Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa
File: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (raw, json)
Hash identifier: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=
Subject key identifier: 65:47:67:F5:79:B1:9A:26:36:C9:DD:12:0B:A2:56:03:68:56:00:28
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01942826F2BC786615333FB41155254E4AD9
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa
Signing time: Thu 02 Jan 2025 17:53:48 +0000
ROA not before: Thu 02 Jan 2025 17:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42352
IP address blocks: 2a07:76c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f2:bc:78:66:15:33:3f:b4:11:55:25:4e:4a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Jan 2 17:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=654767f579b19a2636c9dd120ba2560368560028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:50:29:41:4e:3f:af:61:84:ab:cb:ce:a1:
e4:32:97:30:00:03:fd:4c:0f:38:5f:ee:cf:7e:22:
f0:0d:a1:37:ef:a0:c4:8c:7a:48:6e:a8:71:fb:f5:
1a:48:ed:1f:f4:d9:20:ba:e5:0e:68:a2:4f:03:7a:
f2:85:e4:e2:47:7c:0d:02:19:43:54:b8:c2:01:11:
b5:38:4b:e0:34:2f:85:1b:28:e6:3d:f8:f7:39:d5:
18:04:df:81:6b:dc:db:c2:b0:db:3a:60:f5:f8:d7:
ca:6a:02:ca:ae:84:6b:64:e4:5f:ec:c7:ba:1d:c2:
fc:ef:7f:3a:b9:b3:70:c9:1f:77:90:b3:19:4c:64:
12:f7:38:28:39:74:1b:8c:4d:d3:61:2e:6a:9d:51:
f6:13:6e:57:27:56:f5:d7:08:cc:51:40:0d:51:d7:
88:4a:35:00:bc:45:f5:70:b4:03:dd:6d:09:72:5f:
a9:ff:51:a5:fe:2d:92:2f:89:da:5e:96:65:79:04:
db:51:81:f8:93:64:40:ce:b0:e1:16:22:bf:77:c4:
3c:e8:d7:e4:3f:ab:73:0a:71:50:04:06:48:b5:12:
ed:72:b3:25:8b:dc:8d:e7:4e:27:83:df:a9:19:1f:
ab:be:84:09:d5:f7:73:24:5a:db:13:33:ed:9d:bf:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:67:F5:79:B1:9A:26:36:C9:DD:12:0B:A2:56:03:68:56:00:28
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:76c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
69:90:55:83:d9:d2:f3:97:9c:d5:c8:13:43:f1:28:4a:1a:8d:
c7:c3:08:d0:5b:d7:1f:8c:da:f7:0a:6d:32:54:c1:cf:9d:ee:
e0:16:6a:e8:f7:8a:ed:cf:63:1c:17:26:ed:e9:d8:db:0f:a4:
c8:6d:60:fd:df:16:1e:39:53:53:1a:7a:b0:54:9d:28:b6:8a:
2e:65:1c:47:91:0d:20:c4:9a:d9:9b:fd:90:8a:5f:00:32:cb:
16:44:3a:a1:de:1c:82:fb:70:79:c2:b1:80:e8:a3:7d:b5:ee:
81:30:77:94:fa:e9:fd:42:ee:76:eb:f4:4a:34:6c:e2:f3:9e:
88:12:0b:e4:08:7f:aa:64:23:b0:4e:b9:2c:26:f5:78:e3:d7:
80:4c:5e:f7:5a:e5:c5:69:27:9f:3e:20:42:36:e4:35:2e:ac:
bd:1c:28:0c:64:c7:fe:d9:d1:0d:ac:af:19:02:57:5a:f1:52:
51:ad:47:f1:88:0e:c2:6b:60:f2:82:45:43:0e:13:e7:8e:5b:
28:94:47:66:1b:02:9a:06:b1:d0:7e:7c:94:36:3e:3a:37:84:
54:00:f7:9d:62:d8:89:2d:5c:9a:d0:da:31:ea:63:dc:b0:79:
bf:46:34:b5:21:a2:76:82:f1:e3:f1:93:e7:0b:d9:9a:70:db:
98:37:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:12:32 2025 by rpki-client