Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZMt401_YVSJqfY_UIX4gUYv0c2g.roa
File: ZMt401_YVSJqfY_UIX4gUYv0c2g.roa (raw, json)
Hash identifier: Z+Ufvx2NPT3Q2vkmUWMpumAr/rLb83pw42WbuBVy7Ps=
Subject key identifier: 64:CB:78:D3:5F:D8:55:22:6A:7D:8F:D4:21:7E:20:51:8B:F4:73:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196616EC1D8527E1C2DB96344C7BD80D744
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZMt401_YVSJqfY_UIX4gUYv0c2g.roa
Signing time: Wed 23 Apr 2025 06:56:10 +0000
ROA not before: Wed 23 Apr 2025 06:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 2a0a:2d07:fc3b::/48 maxlen: 48
2a12:ecc0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:6e:c1:d8:52:7e:1c:2d:b9:63:44:c7:bd:80:d7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 23 06:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64cb78d35fd855226a7d8fd4217e20518bf47368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:0c:98:7c:2e:5e:7f:aa:1b:08:06:26:62:
4c:a1:cb:47:a5:e9:93:58:29:99:92:d0:b0:42:f7:
5f:f2:85:35:5d:59:27:d2:ef:f3:8f:12:6a:25:bd:
1e:66:ab:97:9b:4a:78:ca:5a:a8:64:6d:5d:c3:c3:
2a:d8:48:2f:6b:90:fe:2b:c2:a1:fe:0a:e1:9b:b5:
a3:04:b7:29:5f:de:0e:ee:e7:72:80:71:7f:91:25:
f9:85:90:90:23:f3:d9:dc:25:2a:c2:97:7e:0d:42:
45:9e:de:f7:d0:58:1b:8c:e4:67:1c:27:a3:fe:18:
83:c7:c6:64:7a:08:b0:91:d6:d8:82:22:05:4b:c6:
5b:83:4d:88:b2:8e:18:4d:cd:78:e0:2b:ac:92:eb:
c3:d2:da:ff:2c:0f:09:cc:11:ef:90:17:42:01:ae:
8d:a3:87:17:35:04:2d:56:13:2b:cf:4f:16:45:5b:
07:04:8a:6a:9a:a3:2c:8d:ec:17:60:9c:ec:4d:53:
c4:43:99:a5:10:bf:71:81:30:a3:3a:8a:72:b8:18:
bc:e3:f5:78:01:1e:4c:12:64:0b:e8:37:fc:e5:06:
77:ed:68:f4:80:45:b5:a7:71:02:3f:22:47:87:8f:
f9:50:32:ab:3f:f4:b6:21:89:eb:0e:cd:14:bb:9d:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:78:D3:5F:D8:55:22:6A:7D:8F:D4:21:7E:20:51:8B:F4:73:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZMt401_YVSJqfY_UIX4gUYv0c2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:fc3b::/48
2a12:ecc0:f::/48
Signature Algorithm: sha256WithRSAEncryption
77:b4:a9:b8:7f:65:8f:ae:b8:31:fd:7a:30:30:f7:0a:a3:92:
a9:ba:07:5b:6c:b9:e1:b7:7b:09:da:d2:be:b0:dc:55:a3:ea:
f7:fa:f5:f3:6b:8e:86:c6:3d:3d:87:b1:ea:58:64:bf:f2:03:
eb:54:e4:18:d0:54:6e:93:d4:ae:f9:21:b1:38:74:40:01:f2:
d4:2c:65:48:24:ca:f5:65:4c:97:0e:ff:21:6a:ad:b6:00:b8:
45:8a:ca:53:7b:10:3c:f7:57:33:01:7f:04:16:bd:09:3b:d3:
51:fc:7c:07:7d:80:49:d5:e4:b7:48:cb:26:76:8b:d6:54:72:
cc:19:62:c3:59:9d:95:61:a6:d7:06:6f:70:1e:48:45:10:a9:
99:d3:05:e9:bd:c5:6d:19:2b:ee:72:98:2f:7e:2e:31:65:f3:
f1:3e:9b:c4:d0:45:f0:22:ec:88:39:9a:be:6a:02:ea:c8:59:
f1:3a:f7:6d:f3:2a:f8:1f:92:d0:48:bb:c3:06:71:46:37:4e:
3a:37:0f:7a:a6:fd:a7:ab:f9:8d:24:16:2a:dc:c7:ae:19:d6:
ca:91:58:d4:b7:8e:17:d7:bf:dc:12:5a:36:d9:f8:3f:31:c9:
39:e9:25:ba:d2:50:c8:14:f3:c0:65:c1:f5:8c:03:d7:0e:99:
53:d5:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:32 2025 by rpki-client