Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZV2JED1UN9-ep8-W922CKlA46SI.roa
File: ZV2JED1UN9-ep8-W922CKlA46SI.roa (raw, json)
Hash identifier: 3/8cUdDCKr9AIc3ph1XaWbMqotj3po6N49sYTqCcuKs=
Subject key identifier: 65:5D:89:10:3D:54:37:DF:9E:A7:CF:96:F7:6D:82:2A:50:38:E9:22
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E3FA9ED2CEDA4C3F88570B9D2FD0
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZV2JED1UN9-ep8-W922CKlA46SI.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7803:fd11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e3:fa:9e:d2:ce:da:4c:3f:88:57:0b:9d:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655d89103d5437df9ea7cf96f76d822a5038e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:95:c8:e3:52:c4:46:12:b2:08:b4:32:aa:
1c:de:e0:f3:5b:4e:89:51:6c:2e:a2:a4:b9:d6:b2:
f0:c1:82:36:e2:b3:1b:8e:1d:b3:60:fb:d7:83:81:
9b:20:cb:f8:5f:a4:a2:09:a6:0d:9d:ae:3b:10:6c:
d5:a7:c9:26:a8:6f:ce:96:b0:5d:26:68:e9:40:6c:
66:8b:2c:2f:22:73:e1:20:d1:dd:fe:f6:86:96:7e:
6a:21:1f:ec:73:7e:8b:b1:62:8d:30:20:0a:c0:48:
b3:13:1f:44:69:2e:52:b8:c4:70:1c:63:84:b6:55:
74:99:88:4b:02:35:97:34:0a:1e:bf:6d:af:f1:85:
1c:35:83:60:6b:e8:55:fc:fe:a2:13:20:c6:84:57:
81:8e:2c:4f:23:2b:2c:02:b6:8f:12:55:28:ac:49:
a5:94:b1:00:fa:ac:cc:81:6c:76:cb:89:fd:1a:0d:
79:24:9d:00:71:99:80:36:f1:1a:d2:83:5b:c8:5f:
e7:bb:de:33:1a:d4:1c:86:a2:b1:29:27:97:73:9c:
26:f8:e1:da:91:27:4e:b1:b0:ef:92:85:f0:fb:e3:
32:4a:0b:ad:f4:ca:65:8d:bf:f2:4c:cc:ce:da:0d:
86:bf:21:3c:5a:f6:92:9c:73:59:f6:89:1f:92:6c:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:89:10:3D:54:37:DF:9E:A7:CF:96:F7:6D:82:2A:50:38:E9:22
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZV2JED1UN9-ep8-W922CKlA46SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fd11::/48
Signature Algorithm: sha256WithRSAEncryption
90:7f:12:13:08:f9:41:a9:54:39:af:b7:b3:5b:9a:44:79:79:
8b:db:67:8c:c4:de:d6:bf:51:b7:89:1f:58:a6:06:8a:6f:66:
18:61:1f:80:44:fe:70:54:d1:54:e7:a8:ba:32:08:da:69:39:
a3:ea:88:2a:0e:f3:b5:95:08:94:15:24:dc:89:5d:e3:b1:81:
19:60:59:e5:c4:57:cf:30:dd:21:ee:18:43:8b:c9:c7:b6:54:
61:f0:c5:f0:de:65:7c:2c:4a:dc:60:c9:d4:1f:96:ba:f3:02:
c1:ff:90:d5:66:90:ac:c3:03:96:17:c4:5e:01:84:de:ab:f3:
13:e9:42:0b:20:4c:2f:62:11:ad:45:86:0b:f0:c5:57:34:bd:
be:70:38:4b:fd:91:77:08:38:a9:01:04:47:62:f1:10:03:a8:
d3:8f:19:96:b9:15:d6:13:91:59:c1:37:c4:f6:60:94:20:41:
e8:d1:74:53:fc:4f:3a:bc:0f:4b:c5:08:15:6a:af:b0:73:23:
d1:4b:8e:cc:1b:6b:07:c0:4b:84:14:46:98:8f:44:60:2a:ae:
dc:8c:54:a9:25:d5:b9:e0:88:4e:28:9a:2d:fe:99:a9:25:1c:
b3:7c:fd:0f:37:f9:c4:2f:71:c5:87:3c:06:f7:ff:3e:9d:a0:
11:67:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:59 2025 by rpki-client