Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zd1YJezVPWVuIa_dHyM241RCJy8.roa
File: zd1YJezVPWVuIa_dHyM241RCJy8.roa (raw, json)
Hash identifier: QEARbQdLlvDfQineZQkCjYvrHoG5BNqf5lIhOFqZiV8=
Subject key identifier: CD:DD:58:25:EC:D5:3D:65:6E:21:AF:DD:1F:23:36:E3:54:42:27:2F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDECF14BD52C0A24B86C056CFEF0FD
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zd1YJezVPWVuIa_dHyM241RCJy8.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212364
IP address blocks: 2a06:e881:8500::/48 maxlen: 48
2a06:e881:8501::/48 maxlen: 48
2a06:e881:8502::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:f1:4b:d5:2c:0a:24:b8:6c:05:6c:fe:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cddd5825ecd53d656e21afdd1f2336e35442272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:05:b9:a4:01:48:fe:54:ac:f2:6f:76:cf:
89:b8:4c:39:eb:b2:63:d7:47:9f:8b:db:da:a8:76:
cd:f7:a0:6d:92:56:e8:ce:7d:00:17:bd:87:5d:64:
38:5b:98:89:8b:f8:a6:2e:d4:25:e9:50:d2:0a:d2:
4a:db:dd:7a:ce:e9:63:79:37:7e:f3:48:55:8e:25:
6d:ad:5a:a1:b9:9d:2a:23:24:c0:77:89:e6:95:f5:
d3:e3:45:a6:d0:49:0e:3f:40:e5:11:dd:af:b1:38:
ef:5f:8f:31:f4:6a:c7:05:f7:04:e5:28:90:c1:e6:
ca:aa:e6:34:66:fb:0b:ee:aa:3f:f0:4d:5b:3d:58:
ed:a2:67:3a:10:04:32:ba:3d:48:71:7a:6e:72:02:
c0:9e:15:1f:cf:39:70:36:b6:c5:2f:4f:7a:69:04:
da:0c:7a:06:71:c6:da:34:b8:a1:e1:7c:3f:c1:f7:
b0:3a:39:03:6e:50:41:2b:80:f4:54:a0:b0:04:8e:
e3:d2:be:2c:ee:fe:f2:16:b1:d9:68:e9:e2:d2:df:
c8:78:b0:d2:38:f6:70:eb:39:bf:95:b8:02:68:1a:
48:a3:bf:7c:35:89:31:1c:0a:c7:18:41:62:21:4c:
41:01:6e:d5:13:26:79:c5:a6:6d:e2:2e:46:0a:f1:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:58:25:EC:D5:3D:65:6E:21:AF:DD:1F:23:36:E3:54:42:27:2F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zd1YJezVPWVuIa_dHyM241RCJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:8500::-2a06:e881:8502:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:43:b3:0c:c4:6d:48:d0:9b:be:e8:d9:be:8b:a1:6e:da:49:
6f:ba:3c:6b:02:94:e1:ad:0f:b7:8b:73:98:b1:6b:c8:cb:24:
7c:96:fa:45:0f:38:56:2f:d2:31:b2:34:6b:14:10:62:07:c6:
5e:e2:9a:09:76:b5:86:2b:b1:7c:d4:cb:9b:a3:47:e0:fa:94:
05:d1:7b:cd:83:c3:06:3f:8c:5d:e5:94:1e:a2:8d:12:42:4a:
c1:7e:07:27:40:b1:bc:fd:06:69:55:5a:5f:07:3f:b5:c5:15:
fe:04:31:57:53:2e:d7:3d:3d:7a:4e:80:9e:f2:67:66:2b:c7:
3f:cd:d6:3f:cf:aa:57:b7:96:1f:2a:ae:c4:0a:e0:92:66:67:
57:08:7c:d4:9f:5c:d8:47:3b:1e:a5:df:31:51:6a:04:a6:34:
28:bd:4a:ac:0d:87:7f:6d:53:8f:cb:99:7c:3d:e6:18:73:01:
6a:87:e0:ea:81:15:05:42:ef:f2:88:91:d5:f6:cd:75:96:f8:
85:42:7f:46:d9:c5:37:3b:99:8e:d2:c8:ab:fd:3d:cb:47:77:
2d:7f:cc:b8:22:3f:2f:fd:54:29:87:10:f7:15:25:7c:f2:7c:
6c:80:df:d7:25:3c:c5:6b:07:a9:cd:cd:5b:fb:be:aa:5d:2c:
2b:58:57:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:06 2025 by rpki-client