Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa
File: YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa (raw, json)
Hash identifier: Jm8MJr8XSRnuve3Kq6+Wn+2PsgepRbJEnsM8Cooldhs=
Subject key identifier: 61:18:F5:88:64:55:30:2C:B8:44:D7:FA:98:1B:DA:62:F1:89:9C:80
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0196581C345D685F4B5C31F4EDB47E5EE799
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa
Signing time: Mon 21 Apr 2025 11:29:25 +0000
ROA not before: Mon 21 Apr 2025 11:29:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31445
IP address blocks: 2a14:2c02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:1c:34:5d:68:5f:4b:5c:31:f4:ed:b4:7e:5e:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Apr 21 11:29:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6118f5886455302cb844d7fa981bda62f1899c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:5d:60:0a:4a:c1:c5:8a:cc:51:86:0d:64:
7a:0b:7b:2a:39:4d:f3:5b:b2:e8:36:7e:2e:82:57:
7d:3c:80:cc:f3:6c:47:0f:dd:ee:65:fb:39:b2:95:
4b:1f:f2:0b:6d:8e:c5:9c:52:ed:20:23:de:97:b6:
63:af:fa:97:8d:4f:00:d1:2c:d9:6b:04:83:6c:91:
14:6d:82:ae:27:1c:8f:0c:94:79:48:c1:dd:6b:0f:
9a:5d:df:da:55:b8:22:9e:5c:c2:68:0d:d5:b8:8f:
9f:31:c4:82:b1:41:87:77:f9:78:6b:3f:6d:1b:c4:
5b:0e:cb:19:47:0a:4a:86:49:af:10:6c:63:c0:28:
02:dc:68:d0:13:29:ff:f8:b0:53:a6:a9:d6:54:f0:
06:58:42:c8:ac:57:ad:f2:bc:29:8c:61:1b:a1:51:
95:e4:55:1d:8b:63:9d:95:d0:2f:b2:ab:20:57:9b:
18:fc:cb:62:cc:3d:75:58:fb:01:1a:3c:0b:8e:f0:
0b:d7:c3:08:09:96:8d:74:51:29:28:52:14:54:70:
3a:52:6c:7e:8f:d7:5e:31:bd:8e:41:ee:0a:a4:65:
36:61:aa:3d:ee:5a:47:f4:a3:78:c6:bc:f3:04:c6:
87:23:21:5b:d4:f7:a1:6f:10:78:30:fe:b1:69:16:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:F5:88:64:55:30:2C:B8:44:D7:FA:98:1B:DA:62:F1:89:9C:80
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2c02::/32
Signature Algorithm: sha256WithRSAEncryption
10:60:60:d4:59:2f:cb:0e:ba:82:0f:4f:dd:91:d7:68:0f:67:
cf:7a:9f:76:f3:fb:32:50:d8:51:a9:b7:2a:70:24:e1:43:e8:
27:d2:84:75:ac:ad:7b:6e:07:19:08:ac:83:59:1d:12:14:de:
02:43:5b:4e:70:66:d4:4b:7d:f3:ab:ef:2d:df:48:e3:ed:e9:
41:09:6d:78:64:44:d1:d0:f8:11:a6:23:52:e0:03:ae:9c:d5:
bc:8f:58:30:69:37:53:f0:1b:27:9e:c0:08:24:f3:a9:0e:37:
c7:4b:a1:af:34:b9:40:df:dc:e5:01:3a:b4:94:37:3b:84:fe:
be:03:48:68:6b:6d:93:21:8e:42:b8:41:4b:08:88:b8:48:a9:
c1:95:2b:16:f8:26:89:05:6b:33:83:63:cb:83:8d:e5:8e:36:
1d:f7:63:6b:28:95:4f:a1:6b:3d:42:f5:04:d1:71:7c:ba:c6:
83:60:54:a6:fb:cc:26:9f:ca:fe:54:8f:fd:bd:1a:be:1c:6c:
54:26:43:02:b0:4d:d0:22:01:ba:4f:39:76:0e:56:53:9d:72:
4e:9f:ac:e6:48:18:54:55:76:96:61:ad:3e:61:0a:be:9e:28:
37:06:45:42:eb:81:7f:4a:93:1b:7c:64:dd:04:15:a3:f5:2e:
dc:18:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:35:13 2025 by rpki-client