Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa
File: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (raw, json)
Hash identifier: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=
Subject key identifier: CC:35:72:CF:04:55:9F:50:93:F9:13:FD:C6:56:85:88:93:4F:30:71
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE5A273C519D8CD48272EABBC0354
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa
Signing time: Thu 02 Jan 2025 07:48:38 +0000
ROA not before: Thu 02 Jan 2025 07:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 149.126.12.0/24 maxlen: 24
192.145.70.0/24 maxlen: 24
2a0a:8f40:4::/48 maxlen: 48
2a0a:8f40:5::/48 maxlen: 48
2a0a:8f40:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e5:a2:73:c5:19:d8:cd:48:27:2e:ab:bc:03:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc3572cf04559f5093f913fdc6568588934f3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:6c:f9:9e:56:1b:03:c9:65:cb:7c:3e:af:
ae:04:0c:3a:50:7b:68:f7:ce:2e:65:5f:15:ed:6f:
e1:ef:f2:be:26:56:96:e8:09:5c:96:d9:79:8e:2c:
ec:49:04:e3:71:f9:4d:b4:ba:54:f8:37:7d:df:29:
20:3f:b7:27:8c:66:0e:50:52:e2:9c:45:e5:53:ac:
77:8c:8e:5a:13:c3:5b:fc:23:2c:ef:87:a2:77:bd:
27:71:cb:c1:da:fb:1d:45:30:14:af:0f:37:a9:b9:
25:9e:f8:81:dc:61:8c:89:e6:22:27:ba:bf:7a:6f:
a8:01:f1:ec:25:6d:09:8a:bf:16:c5:ba:4d:c8:50:
d9:7b:b0:35:44:41:a2:47:a2:dd:0c:aa:9d:61:ed:
67:3f:2d:b3:be:86:db:80:ed:89:c9:12:42:98:3e:
2b:56:8e:90:fe:ee:bf:6f:9c:89:fd:f1:0e:10:31:
4a:1e:38:82:e1:7d:8a:80:ec:b0:4b:b4:67:68:6c:
b4:74:e9:a3:f6:39:cf:fa:d8:42:49:e9:94:ca:68:
68:f0:76:0e:95:08:d5:e1:16:ca:27:6a:70:61:eb:
3d:4c:7b:50:cc:fd:e9:a5:49:23:c8:e0:43:d6:91:
bb:c8:4c:5c:11:a2:82:7b:f2:f7:6d:6b:4a:76:54:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:72:CF:04:55:9F:50:93:F9:13:FD:C6:56:85:88:93:4F:30:71
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
192.145.70.0/24
IPv6:
2a0a:8f40:4::-2a0a:8f40:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:02:c2:37:d9:49:f5:7c:2e:39:ca:79:9f:22:26:07:27:56:
b6:cd:e2:65:91:d1:d0:7b:53:7a:12:b5:c9:da:54:9f:ca:7b:
75:65:7d:34:c3:b1:1f:3e:08:88:25:6b:d6:2b:f6:17:22:fa:
61:0f:a0:22:7f:67:8c:fb:82:87:98:5d:50:67:f6:8c:65:61:
5f:39:ee:43:f9:84:dd:9d:1e:58:68:ba:9a:4d:b0:82:bc:28:
a2:61:91:ed:47:b1:62:6b:db:f6:9c:06:0a:71:bb:8d:69:3a:
32:08:6d:b6:d7:a8:d0:fe:0e:29:c0:c0:be:a5:ad:7c:9a:8a:
77:0b:63:42:76:4f:52:82:9f:89:38:b9:4c:16:af:1a:d8:27:
cb:54:93:c0:02:66:a2:df:57:fb:cf:a2:4f:5f:5c:2f:e8:72:
8a:c2:90:be:2b:5e:54:c1:43:32:81:90:df:93:d8:6e:5f:5f:
9b:23:c9:2a:d4:18:17:55:f7:9e:f6:4b:9a:c6:72:0c:e8:5a:
e4:14:6f:85:98:d9:99:52:32:94:1d:7f:ab:68:4b:58:c9:a5:
48:67:2f:06:10:d8:3a:1a:8f:32:4b:35:6a:26:31:9c:65:33:
6b:9c:7f:9e:c6:1d:3f:e4:2e:8e:4c:06:11:08:57:df:48:b6:
f9:5e:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:30 2025 by rpki-client