Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/kzlWeerWBpLQJUvq-zvqgpRgYGk.roa
File: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (raw, json)
Hash identifier: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=
Subject key identifier: 93:39:56:79:EA:D6:06:92:D0:25:4B:EA:FB:3B:EA:82:94:60:60:69
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 01942520A78FAF3BADD287651A5FC67893B0
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/kzlWeerWBpLQJUvq-zvqgpRgYGk.roa
Signing time: Thu 02 Jan 2025 03:48:04 +0000
ROA not before: Thu 02 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20625
IP address blocks: 2001:67c:1784::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a7:8f:af:3b:ad:d2:87:65:1a:5f:c6:78:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jan 2 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93395679ead60692d0254beafb3bea8294606069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:43:61:90:00:52:6a:c4:a2:a5:20:92:2c:
40:fb:77:e5:07:69:11:6e:91:07:0d:9a:d1:fe:d6:
fd:71:fd:36:11:be:4b:ab:dd:5b:03:1f:3f:16:5c:
bc:b8:36:c7:ad:fb:a2:f4:42:44:2e:e0:1d:02:ae:
01:39:25:4f:2a:9c:b3:21:e4:13:c9:c5:d9:bb:24:
db:56:01:1b:2e:7b:93:89:4d:44:4a:74:8a:64:ef:
3e:8c:4a:65:cc:e7:01:22:3d:63:d7:dd:ff:19:2f:
33:b1:d9:dd:bd:7d:0b:78:68:e2:60:12:9e:d4:1c:
2e:3f:ad:45:b0:06:60:fe:86:3d:fc:62:c7:84:ef:
95:56:76:27:bd:f8:f4:81:5c:8b:92:79:4f:d4:68:
61:ec:8b:54:3f:b4:69:a2:df:d3:31:b1:52:a7:39:
c9:11:de:52:91:5a:5c:47:7c:d0:72:69:6d:09:4a:
67:d9:0b:99:f1:4a:2f:bd:87:a3:2a:5f:90:85:07:
cb:66:07:b4:a1:78:17:04:25:9d:79:17:40:30:d5:
d2:df:15:03:3c:ac:01:e1:91:67:6b:07:20:a6:8b:
f7:89:c2:ec:bb:96:f3:d9:6f:6f:9b:1f:4f:8f:4b:
a7:1e:64:11:c6:8c:5b:11:ac:3e:c6:8a:9e:38:b1:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:56:79:EA:D6:06:92:D0:25:4B:EA:FB:3B:EA:82:94:60:60:69
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/kzlWeerWBpLQJUvq-zvqgpRgYGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1784::/48
Signature Algorithm: sha256WithRSAEncryption
a9:cf:0a:ad:2a:f4:68:63:68:b3:a0:f0:83:49:6e:e3:34:9a:
41:ae:df:a8:b6:48:59:f7:5b:3f:21:79:52:df:73:58:b9:1e:
36:68:bc:3d:ec:c3:a3:fd:1b:24:b9:c3:46:d5:b9:1f:34:46:
bf:8e:52:26:11:91:31:96:bc:ae:11:77:d4:3e:4f:a9:5e:72:
b2:a3:a4:6a:8a:4d:0b:22:62:ea:8c:3a:3e:1e:7b:0b:57:18:
da:a7:b1:b3:fb:85:66:61:71:df:a0:f5:04:2c:da:f0:a2:f3:
73:ae:d8:bf:cf:e5:10:3b:0d:e8:ae:02:19:fd:51:ed:55:4b:
fe:5a:46:32:5d:2e:5a:90:03:e9:76:b0:dd:6e:e4:62:f1:59:
70:83:03:f0:06:3e:e6:60:af:d2:29:86:55:93:f3:93:1e:1f:
3f:a5:12:90:de:81:0f:cb:19:28:f3:f1:a8:63:6d:84:bf:ab:
a0:b1:fe:04:7d:6c:b2:34:7b:27:51:a8:6f:02:ef:1c:e1:ab:
4c:d1:33:c0:ba:b1:94:e9:f9:e4:35:d6:0b:a9:c8:0a:73:ab:
28:5f:2c:0f:58:65:a4:87:9c:35:2e:c1:2e:cc:23:4a:09:99:
6b:47:9b:fc:0b:56:9d:5f:5a:43:ac:2f:b7:b5:57:12:c6:73:
2b:0a:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:46 2025 by rpki-client