Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa
File: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (raw, json)
Hash identifier: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=
Subject key identifier: 64:1B:E5:F6:48:13:7E:5F:71:A6:80:83:6A:53:90:E3:57:EC:42:50
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01942521EF26F1FAF2DA0690691AC58DC2A0
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59570
IP address blocks: 2001:678:d30::/48 maxlen: 48
2001:678:d34::/48 maxlen: 48
2001:67c:2148::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:26:f1:fa:f2:da:06:90:69:1a:c5:8d:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=641be5f648137e5f71a680836a5390e357ec4250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:16:03:f5:be:e5:b8:e9:28:63:18:77:7f:
a7:a6:a6:e6:83:ec:83:48:dd:c4:5a:f4:9f:ee:e6:
8d:e1:f4:2e:d2:d4:16:69:e3:ca:2a:11:89:74:58:
c3:9a:a0:5f:c3:20:28:2a:27:14:9d:08:84:53:c2:
50:0e:f6:d1:f0:69:7d:61:55:bf:35:e6:43:f2:d5:
6a:e9:41:29:20:da:33:00:48:55:ad:f9:a2:a5:b7:
e6:fd:9d:08:50:ee:1c:4d:1f:9b:3a:14:48:38:d5:
85:d4:55:e2:71:28:cb:a3:63:83:ff:ad:e6:b9:52:
a6:02:ff:da:34:3b:bc:22:ea:2b:d1:82:77:03:d5:
34:db:d8:98:54:67:0b:ce:1c:ff:84:9c:20:79:d5:
7b:6b:94:27:21:c9:0a:fa:c5:26:20:0b:02:8b:a2:
b5:d6:81:61:69:8b:70:e8:d1:cf:76:1a:d4:1d:a4:
4d:21:17:40:2e:e6:4a:f9:92:53:0a:17:97:79:59:
72:72:b3:d7:16:d5:cc:c7:fc:5b:92:6c:e7:c1:17:
a3:b1:c0:f0:9e:80:f7:d9:09:66:74:d3:26:f6:d0:
c1:ff:84:af:4b:1c:00:68:73:d6:d8:65:fc:85:da:
a3:fb:9f:bb:d3:40:88:c1:c5:cf:b4:c3:51:f0:fa:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:E5:F6:48:13:7E:5F:71:A6:80:83:6A:53:90:E3:57:EC:42:50
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d30::/48
2001:678:d34::/48
2001:67c:2148::/48
Signature Algorithm: sha256WithRSAEncryption
99:cd:e8:89:bb:2f:b7:d8:4f:a9:a5:dd:64:10:9b:b5:ca:c6:
42:da:46:22:18:a6:9e:d4:73:43:02:50:78:8b:0f:96:81:6c:
79:39:8a:36:f0:1e:ca:ee:97:e1:83:9e:91:a7:72:b0:41:ea:
45:12:51:e1:9c:43:17:77:8f:fa:c3:be:47:fe:a6:51:1b:dc:
8d:4d:ad:e8:d6:b6:38:8c:f3:62:d0:9d:71:ac:08:d6:10:8e:
53:dc:fa:0b:86:b8:62:2d:2e:ab:b5:98:5f:e2:ff:28:a9:c6:
4e:a5:02:19:15:40:87:a8:32:b4:46:aa:b6:49:e7:22:e6:21:
29:96:df:19:c7:eb:63:33:5d:65:dd:a1:8b:29:3f:98:20:69:
b0:c6:d5:da:00:c5:e0:9f:a1:b0:dc:51:91:86:de:8f:b3:a6:
8e:1c:ec:4b:f1:5e:05:9a:ce:b0:02:28:64:79:07:c8:c7:df:
ac:c5:cc:f8:e5:b8:50:35:61:0c:69:6b:b9:c8:d3:5a:37:93:
d6:7a:25:41:d7:62:60:27:6a:4c:31:59:38:d9:ee:34:59:5d:
51:a7:0b:18:dd:5d:d4:43:fe:99:34:ab:23:c5:87:de:83:07:
e2:19:d5:1e:eb:41:af:02:b5:de:42:d8:70:35:b3:0c:5f:f5:
ae:c2:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:43:38 2025 by rpki-client