Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa
File: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (raw, json)
Hash identifier: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=
Subject key identifier: CE:D6:F9:9D:F1:99:E3:53:B2:C8:B2:AE:D1:6C:A3:46:41:96:12:AB
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 019638575940AC3D1222B2CB1DC1A96AEE40
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa
Signing time: Tue 15 Apr 2025 07:26:10 +0000
ROA not before: Tue 15 Apr 2025 07:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 141.93.240.0/22 maxlen: 22
2a0d:f0c0:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:57:59:40:ac:3d:12:22:b2:cb:1d:c1:a9:6a:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Apr 15 07:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ced6f99df199e353b2c8b2aed16ca346419612ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:29:14:fe:ab:b7:1e:86:4b:24:75:dc:4d:
05:28:b9:7c:2f:67:b0:f4:ab:26:8b:ba:b8:82:14:
be:57:8d:2d:52:1b:0e:11:e5:30:4c:f4:3b:68:fc:
86:6d:66:07:91:27:c7:d8:71:ed:70:e7:35:9a:d6:
4b:1a:cd:8d:9e:01:e2:39:53:2c:29:eb:87:61:c7:
a9:05:e6:08:cf:18:9b:c9:28:be:1e:22:df:3a:fa:
e2:e4:0d:fe:09:22:8b:9c:80:56:14:2a:74:33:6b:
6d:da:a9:c2:93:65:c1:ad:8f:f5:4b:75:04:72:91:
a9:c0:5f:57:af:f4:a6:40:ce:f6:98:06:5a:3a:8d:
1e:03:7d:d3:5d:c0:e0:ad:d4:a8:5d:17:4c:61:6c:
5a:42:88:50:ea:5e:84:8b:21:53:8c:0e:43:16:a1:
9c:2d:f6:38:02:13:65:97:f5:50:37:f1:54:e1:40:
de:7a:85:2e:fb:56:c5:af:67:12:19:aa:77:30:9f:
f0:be:84:4d:12:65:98:8a:9a:ef:4b:f1:a3:4a:d8:
ff:80:74:20:3a:b9:8a:4e:03:e0:9e:b2:ba:44:1f:
7a:ee:8a:92:63:f0:0a:fb:bc:3a:a9:cc:11:20:4a:
a7:4f:40:ce:81:6c:b5:38:9d:74:e6:4c:13:46:d5:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D6:F9:9D:F1:99:E3:53:B2:C8:B2:AE:D1:6C:A3:46:41:96:12:AB
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.240.0/22
IPv6:
2a0d:f0c0:e000::/40
Signature Algorithm: sha256WithRSAEncryption
2d:ee:96:fc:46:16:41:31:3e:10:fc:5c:9f:ca:77:e5:8f:8b:
24:a5:c7:ce:28:33:6d:31:7a:22:0a:86:5f:39:e8:ab:6c:47:
59:f7:c3:79:b7:b5:2d:e7:6c:6d:2f:dd:ba:02:9f:5a:0c:95:
9a:a4:02:8f:d3:a1:f4:ad:89:d5:8d:95:f2:70:cb:4c:57:d8:
a6:6a:60:e9:d9:ff:21:2c:17:f6:cc:f1:b5:8e:89:85:34:a8:
0d:a0:93:cd:ab:e5:ff:34:f8:36:dd:d5:3c:a9:a5:fb:34:17:
59:e1:ff:06:af:fb:00:ab:6e:02:89:8b:cb:9d:3a:c3:de:e3:
44:47:37:90:70:98:41:d2:6a:b2:2f:f7:c7:e8:7a:0d:39:0d:
9b:ac:fc:7a:cb:5e:59:f4:23:76:bb:fe:87:88:a2:e2:af:86:
87:4b:99:b9:f4:7b:b1:53:a0:a2:e4:e7:ba:a4:10:d5:83:17:
16:54:7e:00:75:7c:f8:f9:68:26:3f:fc:90:5c:b8:3c:c8:0f:
4f:ad:eb:e0:ae:e5:ce:26:30:0a:4b:29:6a:a1:eb:57:b4:93:
d0:6f:4b:76:9c:9a:72:3c:e3:38:a4:51:76:1c:32:fe:26:9c:
fd:08:c6:4d:71:53:d4:de:72:26:6a:5d:ba:57:8a:6e:b1:58:
95:70:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:45:14 2025 by rpki-client