Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zb4avbb04dtUwp6SkmN4pF1xuk0.roa
File: Zb4avbb04dtUwp6SkmN4pF1xuk0.roa (raw, json)
Hash identifier: 5qXuawgTl2yVtej7aPFMt8w0/xuyBwSFI7WElGGUHZM=
Subject key identifier: 65:BE:1A:BD:B6:F4:E1:DB:54:C2:9E:92:92:63:78:A4:5D:71:BA:4D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196B192CF15F6D5C1A7FDB38774427813B4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zb4avbb04dtUwp6SkmN4pF1xuk0.roa
Signing time: Thu 08 May 2025 20:25:10 +0000
ROA not before: Thu 08 May 2025 20:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213705
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a10:3f80::/32 maxlen: 32
2a13:c244::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:92:cf:15:f6:d5:c1:a7:fd:b3:87:74:42:78:13:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 8 20:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65be1abdb6f4e1db54c29e92926378a45d71ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:a8:ab:cc:8b:88:8c:58:16:4c:fd:36:49:
16:76:5d:8a:65:82:c5:eb:f7:66:ac:64:f3:cc:23:
d3:06:20:19:50:34:ba:0f:64:28:ff:9b:39:d3:2a:
30:42:a3:66:93:e1:76:2b:b5:3a:9b:67:13:82:4a:
b5:0d:85:24:de:ba:b3:6d:a7:0c:2c:31:47:7d:46:
af:3b:f9:60:b7:86:04:fd:24:52:52:b3:96:89:b9:
15:53:63:ee:90:79:c3:ab:dc:40:b4:6a:6f:9c:a3:
a0:95:1c:0a:19:c2:dc:14:62:74:6b:e1:87:36:47:
c0:fc:c5:df:6a:97:0f:84:b8:c7:e2:1c:de:8f:eb:
93:d1:b5:2b:10:3d:d1:dc:66:a6:b1:f0:d6:62:87:
e9:bd:f7:29:51:e7:17:6f:e9:0d:27:14:35:29:28:
a4:81:2c:44:84:bb:f8:14:b9:65:5f:a7:0c:27:d8:
54:e5:88:8f:28:84:b8:74:a7:d3:fd:7e:64:8c:a9:
90:1c:a6:9b:af:f6:a6:55:49:ca:79:f5:b5:2b:22:
29:f4:0d:8f:b8:3b:a2:a5:d5:f3:48:69:c7:81:49:
b8:9f:09:54:a7:89:94:c9:e5:34:10:01:91:6c:98:
f5:93:1b:bb:a5:01:ca:28:a8:5f:d8:69:45:40:3f:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:1A:BD:B6:F4:E1:DB:54:C2:9E:92:92:63:78:A4:5D:71:BA:4D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Zb4avbb04dtUwp6SkmN4pF1xuk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a10:3f80::/32
2a13:c244::/33
Signature Algorithm: sha256WithRSAEncryption
cc:73:b7:61:01:5b:d4:96:cf:41:60:75:20:95:68:a5:4c:dc:
17:e1:d5:5b:8c:df:1d:b8:47:c6:16:02:4b:b2:ef:ac:e5:e1:
b0:c0:c2:f7:85:6c:ad:90:65:5a:2c:1d:05:9a:db:91:4d:78:
f6:05:15:6b:02:58:a3:e0:82:e5:13:a7:09:5a:de:d9:68:cf:
86:e2:5f:e3:89:e9:0b:e4:6e:86:0f:af:b7:ea:88:cd:f9:de:
25:7f:bd:69:f5:b5:91:03:60:b6:46:c9:26:dc:10:04:87:48:
d4:24:30:f7:1d:4a:2f:07:06:a8:3e:4c:68:8e:91:37:12:3c:
17:aa:58:84:a8:c1:d5:51:7a:49:ef:2d:b3:c0:2a:c1:33:f4:
2c:7b:f7:44:6c:ee:09:03:fe:08:71:5e:80:5c:47:5e:67:aa:
ce:81:e3:5a:d8:73:3c:d5:5d:65:a3:b6:81:7b:be:d3:9b:cd:
64:eb:68:f3:f7:c1:79:16:a2:0a:ee:f6:46:a1:61:b1:58:89:
19:6c:e6:76:05:ac:46:b2:76:73:4e:79:fe:9e:a4:46:df:94:
e2:f8:74:30:a3:7d:91:9e:ea:15:61:1b:65:ae:e3:90:ce:a8:
8c:87:c6:81:0e:e3:b7:4d:3f:29:e8:29:7f:60:35:47:46:1a:
c5:42:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:37:27 2025 by rpki-client