Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/czt3GQhHtSmOo6RJuvFMFQAKSGo.roa
File: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (raw, json)
Hash identifier: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=
Subject key identifier: 73:3B:77:19:08:47:B5:29:8E:A3:A4:49:BA:F1:4C:15:00:0A:48:6A
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 0196C39DA43ED0058C6326CB70FEBC1C2504
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/czt3GQhHtSmOo6RJuvFMFQAKSGo.roa
Signing time: Mon 12 May 2025 08:30:10 +0000
ROA not before: Mon 12 May 2025 08:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2a0f:ca80:617::/48 maxlen: 48
2a0f:ca80:618::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:9d:a4:3e:d0:05:8c:63:26:cb:70:fe:bc:1c:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: May 12 08:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733b77190847b5298ea3a449baf14c15000a486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:92:ca:9a:99:95:99:94:f0:99:56:1c:cb:
1e:02:6e:ff:26:e8:3e:29:6a:b6:96:12:f5:98:0a:
7d:43:9a:c2:82:53:ba:85:fe:17:bb:d3:b5:c5:87:
4e:e8:c0:0e:d2:b7:fb:e0:e6:dd:21:b7:3c:92:3a:
eb:47:8a:50:52:b7:9f:0d:9b:24:02:85:a1:62:8b:
72:0e:73:1c:4b:95:be:33:87:ae:e1:66:87:62:9d:
e1:ac:77:4f:e1:15:ad:9a:14:ca:20:2c:e4:71:39:
93:bd:2f:1c:d0:74:a8:21:ec:cb:44:d3:2b:60:8e:
5f:6d:01:59:92:8c:94:9c:e3:23:d2:0d:48:f3:8c:
ea:58:9b:7b:5b:b5:cd:b6:94:0f:a3:8e:da:9b:01:
c8:67:c1:00:1c:62:5c:20:99:87:a4:da:23:60:6e:
4c:69:29:78:52:5c:96:b4:eb:f4:ef:ae:20:13:ad:
a7:9c:4f:66:ee:2e:a7:d9:83:ed:6e:ad:8d:d9:c3:
3a:1e:4a:ac:06:cb:7f:22:0b:ca:2b:d5:54:bd:f3:
20:fc:1a:7c:73:f3:bd:8f:4a:87:8b:2d:c9:0f:0b:
71:1b:b9:09:12:3b:b9:f9:21:c9:03:5e:5e:34:6b:
d7:40:6b:bb:d4:42:0d:66:de:23:30:b7:0b:96:62:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:77:19:08:47:B5:29:8E:A3:A4:49:BA:F1:4C:15:00:0A:48:6A
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/czt3GQhHtSmOo6RJuvFMFQAKSGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca80:617::-2a0f:ca80:618:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:59:7d:5f:9b:34:3e:68:93:de:27:76:b3:87:a1:00:e7:4c:
10:e8:c9:17:91:09:89:20:e0:08:fc:be:d9:55:c7:45:e5:45:
48:0e:95:26:fc:34:cc:65:e3:49:48:89:b2:24:55:23:ab:4c:
4d:16:79:a1:f9:40:9e:f0:33:0e:42:7c:41:7e:18:14:db:9c:
1d:0f:bf:3f:7d:01:1b:06:59:19:19:df:21:50:e8:7b:a5:f6:
42:ef:fe:54:2e:c5:12:dc:df:ba:2a:b4:ff:6f:3b:78:1f:94:
aa:a5:3a:d4:38:82:ed:04:e7:21:b9:a9:35:ca:2a:0e:1e:d8:
5f:69:60:88:b4:43:75:f3:5c:97:63:87:c2:66:81:ac:d9:0d:
1f:59:fa:f3:d6:83:c5:a1:e3:59:36:c1:13:bb:10:af:f6:82:
77:4d:cb:b7:d8:c3:bd:97:80:d5:85:07:73:df:73:0b:86:e8:
16:07:3b:dc:71:4f:33:7b:cc:3e:28:15:09:db:46:2a:48:2d:
18:d3:d7:39:ee:e4:be:6f:b6:d0:31:a1:7c:61:f3:70:d2:36:
cf:2a:2d:b5:74:b2:ed:bb:8e:26:c5:32:2f:49:c3:14:be:87:
c5:d2:8c:77:76:07:78:6c:f9:db:59:87:c8:e3:cc:05:39:fb:
1d:d9:47:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:07 2025 by rpki-client