Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa
File: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (raw, json)
Hash identifier: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=
Subject key identifier: CD:49:B5:51:C3:A4:1F:C5:67:58:FB:D4:4F:1C:DA:40:70:4D:83:AB
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 0194266B274F939E57024ECD0A80EA7F9023
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39995
IP address blocks: 2a02:7da0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:27:4f:93:9e:57:02:4e:cd:0a:80:ea:7f:90:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd49b551c3a41fc56758fbd44f1cda40704d83ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:e3:38:15:9e:53:2a:83:cc:5f:85:4c:65:
40:f8:84:8d:47:1b:31:74:59:fd:de:72:4c:ce:2d:
b0:82:52:fd:77:17:d7:ae:4e:ad:06:70:f2:21:66:
f7:07:fd:be:6e:c7:b2:74:f4:84:5c:99:ca:bc:d7:
bc:d6:36:f5:90:22:ae:c5:69:60:b6:13:7d:67:bc:
01:59:ea:ee:32:03:2f:e0:ea:2a:d9:af:1e:c7:db:
c2:12:fd:35:fb:88:58:b4:8d:52:4e:54:f9:b0:6b:
9a:ad:28:79:d3:20:97:5e:15:e4:8f:55:05:dd:20:
83:3f:cc:f2:c2:b2:34:67:fd:3a:0b:5a:64:ca:cb:
cc:30:5a:ed:c3:75:3f:f9:d4:18:0e:ba:24:be:cc:
b4:11:32:4e:cd:1e:aa:7e:1f:bb:17:8b:37:9b:65:
3c:c5:d1:a4:f9:53:9f:fe:70:13:35:1b:ca:88:22:
b1:33:77:61:95:15:e6:d7:cc:a4:87:cf:1e:ad:03:
11:6c:8b:5d:b0:83:0a:31:f3:c7:e1:8c:3b:44:2a:
43:f1:17:f6:6b:8c:f1:1d:61:e5:8c:a9:9f:83:67:
8f:d4:74:ec:9e:6c:a9:bc:a6:9e:33:2c:c5:da:26:
8c:aa:eb:45:72:43:5d:d0:e1:4e:1f:51:d5:36:e3:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:B5:51:C3:A4:1F:C5:67:58:FB:D4:4F:1C:DA:40:70:4D:83:AB
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7da0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:00:bf:4c:2a:53:83:c4:83:90:59:90:78:69:b1:11:9b:af:
61:37:a6:5e:1a:75:fe:4b:65:8d:54:6b:5b:8f:e8:e6:52:b3:
38:1a:cb:3c:7c:75:ab:63:01:3e:d0:27:c7:90:2b:3f:5b:ea:
86:df:98:ef:f7:bf:0e:ca:11:81:db:9e:40:e0:96:19:24:62:
58:f8:6e:87:c4:14:64:f1:4e:8b:70:76:25:e6:11:b1:58:73:
d8:c6:2c:06:b3:c9:ac:c6:6e:86:34:52:d1:48:cd:b1:02:1d:
f9:3e:bc:45:dc:bd:75:89:a2:37:52:f6:8d:f1:ae:ab:91:d5:
04:96:33:f6:9f:bb:68:03:dc:3a:89:11:d7:57:3b:7e:3f:f6:
2a:f8:34:c5:94:43:de:11:b4:d8:45:23:7d:26:c3:11:23:25:
68:3c:5c:2e:62:61:e2:73:c5:dd:6c:fa:9b:a9:3e:2e:af:ea:
f5:51:e4:ca:b1:be:7d:06:0f:51:84:db:fa:9e:35:7b:ef:4e:
34:06:f2:31:ed:26:53:ce:7e:3f:0f:93:01:4b:b1:41:57:8e:
fd:f6:71:6f:9e:ff:fe:3f:d7:80:96:6d:4b:82:dc:dd:ab:28:
a7:33:6f:91:68:30:a7:55:80:e1:8e:58:bd:12:c6:6e:62:56:
7f:d4:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:59:53 2025 by rpki-client