Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/CzBENFpROta46Ahh1b9jdj6JXrk.roa
File: CzBENFpROta46Ahh1b9jdj6JXrk.roa (raw, json)
Hash identifier: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=
Subject key identifier: 0B:30:44:34:5A:51:3A:D6:B8:E8:08:61:D5:BF:63:76:3E:89:5E:B9
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019425211E49AF999AA338B7CC0424BEB63A
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/CzBENFpROta46Ahh1b9jdj6JXrk.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61385
IP address blocks: 2a05:9281::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1e:49:af:99:9a:a3:38:b7:cc:04:24:be:b6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b3044345a513ad6b8e80861d5bf63763e895eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:13:3f:96:e1:a2:23:07:ec:5c:55:e2:dc:
02:d6:02:af:60:ca:94:21:b6:b3:32:d2:a3:f1:ed:
57:f2:04:30:d7:51:9c:39:52:86:8a:e1:a7:f1:bd:
e3:97:c5:ec:8a:45:64:2e:a7:cc:35:82:96:3e:8d:
04:e0:61:f1:30:e5:8a:27:bd:6d:be:fa:84:dc:cf:
92:38:a0:3d:1b:0f:d4:a9:0e:77:39:c2:a7:46:5f:
4b:b7:2c:17:46:d2:19:a6:2c:9e:9c:77:bf:b3:0c:
56:3c:9d:3a:e3:7d:52:1b:40:99:3c:8d:05:2e:a7:
ae:42:0c:1d:98:f7:1d:d7:e0:76:dc:b2:7c:44:51:
fd:0d:76:23:1e:eb:f3:9c:12:53:51:14:ee:fe:21:
4d:e8:be:d9:34:9d:ed:b0:91:ab:0f:a1:84:e6:cf:
b3:62:30:c5:96:b5:e5:38:66:7d:7b:e8:b4:e8:34:
69:3c:b6:8a:75:b0:28:e7:f8:57:d4:09:e0:4b:30:
4c:12:cd:30:7a:64:52:84:43:a7:88:e6:8d:6a:3e:
0d:91:58:88:bc:e4:d2:86:79:5a:ba:3b:19:e3:80:
84:73:1d:26:64:5c:6e:cf:66:17:f4:02:8e:27:0e:
ff:45:6f:d9:e0:3e:ac:ba:da:97:cc:cb:e7:29:56:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:44:34:5A:51:3A:D6:B8:E8:08:61:D5:BF:63:76:3E:89:5E:B9
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/CzBENFpROta46Ahh1b9jdj6JXrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9281::/32
Signature Algorithm: sha256WithRSAEncryption
11:e8:33:f7:11:82:a9:a5:2f:dc:48:c6:19:16:77:0b:67:e8:
44:43:c2:da:35:f8:58:f0:e9:00:c7:be:42:82:5a:5a:c7:e0:
2f:82:65:34:fd:f8:e2:f6:86:a0:07:bf:13:83:fa:3f:47:92:
a0:e8:b6:bf:4e:f5:b9:a3:46:ae:49:e5:58:ae:e3:73:de:c2:
9a:83:53:86:bf:a5:9c:ac:29:82:09:f5:bb:dd:09:c0:b2:05:
69:ff:92:48:f0:09:60:cd:7b:38:1d:fd:d4:69:de:d4:4c:b2:
21:13:96:a9:07:99:01:58:ab:d0:a4:7a:c0:7f:c7:79:77:a2:
c3:b4:f5:bc:87:55:3a:7c:31:9f:a8:38:5b:6d:df:2f:5e:1e:
57:6f:fa:53:ed:90:c7:89:62:a5:f6:19:14:b0:58:a6:b2:4d:
e6:fd:e4:77:66:51:b0:d9:73:1d:24:55:db:97:62:34:fa:f8:
c7:68:76:7d:3d:29:91:22:9b:ef:c3:23:a9:98:77:4e:82:21:
db:bf:7c:03:a5:6a:e6:fd:f2:0f:ac:70:42:26:0e:ea:f7:38:
3c:bd:cb:70:1b:58:88:77:26:50:b1:fb:e5:3e:37:05:60:72:
3a:fa:6f:04:e1:b6:a5:4c:09:71:e2:c6:47:9a:82:f1:ce:d0:
3d:95:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:32 2025 by rpki-client