Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/yN3-coe-yJTzFymhuWAPFUYAkF4.roa
File: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (raw, json)
Hash identifier: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=
Subject key identifier: C8:DD:FE:72:87:BE:C8:94:F3:17:29:A1:B9:60:0F:15:46:00:90:5E
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01942067B85D139ABA794EAD17B2DCA3812E
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/yN3-coe-yJTzFymhuWAPFUYAkF4.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 2001:678:804::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b8:5d:13:9a:ba:79:4e:ad:17:b2:dc:a3:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ddfe7287bec894f31729a1b9600f154600905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:5e:eb:4e:63:6f:94:03:9a:59:b8:2d:cd:
7a:cd:51:a5:ae:d4:ad:49:15:e0:e0:89:25:ec:d4:
c5:69:58:db:a7:57:e6:77:63:25:f7:ff:08:c6:ee:
43:42:87:a3:a3:4e:ba:44:7b:77:78:f8:ad:71:bb:
5b:c5:50:08:3b:24:5d:ae:17:82:ea:14:22:53:02:
cc:63:05:3f:f5:1c:82:96:56:85:79:4d:de:f3:14:
ec:85:7a:72:af:dd:33:ba:39:7f:b6:3b:c4:2b:d1:
e9:bb:9d:27:67:1b:3f:db:f7:b2:50:82:4b:28:8b:
03:36:88:ee:f9:af:16:3e:0e:69:d7:3e:a1:b2:ea:
02:f5:01:5c:49:bf:f6:3f:5c:96:c2:e9:03:97:47:
72:24:7e:3d:a5:ac:16:2c:33:d0:06:f0:23:17:03:
85:64:15:0b:ed:df:33:ee:b1:73:3e:9f:15:04:27:
0e:a9:c4:10:1d:31:84:24:99:e6:ac:fd:d7:23:b2:
b4:6b:f8:30:c6:54:b5:41:bd:cf:45:02:75:1e:c2:
ac:e5:15:d7:af:e3:58:fe:01:d9:ff:2c:67:04:09:
c3:1c:e9:25:a6:f3:82:02:6e:b0:df:ae:80:4b:04:
77:f9:7e:2a:14:d7:a0:3c:c1:48:1e:30:6f:a9:69:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:FE:72:87:BE:C8:94:F3:17:29:A1:B9:60:0F:15:46:00:90:5E
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/yN3-coe-yJTzFymhuWAPFUYAkF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:804::/48
Signature Algorithm: sha256WithRSAEncryption
c1:0b:a3:f2:e8:ab:5a:4b:22:d8:46:b5:45:66:fb:11:76:bb:
19:e5:92:0a:17:72:23:f4:6f:90:48:aa:3f:f1:71:3c:83:e8:
d6:1b:66:e8:41:82:3b:1b:5b:3f:c2:73:b5:75:34:1a:73:23:
8e:14:23:78:f7:58:0b:b0:df:ac:b0:37:6f:d0:33:f5:2b:9a:
8b:17:ad:f7:a3:a9:ee:b7:3a:a9:47:50:25:45:44:a3:08:63:
41:13:2d:7b:db:fb:2e:c1:d8:ea:f2:c8:e9:04:88:25:73:78:
0d:26:a8:30:e2:e0:19:67:0d:66:8c:d9:92:35:80:b5:8b:55:
4f:13:4a:fe:30:03:b7:da:54:97:ca:40:87:25:22:6d:0b:67:
77:34:82:52:a9:07:5d:e2:13:9b:6d:d5:a9:c6:e9:13:98:d9:
91:d3:f9:8f:67:02:ae:32:17:89:2a:73:98:7d:f3:dd:7e:43:
56:a7:c6:7f:c8:65:35:c0:62:03:b4:56:fd:e9:e5:72:67:58:
b2:ba:98:06:61:6c:03:ee:74:94:87:d5:3a:ad:57:0a:d3:08:
f7:7e:65:3c:fd:70:93:7e:fe:a8:5e:27:68:9d:bd:63:1a:b5:
51:0b:bf:f0:95:c0:e5:db:74:c3:b7:0e:01:11:08:7d:e8:e7:
27:a0:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:22 2025 by rpki-client