Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zbAgIhB9UBueLLgs2g8PDDqXLXM.roa
File: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (raw, json)
Hash identifier: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=
Subject key identifier: CD:B0:20:22:10:7D:50:1B:9E:2C:B8:2C:DA:0F:0F:0C:3A:97:2D:73
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 01941F8C0FD523C4C2E0CBA841A5D23C2A87
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zbAgIhB9UBueLLgs2g8PDDqXLXM.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201190
IP address blocks: 2001:67c:b0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0f:d5:23:c4:c2:e0:cb:a8:41:a5:d2:3c:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb02022107d501b9e2cb82cda0f0f0c3a972d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:3d:b6:5a:f8:b3:7d:f5:dd:3e:0d:43:df:
f2:32:88:4d:35:da:bf:61:04:14:2f:66:2b:fb:85:
41:c7:2a:e3:d7:93:58:9f:99:1a:78:4f:2d:42:a4:
41:11:b4:a7:89:21:15:46:d4:3d:13:f5:32:cc:3c:
1a:65:bf:90:ca:e0:03:b8:e3:f2:f7:e6:df:85:43:
4a:01:6c:5f:5a:14:71:fc:9c:2d:4e:af:37:ff:fc:
eb:f1:68:13:0a:86:df:c9:5a:ca:69:07:9f:59:c2:
90:a0:02:ca:42:1e:b4:64:a2:06:0e:de:5c:32:4a:
d2:a9:46:6f:52:fa:6f:bd:2e:e3:c6:69:92:61:a1:
48:75:21:bd:c9:1f:c6:dc:7d:f2:2b:32:dc:15:bd:
5c:4e:dd:c2:1b:0e:06:f6:84:9c:8a:64:09:0e:e7:
8d:c1:66:b5:72:e0:7c:af:7d:96:51:1d:49:1b:ac:
f6:f7:91:b0:71:1a:8e:41:a7:6e:f9:22:a2:fc:fc:
60:76:f4:5b:f9:ed:46:61:35:9a:b7:38:c2:85:e9:
e0:5e:57:ef:b3:74:a4:a2:48:33:1c:5b:bc:02:ad:
e9:80:1c:d3:12:30:99:ac:7c:eb:2b:7a:78:5d:ce:
49:c7:65:8f:a8:f9:e1:ab:32:12:de:1f:87:c6:cb:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:20:22:10:7D:50:1B:9E:2C:B8:2C:DA:0F:0F:0C:3A:97:2D:73
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/zbAgIhB9UBueLLgs2g8PDDqXLXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b0c::/48
Signature Algorithm: sha256WithRSAEncryption
45:fe:34:25:20:e1:86:63:43:c2:48:ee:0c:b8:b3:a5:9e:be:
4d:f4:fb:08:95:48:c4:53:43:91:27:21:e0:41:73:87:dd:8f:
2c:23:bd:fc:f1:ca:32:8f:99:94:bc:93:9d:f6:82:29:4d:da:
b8:d3:86:a5:5f:ba:e3:6c:b7:2c:ab:bc:45:c4:46:2c:0d:a4:
f4:e3:81:ed:8b:cd:fc:57:76:25:f3:0e:bd:30:46:2c:24:61:
8a:8f:9f:70:39:6d:aa:be:9a:ff:5b:ed:42:2f:41:d6:b0:ee:
2f:32:0b:0b:cb:4a:1a:10:6c:ee:68:1a:a4:ac:b1:b3:56:53:
f0:e9:66:cb:41:c0:84:9a:be:63:e2:ba:14:4a:25:b4:ae:56:
48:25:85:24:f3:5c:9a:2a:26:fb:34:51:88:45:3e:6e:6b:5e:
39:c2:80:f1:de:59:ad:8a:ef:de:18:3e:e7:8f:80:be:a9:99:
33:79:f1:d4:48:8c:3f:3d:39:89:9b:a7:4a:fb:e2:25:ad:fe:
22:d5:86:53:fa:97:ec:5e:32:51:bd:80:7f:09:bc:8b:cf:d7:
45:1d:a5:df:5b:d0:12:5e:a5:42:44:02:15:b3:16:d4:72:ac:
f9:0e:9d:f9:25:67:af:23:75:ed:23:a8:ff:7d:74:3a:71:3d:
b1:08:c2:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjA/VI8TC4MuoQaXSPCqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1
NjdjZDMwHhcNMjUwMTAxMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGIwMjAyMjEwN2Q1MDFiOWUyY2I4MmNkYTBmMGYwYzNhOTcyZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Q9tlr4s3313T4NQ9/yMohNNdq/
YQQUL2Yr+4VBxyrj15NYn5kaeE8tQqRBEbSniSEVRtQ9E/UyzDwaZb+QyuADuOPy
9+bfhUNKAWxfWhRx/JwtTq83//zr8WgTCobfyVrKaQefWcKQoALKQh60ZKIGDt5c
MkrSqUZvUvpvvS7jxmmSYaFIdSG9yR/G3H3yKzLcFb1cTt3CGw4G9oScimQJDueN
wWa1cuB8r32WUR1JG6z295GwcRqOQadu+SKi/PxgdvRb+e1GYTWatzjChengXlfv
s3SkokgzHFu8Aq3pgBzTEjCZrHzrK3p4Xc5Jx2WPqPnhqzIS3h+Hxss2UQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM2wICIQfVAbniy4LNoPDww6ly1zMB8GA1UdIwQY
MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt
YjNlNDNkMzA1Yjg5LzEvemJBZ0loQjlVQnVlTExnczJnOFBERHFYTFhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5
LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsM
MA0GCSqGSIb3DQEBCwUAA4IBAQBF/jQlIOGGY0PCSO4MuLOlnr5N9PsIlUjEU0OR
JyHgQXOH3Y8sI7388coyj5mUvJOd9oIpTdq404alX7rjbLcsq7xFxEYsDaT044Ht
i838V3Yl8w69MEYsJGGKj59wOW2qvpr/W+1CL0HWsO4vMgsLy0oaEGzuaBqkrLGz
VlPw6WbLQcCEmr5j4roUSiW0rlZIJYUk81yaKib7NFGIRT5ua145woDx3lmtiu/e
GD7nj4C+qZkzefHUSIw/PTmJm6dK++Ilrf4i1YZT+pfsXjJRvYB/CbyLz9dFHaXf
W9ASXqVCRAIVsxbUcqz5Dp35JWevI3XtI6j/fXQ6cT2xCMKF
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:00:46 2025 by rpki-client