Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1ZZeKP6zifRveU5BXtqbVQOUTio.roa
File: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (raw, json)
Hash identifier: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=
Subject key identifier: D5:96:5E:28:FE:B3:89:F4:6F:79:4E:41:5E:DA:9B:55:03:94:4E:2A
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 019425FDDD25B63CE01C0CE9343B4171C39A
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1ZZeKP6zifRveU5BXtqbVQOUTio.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207168
IP address blocks: 2a00:1e68:98::/47 maxlen: 128
2a00:1e68:125::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dd:25:b6:3c:e0:1c:0c:e9:34:3b:41:71:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5965e28feb389f46f794e415eda9b5503944e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:29:21:ea:73:4f:42:57:9e:1a:00:8b:c0:
a2:73:44:27:c1:27:72:18:9c:b4:13:96:59:44:bd:
2f:67:3a:af:8e:98:1f:ca:22:41:e6:bc:88:d7:98:
4e:3f:d9:3b:c2:da:79:7f:08:71:32:e3:d4:28:94:
c5:08:54:e9:97:9d:7c:c4:9f:32:5c:90:81:2d:92:
31:b0:fe:01:23:c9:8d:e7:ac:77:6b:16:7b:37:6a:
c1:95:13:0b:00:0b:df:3f:d1:fe:2c:26:1e:ee:4f:
85:64:3e:56:ba:07:df:64:7b:bf:09:52:d7:f4:66:
67:08:c7:80:80:17:63:87:58:23:78:04:92:53:e0:
fe:d4:60:06:71:24:21:e6:93:e2:91:db:76:32:86:
66:cd:c5:05:48:e0:cb:41:4f:0e:5c:78:cd:7f:23:
90:64:e3:14:5d:cd:33:df:0b:21:ed:35:6c:c2:f8:
28:30:6a:02:6b:91:db:62:7a:7b:ab:e6:f7:15:d8:
d0:3f:70:ce:96:8d:47:1c:47:05:c0:db:95:a9:1d:
1b:b8:64:40:ca:ea:79:03:cc:62:6f:0b:5d:eb:0b:
82:4e:9e:a0:c3:23:5e:5e:f6:aa:89:77:c5:51:bb:
74:71:dd:ae:55:ab:18:0d:e2:8f:09:76:05:ab:bd:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:5E:28:FE:B3:89:F4:6F:79:4E:41:5E:DA:9B:55:03:94:4E:2A
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1ZZeKP6zifRveU5BXtqbVQOUTio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e68:98::/47
2a00:1e68:125::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3a:9b:6c:00:63:ad:84:9b:e7:67:c8:d6:ec:47:e1:9d:70:
67:f6:54:40:ff:24:30:c8:a6:4c:69:1f:74:49:07:61:24:62:
ed:44:e9:b8:86:aa:60:e4:3f:15:20:53:28:36:d9:48:39:e2:
f4:1b:c4:45:e3:6b:d8:16:c3:04:0e:d9:95:8e:f8:5c:44:73:
9a:3e:40:0b:2b:18:41:52:6d:97:bc:21:6e:ef:5e:41:83:aa:
97:04:ed:44:63:49:42:92:05:6f:10:9f:7c:4e:63:da:be:4d:
eb:40:f2:d1:19:78:58:82:b8:05:01:6c:5b:cc:c6:f0:3d:26:
70:9a:6c:68:a9:6c:4c:a7:6d:05:5b:e1:95:5e:2c:0c:cb:f2:
36:a1:4f:35:52:6a:0c:97:b9:cf:a8:3b:cf:d9:2e:f9:7e:5a:
bc:49:94:de:6d:3b:2e:f9:94:bb:22:98:4f:67:32:79:02:87:
cf:ed:b2:1a:94:26:4d:fb:cf:ec:b5:73:a3:e8:57:c9:f2:4b:
15:a8:04:a8:80:b8:62:e6:c2:3f:f7:dd:89:9a:dd:b1:6c:4d:
f8:e4:7b:86:96:cb:f6:2f:7b:9a:13:59:ba:54:d7:50:71:5a:
7d:cd:47:77:46:1d:da:5b:fa:1a:f8:39:73:cd:30:7c:34:92:
16:4f:af:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:33 2025 by rpki-client