Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa
File: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (raw, json)
Hash identifier: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=
Subject key identifier: AB:36:03:F8:BC:5D:A1:38:DE:37:6A:FD:DE:2C:91:FA:03:B8:07:B6
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAFE367D627EE601314709C06BD7B4
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212331
IP address blocks: 2a0f:607:1057::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fe:36:7d:62:7e:e6:01:31:47:09:c0:6b:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3603f8bc5da138de376afdde2c91fa03b807b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:69:26:0d:ed:9f:d3:83:27:84:3f:a4:e8:
e1:22:0d:c6:6e:53:35:20:88:23:42:04:0b:92:00:
9e:2f:10:50:6e:5c:4c:75:20:44:f3:8a:d6:45:ce:
14:c7:1c:e7:21:84:5e:ae:75:50:de:b5:d4:4b:03:
7d:24:c3:8e:85:b0:c9:8f:e0:3b:e1:dc:04:e4:8a:
f7:57:77:9b:95:4c:e4:af:0d:5f:32:9a:8c:4d:4f:
5f:b6:92:4e:40:d3:a2:32:2b:bc:19:b6:9e:a2:b1:
8a:bb:37:40:95:93:b7:36:5d:46:38:f2:1f:a0:4c:
84:88:ac:99:f0:f1:e7:4a:88:9f:07:22:0f:e6:e1:
9c:c6:73:99:a9:00:97:0d:a2:7d:e7:eb:d7:f4:72:
ea:af:ba:b9:52:f1:e2:dd:84:4b:11:bf:72:9e:f3:
1d:8a:a2:34:cb:19:2f:73:13:46:21:46:cf:c2:f6:
74:0e:99:4a:6c:f8:80:73:a1:0b:e9:12:64:51:35:
f0:d9:10:f7:a6:75:8d:ff:9d:f7:a8:28:06:d2:10:
8e:50:7f:d5:ce:e6:a8:81:09:bb:aa:87:b2:25:c4:
8f:f1:6d:b3:6f:8b:2e:a2:84:0a:24:1e:9a:ad:92:
98:60:2b:15:80:b1:20:5a:ae:05:74:68:bc:5f:fe:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:03:F8:BC:5D:A1:38:DE:37:6A:FD:DE:2C:91:FA:03:B8:07:B6
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1057::/48
Signature Algorithm: sha256WithRSAEncryption
7c:2b:13:54:7b:7e:ef:a5:d2:ff:e5:3c:bc:a2:4c:af:64:78:
fe:04:9d:02:7f:a1:13:5d:05:aa:74:5c:00:64:b6:bb:24:58:
46:ae:79:35:71:32:a4:b5:2e:1a:f6:a1:da:2f:d1:f5:74:3b:
02:ce:64:49:a7:67:d5:b2:79:eb:54:09:39:87:cf:63:7d:9d:
de:b2:3f:df:75:0d:4a:c6:a6:07:7a:bb:b3:6a:86:12:d7:93:
72:99:51:ef:d2:ae:6d:90:1e:f9:56:0e:f6:0d:fc:49:56:8c:
eb:a3:d5:66:16:1f:34:1d:24:7e:55:ed:a7:f1:4b:2f:1b:96:
f8:e8:8b:b1:09:1b:a8:ff:70:39:a2:f2:a8:8d:84:47:40:b6:
92:9a:97:b9:97:35:1e:a1:9d:3e:cc:6b:fa:be:a3:7c:11:4b:
c0:5e:e5:0b:96:d7:53:58:73:49:2c:36:73:06:1e:cf:a0:63:
19:e2:12:1e:39:5d:61:a8:d4:eb:26:8f:c1:99:97:2c:b6:09:
f4:72:fc:ea:56:2f:65:71:b1:dc:c5:07:f1:37:24:b4:af:bc:
d1:36:be:ad:85:8f:37:4b:94:90:d6:2a:2c:36:ba:48:74:9b:
eb:67:7c:a8:f7:e5:71:fc:2d:f5:ce:36:37:90:2b:de:11:11:
a1:39:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:06 2025 by rpki-client