Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa
File: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (raw, json)
Hash identifier: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=
Subject key identifier: CC:45:49:D3:FC:1F:FE:EC:BA:F8:87:EB:D3:DC:48:7F:29:F4:F1:1D
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FDA311763220FD899FCD2A344E3C25
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213169
IP address blocks: 2a0e:da40:3000::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a3:11:76:32:20:fd:89:9f:cd:2a:34:4e:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc4549d3fc1ffeecbaf887ebd3dc487f29f4f11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:d1:77:2e:c0:a4:bf:81:55:02:1d:14:d8:
15:0a:e0:ac:50:9b:df:ce:86:10:28:a1:72:b3:74:
c3:55:97:97:10:fa:e8:fc:0c:10:e0:f8:57:83:0c:
61:83:17:c7:7e:cb:38:89:4c:dd:d3:99:f6:cc:ec:
29:b2:18:80:4b:60:05:bc:b7:d4:6c:b9:64:fd:55:
f7:17:15:8e:ec:75:c0:3c:0e:a2:1e:56:0e:8d:df:
2a:e4:a1:c8:f4:bc:e7:6a:d7:35:47:f4:f7:2d:7a:
92:5e:23:1b:b9:96:7d:c3:02:3f:f3:92:84:6a:df:
5f:4c:b3:b2:c9:48:3e:ef:e4:bd:fe:e3:88:43:95:
4a:c5:27:8b:52:06:1d:97:30:df:c2:35:a7:3c:af:
f4:2e:e4:14:d4:2c:2b:c6:25:46:70:2e:0b:70:21:
87:7f:f6:43:e2:88:7e:fb:e1:94:54:6e:a0:7e:e4:
59:53:3e:76:90:d0:2b:1f:fe:f1:95:db:e0:93:6b:
2e:f6:e4:b0:13:14:36:1d:fc:30:1b:ea:c8:d7:d8:
f3:09:3a:00:96:3f:f1:aa:6f:70:d3:3d:df:ae:e8:
fe:c3:54:7c:92:6f:76:6c:58:de:bf:c7:31:70:d7:
90:b9:53:2d:96:a9:34:9c:2a:2d:1a:c3:22:6c:27:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:49:D3:FC:1F:FE:EC:BA:F8:87:EB:D3:DC:48:7F:29:F4:F1:1D
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:3000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:06:72:a1:3e:5e:1c:cc:7c:46:5e:d2:64:21:32:1e:5c:4f:
c9:6e:6d:16:e1:84:27:d0:4a:5a:fd:5d:b8:56:5d:db:73:d0:
25:49:15:01:cf:89:64:37:1d:14:6f:b1:f1:54:18:01:a6:ca:
2a:5d:05:b9:e0:38:4c:00:65:75:1b:17:7e:7e:e1:dd:96:e2:
76:6f:85:22:a7:5c:7f:ba:6c:d4:7d:e6:b0:e2:21:35:b7:8a:
7d:fe:7d:98:17:e7:54:53:f8:f0:18:31:b1:57:da:4c:78:55:
94:cc:83:b0:c1:f1:03:4d:76:d0:50:1d:1a:6e:1f:83:95:5a:
e4:40:34:01:7f:a5:40:b9:6f:1e:25:e8:2a:e0:40:79:b3:93:
6f:76:c7:76:de:ae:7b:4c:89:eb:ea:4d:f5:6c:25:58:e5:55:
b3:79:a5:9c:75:c3:8c:71:fc:5a:e0:79:69:28:17:60:8f:19:
0a:f2:f3:75:58:30:e8:8f:c5:33:5b:2a:58:5f:4f:52:1f:c9:
a0:0b:3b:1a:f9:9b:97:61:98:5d:d8:42:0f:ba:07:79:d5:b8:
0e:51:f1:08:6a:07:1a:34:d0:81:63:ec:bb:5e:a4:c1:2d:90:
82:f9:95:f1:21:be:1d:ce:97:06:6a:ec:78:70:81:dd:43:db:
3e:bc:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:27 2025 by rpki-client