Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa
File: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (raw, json)
Hash identifier: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=
Subject key identifier: 09:26:54:EF:05:8C:C9:2F:63:51:54:33:61:B5:C4:71:F1:CB:DA:06
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F817F94A4EB3336AAF4D06BC9CA80
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213943
IP address blocks: 2a01:e901:10f::/48 maxlen: 48
2a01:e901:11f::/48 maxlen: 48
2a01:e901:12f::/48 maxlen: 48
2a01:e901:13f::/48 maxlen: 48
2a01:e901:14f::/48 maxlen: 48
2a01:e901:15f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:81:7f:94:a4:eb:33:36:aa:f4:d0:6b:c9:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092654ef058cc92f6351543361b5c471f1cbda06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:a1:50:d6:f0:d5:3c:f1:7c:ea:41:bf:1a:
86:03:c0:c6:f7:aa:97:60:31:9c:5a:4a:83:9e:14:
2e:51:20:7d:61:3d:bb:5e:f2:73:5c:b0:45:4f:2d:
b6:84:28:3a:96:17:2f:a5:9f:96:8d:e5:9f:a1:5a:
b6:4b:b6:ac:c4:fc:19:0c:54:54:3c:00:90:ff:8b:
f3:7d:57:ed:66:e9:0f:8c:df:24:ff:69:97:04:e9:
d9:33:a2:7d:7a:da:9f:27:b4:ca:fa:50:98:53:00:
1e:8d:ed:fc:21:26:70:6e:44:26:b0:01:cf:63:89:
0a:27:d5:e5:61:e8:2c:57:b3:23:ba:07:b8:2f:df:
12:8c:af:6d:31:51:6d:f0:c0:65:b6:46:9f:fd:fb:
27:06:ea:9b:eb:61:90:6c:81:f9:95:67:77:55:61:
e1:5f:92:6d:9f:2d:06:c5:b4:b4:ff:c3:d9:1e:71:
af:8b:43:97:e4:2c:dd:a9:38:17:45:a7:d9:5a:d1:
8f:44:dc:53:94:7e:8e:31:40:d0:42:48:32:5a:61:
73:f5:d8:56:aa:cd:d3:ca:60:a2:44:5e:8f:89:f3:
3e:c7:e1:54:04:f2:cf:e4:02:9e:50:d4:8d:55:cb:
19:cf:03:fc:74:62:8b:fe:f0:83:da:d7:b1:6c:7c:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:26:54:EF:05:8C:C9:2F:63:51:54:33:61:B5:C4:71:F1:CB:DA:06
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10f::/48
2a01:e901:11f::/48
2a01:e901:12f::/48
2a01:e901:13f::/48
2a01:e901:14f::/48
2a01:e901:15f::/48
Signature Algorithm: sha256WithRSAEncryption
54:cd:79:98:12:f6:98:31:07:9f:d4:87:fd:ff:b7:14:2c:e0:
e8:84:14:60:7a:05:ce:88:d7:df:10:ad:0e:2e:fd:eb:1b:c1:
63:54:f8:06:6a:9d:a5:7b:47:bb:f4:94:a7:9d:38:21:2c:ad:
d5:76:13:a6:2b:c3:36:72:cd:74:c8:7a:7c:e7:05:84:1c:47:
18:e8:60:fa:e0:e0:1a:0b:64:9a:00:bc:98:b6:9f:64:55:64:
0a:ec:8c:d6:1f:be:e1:7b:88:74:db:e0:c2:b0:f5:7f:47:23:
5f:98:05:cf:88:64:b4:8a:bf:ca:39:b8:50:e1:e1:9b:48:96:
70:76:98:8d:09:7e:5f:f4:bc:73:95:bd:b1:80:ee:fd:43:97:
46:76:43:71:16:f0:ae:74:b0:a5:67:2b:a6:5e:65:cd:56:e0:
16:64:d1:78:37:42:19:32:d8:75:16:2b:54:3c:c9:b3:bf:33:
43:8b:be:75:63:0f:ee:e6:75:fd:7e:40:2c:08:8a:88:80:48:
1a:77:56:1c:1c:34:5f:9b:83:a3:9a:c6:38:0e:ee:0a:32:0d:
52:4c:b0:8a:7b:ba:84:54:c1:66:75:08:da:73:07:2b:c7:17:
47:4d:d9:ea:03:ac:18:20:d2:05:60:7f:f8:35:85:96:13:ee:
29:a7:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:48:29 2025 by rpki-client