Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Zg1ofS_9H84eM5uURgGZtGfCFr0.roa
File: Zg1ofS_9H84eM5uURgGZtGfCFr0.roa (raw, json)
Hash identifier: 9jtOMznaWsDxCNYxB7wM59SKjlIsWYR6a/eNyampDkE=
Subject key identifier: 66:0D:68:7D:2F:FD:1F:CE:1E:33:9B:94:46:01:99:B4:67:C2:16:BD
Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial: 01942748157111B1DC02D29183F0A12638D0
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Zg1ofS_9H84eM5uURgGZtGfCFr0.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203785
IP address blocks: 2a13:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:71:11:b1:dc:02:d2:91:83:f0:a1:26:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660d687d2ffd1fce1e339b94460199b467c216bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:f0:c3:92:7d:6e:f5:33:e6:45:a1:b2:86:
47:09:6f:0a:38:9a:45:d1:6d:29:25:50:cb:87:dd:
83:66:9f:70:88:ac:db:10:93:53:a8:90:ea:19:50:
fd:dd:1e:5a:de:10:1c:76:eb:fb:2f:7e:e4:72:56:
89:eb:fc:e7:03:77:43:9e:a6:56:86:4e:6a:ed:77:
98:a5:9e:f4:99:5f:dc:cc:17:6a:b4:6b:2e:92:8b:
47:89:81:b9:5b:f7:07:cd:44:cb:76:57:b4:9f:2e:
85:19:13:52:53:66:48:fa:eb:75:18:ac:95:e1:5e:
13:c3:21:fa:c7:93:2b:36:6d:26:5f:38:6a:6e:8c:
6c:2a:4e:bb:e5:8d:44:57:10:5f:5b:3c:aa:79:16:
49:43:2f:ab:53:03:29:b2:d1:b9:60:8c:fd:e4:31:
b3:6d:a8:99:73:a8:fe:2f:52:e6:d9:a5:c8:ac:fe:
b6:8e:7d:48:d4:24:e5:b0:cb:68:54:5d:a9:b9:69:
e6:83:8c:4f:ea:d3:06:70:9d:d0:8f:43:ed:40:22:
c5:72:27:e5:0d:58:6a:ff:b8:e6:1b:5c:1a:f4:e7:
7b:43:5c:e9:c4:eb:cb:02:4a:0b:0e:ec:c0:80:86:
a0:39:99:7b:a0:00:ac:f2:be:c1:d3:73:6e:8b:2a:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:68:7D:2F:FD:1F:CE:1E:33:9B:94:46:01:99:B4:67:C2:16:BD
X509v3 Authority Key Identifier:
keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Zg1ofS_9H84eM5uURgGZtGfCFr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:dc:ff:a2:97:bd:67:1a:e1:39:8e:4d:36:92:6b:1d:5e:31:
9e:51:a9:a5:67:4f:52:3f:93:48:b3:25:21:68:73:e9:15:59:
f7:39:0c:0d:3a:b3:a1:95:7c:64:dd:ef:46:eb:34:69:4b:89:
39:1f:eb:4e:29:7d:84:16:4b:57:4c:98:91:5a:08:b3:cb:1d:
1a:ec:ff:17:b7:8e:25:92:bb:14:65:ef:81:a5:49:87:4d:99:
bf:5b:f1:87:66:b4:55:66:6e:ac:4f:ae:bd:3b:31:e6:bb:73:
4c:2e:6a:8b:39:2e:01:86:9c:c1:3a:ba:42:7b:42:ac:bb:c7:
a0:ac:65:23:5a:0e:7c:73:39:0e:97:07:d7:29:75:21:26:38:
c5:8c:1a:b5:49:d8:6f:9a:33:e8:8e:d1:69:25:c1:fc:1d:9f:
f4:2e:3e:75:cc:a3:93:53:53:2a:63:5a:68:54:cd:52:52:c8:
50:2e:1f:79:66:7d:c2:0d:85:01:56:3c:f9:b1:35:af:4c:98:
eb:ba:f0:b4:6b:ba:06:b3:cd:f3:7a:d7:9e:e7:3c:f9:a4:6e:
06:5c:6e:65:e5:39:57:a2:43:f7:a8:d6:70:47:a1:a9:06:57:
41:6a:d4:e1:1d:1f:4b:85:eb:e5:15:ad:9b:ad:35:f9:13:3b:
38:90:28:5a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSBVxEbHcAtKRg/ChJjjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZTc1YzQzYTQxNTAxZDM1NDE3YWU4MTNiZTI5ZjQyMjdm
YjJkY2YwHhcNMjUwMTAyMTM1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjBkNjg3ZDJmZmQxZmNlMWUzMzliOTQ0NjAxOTliNDY3YzIxNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKvww5J9bvUz5kWhsoZHCW8KOJpF
0W0pJVDLh92DZp9wiKzbEJNTqJDqGVD93R5a3hAcduv7L37kclaJ6/znA3dDnqZW
hk5q7XeYpZ70mV/czBdqtGsukotHiYG5W/cHzUTLdle0ny6FGRNSU2ZI+ut1GKyV
4V4TwyH6x5MrNm0mXzhqboxsKk675Y1EVxBfWzyqeRZJQy+rUwMpstG5YIz95DGz
baiZc6j+L1Lm2aXIrP62jn1I1CTlsMtoVF2puWnmg4xP6tMGcJ3Qj0PtQCLFcifl
DVhq/7jmG1wa9Od7Q1zpxOvLAkoLDuzAgIagOZl7oACs8r7B03Nuiyr+yQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGYNaH0v/R/OHjOblEYBmbRnwha9MB8GA1UdIwQY
MBaAFLznXEOkFQHTVBeugTvin0In+y3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEt
MDJmOTJhYTRlMmEwLzEvWmcxb2ZTXzlIODRlTTV1VVJnR1p0R2ZDRnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jYTdjNGEtZjk0Ni00OWU2LTlmNDEtMDJmOTJhYTRlMmEw
LzEvdk9kY1E2UVZBZE5VRjY2Qk8tS2ZRaWY3TGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNLgDAN
BgkqhkiG9w0BAQsFAAOCAQEADNz/ope9ZxrhOY5NNpJrHV4xnlGppWdPUj+TSLMl
IWhz6RVZ9zkMDTqzoZV8ZN3vRus0aUuJOR/rTil9hBZLV0yYkVoIs8sdGuz/F7eO
JZK7FGXvgaVJh02Zv1vxh2a0VWZurE+uvTsx5rtzTC5qizkuAYacwTq6QntCrLvH
oKxlI1oOfHM5DpcH1yl1ISY4xYwatUnYb5oz6I7RaSXB/B2f9C4+dcyjk1NTKmNa
aFTNUlLIUC4feWZ9wg2FAVY8+bE1r0yY67rwtGu6BrPN83rXnuc8+aRuBlxuZeU5
V6JD96jWcEehqQZXQWrU4R0fS4Xr5RWtm601+RM7OJAoWg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:31 2025 by rpki-client