Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa
File: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (raw, json)
Hash identifier: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=
Subject key identifier: CC:A7:1F:AB:46:46:D4:B2:09:9C:3D:53:6D:12:58:8B:35:7A:45:8A
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271447949433CD1946F38CB5B07224
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa
Signing time: Thu 02 Jan 2025 17:53:57 +0000
ROA not before: Thu 02 Jan 2025 17:53:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57848
IP address blocks: 2a0e:46c2::/32 maxlen: 48
2a0e:46c6:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:14:47:94:94:33:cd:19:46:f3:8c:b5:b0:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca71fab4646d4b2099c3d536d12588b357a458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:20:f5:2f:1d:66:1a:23:2e:27:0c:d8:72:
bd:2d:59:67:a9:bf:ed:f5:df:93:ab:58:35:41:3f:
c9:b3:09:b5:95:54:3a:94:30:77:6d:f9:92:bb:b6:
c8:37:65:df:44:d0:d5:20:73:79:ca:09:ee:b5:af:
13:6d:ad:50:db:f6:2d:36:55:18:61:fe:01:e5:a4:
74:73:22:d9:c2:56:c2:1b:94:55:aa:0a:41:45:8c:
a3:fd:28:0e:f5:fc:e1:a3:e5:f6:36:ac:6d:fb:c7:
d4:4c:0d:7e:70:94:95:32:2f:66:a3:10:1c:51:a8:
0e:cb:e7:e1:6f:13:a1:2f:fd:b7:e4:86:eb:84:2f:
23:a0:61:3d:3f:87:54:f0:25:54:67:e8:fd:52:0e:
cb:0e:59:98:e9:e1:86:10:91:1d:a0:32:a3:e5:f3:
15:a7:0c:24:d2:65:42:06:16:b4:2c:d6:d5:54:1c:
8b:79:0e:ea:51:14:4d:39:05:f5:b0:43:31:d7:77:
03:d0:c0:9d:cf:b3:6a:4e:d4:54:bb:db:cc:00:28:
4d:60:2c:e0:28:29:a8:d0:90:e2:d8:8b:7e:c2:fa:
57:6a:be:84:46:9d:9e:4e:c7:d1:78:c4:d4:0e:96:
91:3b:2b:98:e5:bd:57:aa:70:a1:da:ba:84:22:d1:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:1F:AB:46:46:D4:B2:09:9C:3D:53:6D:12:58:8B:35:7A:45:8A
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c2::/32
2a0e:46c6:500::/40
Signature Algorithm: sha256WithRSAEncryption
26:bd:a1:33:eb:b4:04:c5:29:e0:2a:17:cd:39:5f:f7:34:ca:
35:c1:2d:1f:90:b5:68:11:b9:b0:75:63:f0:f7:71:a5:53:1c:
3b:f1:a2:80:b5:26:01:1e:ab:d0:f3:fc:41:f2:35:74:35:19:
ed:28:8b:42:0e:b8:a9:3e:ab:d4:2c:4f:0d:e4:25:53:51:6b:
97:68:4f:7a:a3:02:79:aa:89:b2:6e:41:ea:ae:cd:21:d1:1a:
6b:92:d0:a2:c8:85:90:5c:0d:f7:47:ef:13:80:30:61:a1:75:
67:37:70:3e:5d:15:e1:e1:13:67:73:67:72:5c:8f:0e:04:b1:
12:f9:46:d2:5a:45:54:9b:49:d8:4a:49:cd:4f:76:cd:b7:a5:
37:ff:b5:41:a5:46:f4:53:07:0a:ea:aa:68:4f:94:7b:c0:f9:
61:78:c8:a2:82:ee:22:3d:fc:ef:05:fe:21:67:09:fb:e4:6f:
1d:0d:a7:c0:f2:2f:39:7a:fa:1c:75:d2:e7:bc:41:86:22:a5:
9e:74:bc:6a:68:00:40:a7:03:10:8e:32:85:ab:44:3d:cc:e2:
d0:b0:88:9a:9a:8d:00:40:41:2a:94:71:99:5f:7e:6e:52:43:
19:47:be:c6:10:8c:75:d7:81:99:7e:93:de:3a:46:1c:93:b3:
c8:43:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:56 2025 by rpki-client