Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/H5ysVvFP9uugn7UMgVFU6mDqqJo.roa
File: H5ysVvFP9uugn7UMgVFU6mDqqJo.roa (raw, json)
Hash identifier: wod2c4UZcbTgGm1p5jx7N59EiAjvlr1HWLQEomhwG3U=
Subject key identifier: 1F:9C:AC:56:F1:4F:F6:EB:A0:9F:B5:0C:81:51:54:EA:60:EA:A8:9A
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B49CAA79784017C932CB264D41585
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/H5ysVvFP9uugn7UMgVFU6mDqqJo.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142418
IP address blocks: 2a12:f8c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:ca:a7:97:84:01:7c:93:2c:b2:64:d4:15:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9cac56f14ff6eba09fb50c815154ea60eaa89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:6d:a3:bf:f0:d6:80:f7:09:81:6c:43:c7:
65:b5:96:02:58:66:95:a3:54:9a:6d:9b:71:21:74:
a0:5f:04:77:30:16:19:f5:80:e9:ec:db:fc:38:09:
b0:ae:dc:2f:5a:6a:d3:32:bd:89:52:07:27:6e:be:
76:bc:0d:ec:1d:87:d2:b3:9b:2d:1c:24:25:20:81:
aa:a9:d7:c7:99:a0:c0:fd:15:23:9d:7a:c0:a2:8a:
61:e6:b6:5f:e2:dd:cb:f5:11:11:7c:39:8b:d9:de:
ee:69:63:7c:91:26:77:78:07:09:72:ea:a9:c7:0b:
4b:d1:d3:8b:fe:5a:92:5a:e5:c8:03:0f:9d:66:b7:
a1:ff:f9:bf:0e:45:fa:f8:f9:e6:9b:d0:82:93:76:
39:81:5a:e8:19:bf:5c:75:a2:29:fb:fa:f1:e8:63:
4f:43:9f:79:00:c0:34:6b:d1:c6:6b:7c:55:a8:82:
4d:ca:31:f9:4d:7f:f2:f6:e6:12:12:81:67:94:a1:
48:32:80:ac:85:bb:2b:85:bc:92:ab:63:e0:36:aa:
26:6d:ba:c9:e2:1d:3a:1a:e5:78:91:36:7f:79:ff:
9a:d2:66:63:c1:0c:4b:d5:47:09:02:aa:41:59:0f:
4e:d1:89:89:c7:77:23:3f:f5:7f:11:d1:fb:ee:71:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:AC:56:F1:4F:F6:EB:A0:9F:B5:0C:81:51:54:EA:60:EA:A8:9A
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/H5ysVvFP9uugn7UMgVFU6mDqqJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:b8:3e:18:e9:fd:85:b8:8c:72:dd:66:9d:6e:13:fd:d9:13:
1c:19:20:a0:a4:75:0a:14:2e:12:99:5f:4b:a9:88:fa:30:39:
5f:ac:ee:3c:1b:87:27:4c:80:1b:15:99:e8:3e:8a:5a:9b:50:
38:79:93:29:ed:54:32:fa:ff:de:e1:e7:4a:60:7e:6c:22:6a:
96:c8:3a:06:cc:0c:ac:4c:89:f5:a9:15:65:17:b0:15:b3:d3:
9b:a1:2b:fb:49:c4:74:75:7b:9c:66:7d:7c:ff:a4:25:79:6a:
06:cd:a2:52:6c:e9:66:55:49:1d:d7:d2:78:73:f0:1f:d9:5b:
1b:cb:cd:67:bb:ce:d2:3c:5d:ac:73:e9:3b:f0:75:e2:13:ea:
87:ab:9d:4e:4d:e9:e7:f1:24:4c:7b:86:e3:d5:7f:fb:f4:f9:
c8:75:83:9a:2e:92:29:38:13:90:00:10:2b:35:63:55:d7:c5:
d9:a7:2e:b4:3b:53:7c:52:3c:e6:32:39:fd:dd:c0:c5:56:82:
e5:0a:85:be:b1:39:a4:70:51:34:b7:72:66:f0:53:57:8f:ba:
22:72:9d:44:d8:58:f7:c6:9e:67:1e:41:c6:fa:8e:44:b7:91:
d6:2c:0f:98:5b:83:1b:a1:6a:57:d1:6b:73:05:06:0e:81:55:
0b:5c:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:20:04 2025 by rpki-client