Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DZGoLzq5rLNjIOKkvj1SFCoR5ws.roa
File: DZGoLzq5rLNjIOKkvj1SFCoR5ws.roa (raw, json)
Hash identifier: tiZ0DokHfiohFnWUFyJBqXtjLAmG6ya4SmZ5Edqupfs=
Subject key identifier: 0D:91:A8:2F:3A:B9:AC:B3:63:20:E2:A4:BE:3D:52:14:2A:11:E7:0B
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0196C619055C1DF49742D549043A46B6F667
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DZGoLzq5rLNjIOKkvj1SFCoR5ws.roa
Signing time: Mon 12 May 2025 20:04:10 +0000
ROA not before: Mon 12 May 2025 20:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213729
IP address blocks: 2a0f:7803:f650::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:19:05:5c:1d:f4:97:42:d5:49:04:3a:46:b6:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: May 12 20:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d91a82f3ab9acb36320e2a4be3d52142a11e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:1c:b7:f4:55:54:81:60:6b:a4:98:26:b8:
a8:b5:c5:be:08:72:ac:c6:c1:12:b8:77:ec:8e:90:
8f:49:e5:86:ae:2b:c3:8a:82:52:c4:bd:75:59:fb:
20:d7:c0:76:57:cb:a0:aa:7d:61:7e:de:bb:9f:bb:
3d:e9:1a:67:23:b8:79:e3:6e:33:e9:a8:2e:6a:0f:
dd:5c:7c:47:63:98:bd:a3:c8:b2:77:a3:40:64:f6:
ba:49:7f:50:58:ab:06:27:d4:35:b3:63:2d:39:f2:
a3:d1:e8:45:75:04:82:4d:ef:af:fe:47:16:f5:ad:
54:d3:da:73:33:09:d2:ec:dd:bc:24:5d:a5:ea:9a:
4c:51:9f:dc:a8:49:58:dc:82:22:e0:9a:8a:94:cd:
30:39:e6:72:92:dc:65:23:a3:8b:98:e0:29:48:d5:
1d:93:a6:86:77:ae:4c:e7:fb:d2:c3:23:ec:46:e2:
a5:fd:09:a4:09:49:75:5a:04:4f:79:65:19:2d:c8:
61:39:56:65:f6:78:7c:40:e7:9c:36:7d:b8:37:83:
2f:94:76:d1:05:36:b9:c5:65:bd:ba:11:99:f7:9e:
8a:a7:75:66:97:8e:6e:37:1d:18:d0:ac:3d:5f:35:
36:1e:45:dd:14:2f:8c:c5:15:86:08:84:d5:76:3a:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:A8:2F:3A:B9:AC:B3:63:20:E2:A4:BE:3D:52:14:2A:11:E7:0B
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DZGoLzq5rLNjIOKkvj1SFCoR5ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f650::/44
Signature Algorithm: sha256WithRSAEncryption
6a:34:3a:02:73:81:24:04:4f:f9:26:7a:4f:e5:3b:1e:1a:1c:
8a:59:3a:c0:c8:7e:19:ca:44:ea:0e:8b:83:18:b6:3d:11:1b:
6b:d9:db:54:8b:ac:7b:6a:71:a8:c8:4e:26:5c:ba:7d:b3:f7:
5b:5a:c1:1a:e9:a8:d8:66:bc:5f:c1:85:6d:72:ec:eb:c6:e6:
09:92:2d:a4:01:e9:68:41:31:2d:e9:80:58:d0:ee:06:63:c5:
84:90:40:88:b1:96:f1:43:04:ce:09:d9:61:ff:b4:78:89:be:
fb:ef:1f:7e:21:05:e3:0a:06:63:29:86:b1:bd:c3:4d:e1:d1:
0c:e0:0b:ac:fe:61:7a:a6:cd:1b:35:5e:59:15:5b:63:34:ba:
b0:3c:1d:c0:09:60:fc:de:37:6a:5f:ed:50:1d:91:a9:73:ac:
27:07:e9:eb:1b:7c:02:d5:25:30:9a:99:8d:22:17:24:7f:89:
b7:ad:38:13:ff:a4:47:eb:50:b8:04:6d:49:f7:87:9b:93:a3:
3b:98:6f:15:1f:70:09:f6:84:cb:f2:a7:ba:e4:61:95:04:cf:
97:92:5e:c3:cf:dd:4b:84:64:58:20:7c:ce:13:bf:8a:29:5e:
aa:ae:1d:be:f6:6d:5d:a4:5b:d5:44:58:df:a4:a5:17:ef:ce:
3b:71:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:18:38 2025 by rpki-client