Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/y-yADsSuAYCkz0gxVgZddom2080.roa
File: y-yADsSuAYCkz0gxVgZddom2080.roa (raw, json)
Hash identifier: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=
Subject key identifier: CB:EC:80:0E:C4:AE:01:80:A4:CF:48:31:56:06:5D:76:89:B6:D3:CD
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 019428237484A4B060EF37AF9A03FC5E7FAF
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/y-yADsSuAYCkz0gxVgZddom2080.roa
Signing time: Thu 02 Jan 2025 17:49:59 +0000
ROA not before: Thu 02 Jan 2025 17:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:2cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:74:84:a4:b0:60:ef:37:af:9a:03:fc:5e:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Jan 2 17:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbec800ec4ae0180a4cf483156065d7689b6d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:63:d1:87:b6:40:e5:7f:be:18:48:6f:39:
4d:d1:df:96:f8:3d:fd:a3:9d:51:07:0e:4d:6c:ae:
bc:84:01:ed:45:40:65:7a:48:b6:d8:ab:f3:2c:f9:
5a:29:b7:42:0c:73:af:94:e2:b5:7d:20:0d:0e:4d:
d8:97:6e:1c:1b:f2:59:06:b8:93:b6:e1:d6:94:08:
eb:54:81:e5:06:76:18:44:36:2d:da:54:c3:e0:92:
f5:ad:60:d8:32:cc:d5:b1:20:f3:47:31:0c:f2:e0:
24:03:54:ae:eb:c3:eb:15:35:e4:b6:df:bc:16:97:
c6:e9:98:b8:c6:33:dd:63:98:d1:6d:70:5a:20:77:
27:69:cf:9a:9d:07:34:b4:67:fd:47:ee:a1:40:96:
cb:14:e7:80:eb:f4:a0:d3:3d:16:09:3c:82:61:48:
71:55:78:94:01:09:91:30:46:8b:7b:b4:ba:07:53:
59:55:2a:87:1b:2f:0d:2d:f8:7b:a0:9c:fa:37:82:
e8:2f:93:5d:a1:82:3e:38:10:7a:49:3f:2e:ce:c2:
b4:6b:dc:c8:10:00:eb:dd:97:4b:7e:eb:a7:fe:93:
72:21:13:13:41:fb:43:9c:fe:94:8f:4f:b2:a8:f3:
c6:b0:42:f1:8d:f2:42:67:2e:fa:81:c4:93:9a:6c:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:80:0E:C4:AE:01:80:A4:CF:48:31:56:06:5D:76:89:B6:D3:CD
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/y-yADsSuAYCkz0gxVgZddom2080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2cc::/48
Signature Algorithm: sha256WithRSAEncryption
28:e6:8b:1d:ef:fe:39:35:7e:41:d2:64:da:8e:4d:3b:bc:26:
fa:dc:57:4c:8c:52:04:e0:98:2e:84:76:49:cc:23:a8:71:b2:
ba:5b:77:eb:66:ec:1e:88:c6:55:6e:c9:6c:05:77:3d:fe:28:
eb:bd:fb:32:29:51:47:4d:e0:b8:92:6d:05:f7:38:b2:41:1b:
37:5c:66:03:02:3d:6c:19:92:37:fd:1d:e6:b0:74:ba:61:83:
dc:1c:e6:ae:2f:a1:a1:c7:4f:f7:fe:7e:49:22:7b:51:64:d1:
13:71:fe:97:94:5b:f3:5b:7c:7a:f5:6d:5f:9c:6a:e2:cb:a3:
f9:51:b4:a3:a5:5d:1e:25:fc:55:26:a1:e2:5b:4b:d2:f0:2f:
d7:17:5a:45:3e:1b:b3:94:48:12:ec:b7:0b:0c:a9:35:e2:0c:
3a:51:7c:ef:f7:d3:24:ff:d5:37:86:42:87:b3:3f:3d:29:bc:
b3:e7:db:88:a5:84:de:49:a5:44:a9:b8:7c:d8:5b:c1:6d:82:
b5:d8:21:07:16:b0:fe:9b:10:e3:f1:b5:92:25:05:4c:30:d2:
70:20:ad:d8:73:f1:31:c4:c7:1a:2a:87:8c:18:a6:17:9a:9d:
aa:1a:bc:a9:09:90:5d:e5:5d:f7:e8:0d:83:8c:3a:24:6d:94:
58:58:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:47 2025 by rpki-client