Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zZW734RemHnAcXXkkBn3gPywb6E.roa
File: zZW734RemHnAcXXkkBn3gPywb6E.roa (raw, json)
Hash identifier: TLTFw6tRe64BQPBlqddQsbyeirbboGZSF4USzFRv55E=
Subject key identifier: CD:95:BB:DF:84:5E:98:79:C0:71:75:E4:90:19:F7:80:FC:B0:6F:A1
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01947E22547B2D149A0CC8D78A68B51D58F3
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zZW734RemHnAcXXkkBn3gPywb6E.roa
Signing time: Sun 19 Jan 2025 10:36:06 +0000
ROA not before: Sun 19 Jan 2025 10:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 2a10:17c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:22:54:7b:2d:14:9a:0c:c8:d7:8a:68:b5:1d:58:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 19 10:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd95bbdf845e9879c07175e49019f780fcb06fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:95:da:18:75:07:5b:2c:5e:6f:26:9d:1e:
4f:c6:55:b3:81:39:56:e2:e1:17:54:63:86:65:e7:
62:bf:dc:a4:dc:8c:7f:bc:ab:44:ed:ce:0c:86:7a:
f5:ec:0c:10:a4:0e:29:6c:95:03:b1:1c:7a:10:03:
2c:5a:f5:2a:22:e3:0e:50:8a:39:da:8f:9b:90:95:
e2:8f:29:d9:bc:24:23:26:1b:92:12:5e:ce:2f:7f:
29:ea:5e:cf:e6:4e:7f:9a:29:96:d8:92:a9:b8:9f:
a7:ac:5f:6d:9b:8f:a2:fc:31:ba:35:1c:24:2e:b8:
e2:c2:b5:f9:bd:cf:53:b8:aa:0e:82:38:6d:0e:8f:
58:0f:17:9f:31:7e:d0:fb:a1:bc:bc:8b:ae:60:ba:
a3:53:ea:db:e5:b3:17:32:1a:23:b8:ca:0b:3c:b6:
1a:e1:c2:81:d1:fe:6d:7b:c9:14:78:61:f7:23:41:
f9:14:b5:1b:43:c9:80:5b:fd:aa:63:ae:a3:39:c2:
72:65:1d:b8:aa:26:b1:7c:bb:dd:91:65:27:fd:23:
49:5d:9a:45:57:78:7e:51:81:22:b6:bd:2e:a8:9a:
e2:98:7a:26:6e:14:ac:6f:0f:31:5e:c6:16:50:1e:
cf:9d:37:46:66:bd:35:df:ab:f0:9a:56:c0:ad:9b:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:BB:DF:84:5E:98:79:C0:71:75:E4:90:19:F7:80:FC:B0:6F:A1
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zZW734RemHnAcXXkkBn3gPywb6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:34:d5:38:03:25:0b:32:2d:db:23:e2:39:56:c3:67:62:3f:
d2:b8:7d:b9:75:ee:8c:85:3e:7a:cc:d5:7f:10:2b:45:72:f5:
da:f0:3e:3d:80:52:19:e6:fe:d0:2a:5c:e4:93:0b:cc:c5:50:
41:8a:16:44:71:38:50:1b:af:bd:62:a6:8a:c9:80:be:52:51:
dc:05:9b:77:12:f0:e0:ac:33:48:a1:ab:a0:cc:1a:20:10:74:
b5:c0:b6:89:a5:76:49:74:2c:a3:48:3c:61:ed:da:e9:c9:a7:
91:04:2a:54:a7:37:5b:a6:06:f5:76:27:1d:14:4c:79:88:51:
8d:94:c5:9f:d9:67:b8:3e:d7:12:12:c3:e3:8a:24:e8:90:a6:
b4:7d:26:64:af:a8:db:06:9c:c2:a7:9c:14:36:50:12:cd:2d:
2a:73:f7:7a:1a:84:39:21:b7:f9:9e:8b:f9:be:6e:05:f1:b1:
9d:f0:57:1a:63:18:fc:8a:bb:33:34:05:77:9f:03:fe:37:23:
f1:fd:be:60:fc:51:d5:1a:63:f0:34:ef:55:a5:85:91:1f:67:
0f:4a:74:b8:8f:d9:78:49:0e:b6:53:03:d6:f5:21:a8:d3:90:
98:e5:68:9e:be:3d:86:4c:eb:85:1c:56:02:4a:95:e6:34:ba:
69:fd:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:44 2025 by rpki-client