Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/y38_fk_dl6De5uovg7WKuAzPolA.roa
File: y38_fk_dl6De5uovg7WKuAzPolA.roa (raw, json)
Hash identifier: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=
Subject key identifier: CB:7F:3F:7E:4F:DD:97:A0:DE:E6:EA:2F:83:B5:8A:B8:0C:CF:A2:50
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F77FA673F02D050B081262A119086
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/y38_fk_dl6De5uovg7WKuAzPolA.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41732
IP address blocks: 2a03:9c00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:fa:67:3f:02:d0:50:b0:81:26:2a:11:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7f3f7e4fdd97a0dee6ea2f83b58ab80ccfa250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:75:94:55:07:e5:95:f2:ae:35:38:0f:40:
68:01:ba:af:0d:19:4e:98:07:14:4a:1c:7a:24:04:
df:8c:bb:ef:6e:eb:dd:52:3a:d4:a6:23:1e:38:b2:
6b:b1:cd:44:f6:cd:e3:28:88:ee:b0:64:b6:b3:fd:
26:b1:11:15:f7:a3:3b:66:35:04:b8:72:71:74:92:
ca:02:12:7b:91:13:45:7f:11:e5:95:ff:47:5d:dd:
18:45:84:b0:19:ff:ef:19:2e:a5:b4:c1:8b:ba:56:
28:ba:ce:96:72:27:68:f1:b5:12:b8:d4:0b:b4:ae:
eb:53:c6:cc:44:3a:75:ac:f1:1d:43:be:b9:fd:18:
d0:5e:3f:8f:81:96:cc:62:63:4b:d6:59:5a:df:9b:
b7:27:74:89:ee:21:61:58:1e:87:1d:5d:ff:ac:2c:
97:1c:58:5f:51:45:eb:5d:6a:e6:ea:2f:a2:73:87:
12:d1:5c:ee:3e:52:14:e2:a8:52:75:a4:53:7f:32:
ed:2f:37:96:e0:d3:bf:46:78:bc:00:9f:d8:e9:a0:
46:24:2a:b7:e4:76:de:2a:29:ca:f9:88:85:06:ab:
0e:22:c5:31:ea:79:33:c1:de:7b:e9:f5:1b:34:4d:
91:46:3f:64:46:27:8b:16:03:5d:42:12:af:a7:21:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:3F:7E:4F:DD:97:A0:DE:E6:EA:2F:83:B5:8A:B8:0C:CF:A2:50
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/y38_fk_dl6De5uovg7WKuAzPolA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:d::/48
Signature Algorithm: sha256WithRSAEncryption
64:be:ce:c1:0f:dd:f6:e3:7c:a2:8e:89:e0:e7:e9:f1:b1:1e:
85:ab:e3:6f:d5:64:84:cf:d0:cb:45:84:b9:73:23:61:62:63:
77:a5:b3:9f:03:e1:b3:97:49:19:27:a7:38:9b:42:00:1a:69:
9f:92:e4:18:eb:5d:57:0a:a1:ab:d7:8c:14:d0:2f:80:8b:24:
29:c3:fa:b3:64:20:52:72:81:b4:2e:0d:c2:70:09:7d:c7:38:
8a:40:7b:3f:fb:54:00:18:8b:ce:2a:bd:04:a7:52:ad:d5:01:
81:24:7c:3e:08:92:11:06:b7:f7:87:ed:af:e4:45:60:0b:9a:
ed:f8:b0:03:b3:4d:36:3a:3c:06:84:48:3b:36:fb:54:de:4d:
58:47:d9:8b:c9:2a:40:32:d2:a7:da:82:6b:fb:e5:af:74:c5:
11:8f:cb:34:78:26:9c:d8:58:19:5a:a0:7f:ea:65:6d:d6:99:
19:58:70:c5:cd:79:18:26:c4:5c:4c:ca:88:aa:c6:90:cb:20:
4a:fb:f8:e7:cb:1f:38:fb:6a:7c:7c:09:a3:a7:0d:80:2b:79:
f6:8a:dd:ce:38:e4:e6:e7:58:00:1a:f0:18:f5:2d:ed:10:19:
e8:31:3c:7f:cf:7e:25:e4:c7:ad:70:70:c5:06:90:56:fe:8a:
04:63:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:22:08 2025 by rpki-client