Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yqBnELnwDRwhtpbBgCPnYk1TD0U.roa
File: yqBnELnwDRwhtpbBgCPnYk1TD0U.roa (raw, json)
Hash identifier: Cg/9m2tnfHR5Pa6v7HL1FudEg8BFT8fW9u9xBHWbIB4=
Subject key identifier: CA:A0:67:10:B9:F0:0D:1C:21:B6:96:C1:80:23:E7:62:4D:53:0F:45
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBECBC415F6FBF7DB3F1677338BE2F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yqBnELnwDRwhtpbBgCPnYk1TD0U.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213385
IP address blocks: 2a0c:9a40:81a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ec:bc:41:5f:6f:bf:7d:b3:f1:67:73:38:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa06710b9f00d1c21b696c18023e7624d530f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:47:2e:03:f4:ff:11:f2:09:16:bb:4a:62:
a4:48:30:14:4e:7f:0a:f5:5d:af:03:f7:ae:8d:e0:
34:7c:bb:70:af:73:e5:80:1a:46:22:26:6e:87:a4:
ae:17:a1:90:e1:bf:c8:59:2f:9f:37:ed:33:48:d9:
b8:89:d3:c7:90:85:99:3e:d5:b7:52:d2:d8:3e:a9:
cd:7a:66:da:33:c7:d6:b9:69:a3:4a:6a:6a:59:ac:
77:bc:25:9d:c6:83:98:89:52:42:09:bf:83:f5:c7:
7c:f4:6b:8d:d2:65:5a:08:e6:41:10:11:37:6c:37:
2f:37:21:c1:62:54:47:c6:7e:ec:25:5b:04:8b:82:
7d:f8:5a:65:ea:86:56:21:35:81:46:6c:bd:d8:8c:
60:29:8e:32:f3:c8:d9:14:a4:be:11:66:91:d9:50:
31:1f:fe:36:fe:51:a4:67:1f:56:5b:f1:b3:11:7c:
3f:a5:a5:d0:61:d1:e0:cb:0f:bc:7d:2d:e8:aa:68:
01:e9:9b:1d:cf:fe:0d:1c:97:0a:9c:f5:4d:55:32:
c5:32:6f:88:a5:8a:f2:d3:b6:e0:a7:af:5e:9e:48:
d0:09:dc:49:7b:eb:ca:e4:2a:59:fb:40:b0:97:ac:
ef:06:b3:09:fd:02:21:32:c3:bf:25:8b:87:41:1b:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:67:10:B9:F0:0D:1C:21:B6:96:C1:80:23:E7:62:4D:53:0F:45
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yqBnELnwDRwhtpbBgCPnYk1TD0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81a0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:6a:ea:57:f2:cd:bb:79:34:ac:e5:5a:33:82:3e:66:17:e7:
b5:c7:6f:76:5f:49:93:de:89:e8:24:ed:d7:b8:7d:ae:8c:e9:
3c:99:77:35:60:5f:e9:e8:a8:58:2a:7b:88:e2:35:c6:40:29:
4c:26:4d:86:ac:6f:1a:e4:9a:b6:83:49:98:1f:f3:48:9e:d4:
5a:2f:f8:c4:56:a0:b8:39:bb:a3:60:1f:2c:31:72:5a:f0:6f:
1a:15:84:00:8d:ec:5b:69:7e:97:4c:18:d5:48:92:77:77:8d:
57:fa:e5:b3:52:85:c7:9e:bd:b5:20:9e:6b:ff:e5:cd:fb:90:
c4:f6:03:9c:0e:63:74:b9:3f:c5:6e:96:ad:f0:5b:45:1f:2a:
46:fe:91:54:57:06:13:29:e4:20:cc:b7:60:a5:e2:0f:43:84:
67:98:a8:4b:bf:b0:09:17:04:e6:89:08:31:69:a1:1c:3e:52:
9b:10:4b:65:51:2c:32:f6:dd:3d:90:96:33:81:a7:fb:a0:b6:
b3:f7:a6:a0:7e:b4:8f:35:10:d0:91:db:30:7a:57:ec:f5:7b:
09:e0:c9:ef:81:db:d3:38:7c:73:97:28:38:72:0c:b5:88:a7:
2b:a8:f5:1b:b8:3e:3f:8a:7a:66:66:f0:8c:2b:e9:6e:a3:96:
73:6b:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:46 2025 by rpki-client