Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zFydrY8ihCzVoT6kL0k7vkBRRzY.roa
File: zFydrY8ihCzVoT6kL0k7vkBRRzY.roa (raw, json)
Hash identifier: NQgkCHRWO2hI3Gi4hKVGF0/pckZ3Qdm5gJ0+w2DmK4s=
Subject key identifier: CC:5C:9D:AD:8F:22:84:2C:D5:A1:3E:A4:2F:49:3B:BE:40:51:47:36
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0196CE0EFAFB68C129B6037FC2485A547FC0
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zFydrY8ihCzVoT6kL0k7vkBRRzY.roa
Signing time: Wed 14 May 2025 09:10:10 +0000
ROA not before: Wed 14 May 2025 09:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42881
IP address blocks: 2a0f:63c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:0e:fa:fb:68:c1:29:b6:03:7f:c2:48:5a:54:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 14 09:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5c9dad8f22842cd5a13ea42f493bbe40514736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:50:d4:43:8b:89:95:17:2a:b2:41:52:70:
0a:e3:0c:27:bc:09:11:ec:9b:1a:38:32:fe:43:5d:
61:6f:02:1a:44:ce:fc:c7:7a:94:09:9a:63:e9:8f:
0c:c1:82:2a:16:a5:cd:a3:b6:f8:63:3e:fc:a8:dc:
c0:79:d0:94:0d:9c:9c:6d:0d:62:57:66:7a:e1:9f:
36:1e:42:93:41:8b:74:7d:a4:91:fe:14:ef:04:43:
b7:e5:c0:56:ea:e1:69:54:a1:c5:ed:c1:98:a8:be:
60:ee:cf:2d:9f:4d:00:ad:37:51:8f:ba:f5:04:14:
04:1e:3b:55:9a:bc:df:2d:0f:f7:89:fb:1c:e4:c4:
41:43:87:f7:94:6e:d3:1c:3c:64:de:96:db:0b:45:
88:69:5c:da:ee:f7:ea:ae:fe:1a:8f:04:b3:7b:ca:
36:ad:fe:ea:94:41:33:69:10:72:70:83:13:9e:7b:
83:0d:1e:8c:97:59:c6:fb:d3:2c:31:41:39:3f:21:
08:09:6f:40:87:45:b2:43:66:a4:99:af:fc:07:ff:
bb:42:0e:32:a0:ad:39:2d:94:86:6f:bc:2b:c5:5e:
eb:f0:20:f3:87:83:f9:da:f2:74:3a:60:e9:1c:af:
ae:b8:e4:c2:fd:a3:66:0c:6d:e4:e6:18:46:65:75:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5C:9D:AD:8F:22:84:2C:D5:A1:3E:A4:2F:49:3B:BE:40:51:47:36
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zFydrY8ihCzVoT6kL0k7vkBRRzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c6::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c8:a2:07:a1:77:68:1f:5c:81:6c:bf:46:c5:ba:dd:a1:10:
7e:60:6c:c2:83:10:2d:46:80:77:ee:af:f5:53:0c:71:2d:0b:
ae:14:5c:e5:75:e4:ca:33:5c:90:07:4e:c6:44:f7:3f:cd:34:
78:1b:3e:a5:5f:be:6b:56:ee:00:c2:36:99:a4:9a:5f:35:7d:
e9:8a:e3:14:e3:82:f6:fb:24:92:6e:3c:b7:02:5b:49:d4:43:
5f:91:58:0e:69:c7:61:0a:b0:45:c8:e3:ab:91:6c:3b:e2:50:
d4:76:c7:50:15:bf:34:bd:5a:c4:04:3f:ed:91:49:1c:99:3c:
f4:4a:61:48:90:98:6d:68:62:ba:44:17:26:68:32:18:4d:fe:
8d:89:46:4a:7f:68:ce:37:cd:35:37:69:0c:c4:3c:8a:8e:b4:
b9:75:bc:80:da:ed:d9:c8:a4:5d:49:92:6d:cf:57:a2:93:70:
f4:82:9d:ed:8a:0b:15:18:a8:4a:62:6b:d3:48:4e:98:4a:2c:
18:e3:1a:4e:b0:e6:0b:c0:68:21:9a:2d:db:e1:c1:c1:d3:b0:
cf:57:ca:5e:c1:0d:1d:a4:99:34:27:eb:1f:1c:17:51:20:f4:
84:94:85:de:f3:cb:1f:04:ac:11:7f:48:7b:ad:fc:90:59:d8:
22:4e:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:08:23 2025 by rpki-client