A60CC
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211027
IP address blocks: 2a09:3d00::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a0f:c582::/32 maxlen: 32
2a10:c340:7000::/36 maxlen: 36
2a11:200:2000::/36 maxlen: 36
2a11:780::/29 maxlen: 36
2a11:b80::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:08:96:41:b4:11:fd:1e:30:b1:1a:da:5a:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653371c5ff52bf8101229569dbb09c24c19ab6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:58:b3:50:f5:8c:ad:1b:8c:92:b1:d6:7d:
fe:f5:2c:bb:72:35:37:22:f2:f9:1b:a9:98:c1:96:
0c:d4:11:1c:a2:7c:85:d6:b3:6a:aa:fe:6e:eb:c2:
11:94:3c:55:c0:7e:6c:2a:14:d0:7d:5d:fb:31:2f:
aa:d9:8d:64:34:33:56:e3:df:cb:40:97:95:6c:c2:
c4:f1:95:61:3e:1d:23:31:2c:b1:c9:09:8a:ae:9a:
4d:85:11:e8:9e:9d:08:76:e3:f5:a5:50:64:f9:9e:
6f:9f:2b:b3:36:01:2b:39:af:54:c1:d5:a6:70:50:
9a:5d:8b:28:b5:01:5b:6d:95:7c:13:ea:e1:41:40:
8e:53:12:8b:e1:ed:9e:4e:27:aa:0a:87:37:fa:28:
66:44:07:c1:68:2d:ab:6b:f0:08:6f:ee:95:70:8b:
24:d3:ad:a5:9d:c8:41:31:f9:ec:fd:5c:e3:42:a5:
62:df:da:49:a7:b2:da:4a:b9:9a:33:75:55:57:52:
b1:55:34:1c:4b:ba:23:79:9d:6b:0f:5d:ef:d9:bb:
82:eb:62:4f:25:23:86:a2:fa:55:e1:d9:f6:71:d6:
33:1f:43:2c:ab:b8:f1:bc:6a:36:52:18:bd:bb:91:
3e:1c:05:59:8e:9b:1d:64:38:d3:61:2c:ef:d1:1c:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:71:C5:FF:52:BF:81:01:22:95:69:DB:B0:9C:24:C1:9A:B6:A2
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3d00::/29
2a09:b680::/29
2a0f:c582::/32
2a10:c340:7000::/36
2a11:200:2000::/36
2a11:780::/29
2a11:b80::/29
Signature Algorithm: sha256WithRSAEncryption
75:3b:72:f4:08:ad:75:92:d0:e0:46:70:bf:a1:ee:12:57:b6:
40:96:1e:4d:65:2f:b8:e1:b9:be:03:df:88:48:0b:df:f9:99:
ca:f8:66:42:65:93:ea:66:cd:ec:db:0e:98:d8:60:e8:3f:42:
b5:6a:83:4d:d0:ce:28:e9:02:16:2c:f5:45:10:b3:94:a2:ce:
3e:e8:b5:02:34:90:2f:45:54:ce:07:4a:2b:7e:77:04:32:38:
83:08:08:ce:fd:eb:18:c6:c1:07:71:44:06:7a:4f:28:6d:d6:
3e:11:d4:8d:96:91:97:7b:a4:1f:6f:a7:77:16:a1:d3:69:f5:
8e:12:3d:e4:47:92:b1:cb:1e:74:8f:02:e8:0d:19:84:58:ed:
9a:51:77:5a:c4:6c:02:66:87:93:d9:dd:0c:a6:07:18:37:31:
ba:39:39:4a:09:4d:0a:72:bd:29:b6:27:98:6c:1f:cf:17:9e:
da:4f:b0:26:ee:6d:62:34:0f:6e:ec:9f:2a:19:84:2c:85:6d:
12:30:3d:72:05:56:72:24:3e:51:35:11:6a:41:15:6b:2b:ab:
81:c8:c4:1a:2f:ec:e9:76:93:af:da:e7:6c:2f:5e:e2:ca:f8:
31:46:92:5e:44:bd:05:28:b0:e0:10:01:33:15:fb:cb:d0:14:
eb:3b:c4:09
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQf+giWQbQR/R4wsRraWmDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjUwMTAxMDM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMzNzFjNWZmNTJiZjgxMDEyMjk1NjlkYmIwOWMyNGMxOWFiNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mVYs1D1jK0bjJKx1n3+9Sy7cjU3
IvL5G6mYwZYM1BEconyF1rNqqv5u68IRlDxVwH5sKhTQfV37MS+q2Y1kNDNW49/L
QJeVbMLE8ZVhPh0jMSyxyQmKrppNhRHonp0IduP1pVBk+Z5vnyuzNgErOa9UwdWm
cFCaXYsotQFbbZV8E+rhQUCOUxKL4e2eTieqCoc3+ihmRAfBaC2ra/AIb+6VcIsk
062lnchBMfns/VzjQqVi39pJp7LaSrmaM3VVV1KxVTQcS7ojeZ1rD13v2buC62JP
JSOGovpV4dn2cdYzH0Msq7jxvGo2Uhi9u5E+HAVZjpsdZDjTYSzv0RzuZQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFGUzccX/Ur+BASKVaduwnCTBmraiMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvWlROeHhmOVN2NEVCSXBWcDI3Q2NKTUdhdHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAAjAzAwUDKgk9AAMF
AyoJtoADBQAqD8WCAwYEKhDDQHADBgQqEQIAIAMFAyoRB4ADBQMqEQuAMA0GCSqG
SIb3DQEBCwUAA4IBAQB1O3L0CK11ktDgRnC/oe4SV7ZAlh5NZS+44bm+A9+ISAvf
+ZnK+GZCZZPqZs3s2w6Y2GDoP0K1aoNN0M4o6QIWLPVFELOUos4+6LUCNJAvRVTO
B0orfncEMjiDCAjO/esYxsEHcUQGek8obdY+EdSNlpGXe6Qfb6d3FqHTafWOEj3k
R5Kxyx50jwLoDRmEWO2aUXdaxGwCZoeT2d0MpgcYNzG6OTlKCU0Kcr0ptieYbB/P
F57aT7Am7m1iNA9u7J8qGYQshW0SMD1yBVZyJD5RNRFqQRVrK6uByMQaL+zpdpOv
2udsL17iyvgxRpJeRL0FKLDgEAEzFfvL0BTrO8QJ
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:04:55 2025 by rpki-client