Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZOmo9CgJC50TH7qyb29YFi4Hcpw.roa
File: ZOmo9CgJC50TH7qyb29YFi4Hcpw.roa (raw, json)
Hash identifier: gCclYlZPieypS3UKc5+ClzbIKPN3YPUk4bcWdEcevjk=
Subject key identifier: 64:E9:A8:F4:28:09:0B:9D:13:1F:BA:B2:6F:6F:58:16:2E:07:72:9C
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDB814B320B90F38361677D53A628
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZOmo9CgJC50TH7qyb29YFi4Hcpw.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134666
IP address blocks: 2a06:e881:4800::/48 maxlen: 48
2a06:e881:4801::/48 maxlen: 48
2a06:e881:480f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:db:81:4b:32:0b:90:f3:83:61:67:7d:53:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e9a8f428090b9d131fbab26f6f58162e07729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:ee:d6:c4:5b:fd:62:de:9f:48:ef:2a:c9:
a4:67:1e:8c:13:0c:d9:53:c5:8d:67:b3:8d:f8:af:
7b:b9:34:2d:f9:62:ae:1e:d9:eb:92:00:4e:12:a9:
e3:7b:89:a0:15:53:1f:10:da:65:05:0d:a8:03:c4:
4e:35:4c:a5:d8:82:0f:a6:1d:70:c5:04:a6:28:1e:
2c:73:26:1a:f4:b3:5a:e3:42:74:aa:02:2e:95:ec:
66:99:53:ff:b9:28:48:be:55:64:d2:2e:10:32:88:
06:cb:58:3e:47:e1:dd:1a:bb:ae:ee:61:cf:b2:41:
79:19:b0:df:ec:61:98:1d:d6:ec:cf:1f:31:8e:fc:
e4:54:1c:24:df:e7:ed:38:5d:c0:01:c8:34:3d:6f:
17:81:6d:75:67:64:c0:64:52:83:53:4b:73:7f:f2:
15:9e:1c:6c:1b:a4:18:65:b0:d7:76:63:93:fb:35:
7e:6d:a1:92:a7:c5:63:bb:5e:b7:88:78:10:11:1f:
f3:f7:e3:9b:8b:25:08:15:e9:6c:ca:90:81:82:b1:
e3:40:8b:f8:1c:89:e2:a0:d8:b2:e3:8f:32:f4:5f:
d8:20:5a:a2:10:5c:22:d2:39:d9:26:3b:7c:a1:00:
da:a0:1b:42:bf:03:72:eb:f9:89:34:68:22:1f:58:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:A8:F4:28:09:0B:9D:13:1F:BA:B2:6F:6F:58:16:2E:07:72:9C
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZOmo9CgJC50TH7qyb29YFi4Hcpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:4800::/47
2a06:e881:480f::/48
Signature Algorithm: sha256WithRSAEncryption
9a:3e:6c:76:27:d4:4b:77:c9:f1:7b:af:07:cc:a6:e7:9c:fb:
31:ca:30:34:bd:01:21:30:d3:e4:8e:74:39:78:c4:27:f1:49:
e0:98:2d:fc:6a:30:10:64:9e:44:df:45:61:8b:ed:29:8b:54:
fe:41:cf:b9:da:76:bd:eb:c4:04:2d:ff:7d:47:09:c1:19:eb:
8f:5c:45:2c:26:08:00:0d:6c:dd:db:f8:0e:05:cd:c7:52:6c:
c0:5d:05:bd:19:39:73:5c:2a:38:d9:41:b1:97:3e:c9:df:27:
6c:3d:00:46:62:53:ed:cb:f4:d7:7d:5f:b9:18:4b:24:98:3b:
16:e2:6e:70:4e:4c:65:d5:ae:54:32:ab:3a:35:75:c4:b0:d7:
62:57:30:b2:ad:cf:3f:bf:6c:6e:49:6f:c6:a6:70:2f:de:c0:
13:5f:09:66:ba:cf:71:4e:b8:e2:d6:29:e3:f8:90:53:73:f6:
2b:6e:47:52:bd:84:ef:76:61:f4:b5:54:da:26:82:f7:c6:20:
05:59:15:57:be:c8:86:5a:34:ba:2c:ea:72:ff:4c:67:1b:24:
d5:7f:13:a0:48:86:a4:0e:0f:0e:2d:3c:d5:5f:2a:54:c5:99:
56:14:a0:24:10:38:dc:9d:37:40:c1:be:d2:88:20:ce:cc:db:
58:7c:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:20 2025 by rpki-client