Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jyhaUuX-ZThRseELlPrxByqUyJw.roa
File: jyhaUuX-ZThRseELlPrxByqUyJw.roa (raw, json)
Hash identifier: e5odEgSnsIIM6hBXp3RT/Su+ZTlWWPrwLkc2XthjZ6o=
Subject key identifier: 8F:28:5A:52:E5:FE:65:38:51:B1:E1:0B:94:FA:F1:07:2A:94:C8:9C
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01957F95858BC1D0EED5ABB4304F7B749C24
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jyhaUuX-ZThRseELlPrxByqUyJw.roa
Signing time: Mon 10 Mar 2025 10:24:20 +0000
ROA not before: Mon 10 Mar 2025 10:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204669
IP address blocks: 2a06:b441::/32 maxlen: 32
2a11:2f40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:95:85:8b:c1:d0:ee:d5:ab:b4:30:4f:7b:74:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 10 10:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f285a52e5fe653851b1e10b94faf1072a94c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:92:4f:f0:61:ab:4d:4c:68:47:ab:ef:5f:
1b:95:1c:c1:95:2d:ec:de:07:0c:dc:83:a5:35:d9:
27:95:62:7a:c6:4e:a8:58:de:0e:66:6a:06:33:78:
22:18:d0:52:cf:23:32:96:d6:e9:6a:de:62:03:99:
d7:94:07:65:46:94:f8:aa:d1:e8:8e:67:9c:2f:91:
48:b0:ff:4a:54:5e:bc:e8:85:26:53:aa:b2:60:53:
78:4f:90:c3:e0:72:01:7f:bb:6c:83:a3:92:e0:e3:
93:83:aa:61:e5:bf:32:2e:2d:b3:5f:d2:67:42:51:
f1:80:cb:f1:2c:62:a2:5f:8c:18:5a:41:2b:83:11:
7e:1e:b6:41:8c:9e:54:25:ab:6d:74:ba:00:c1:c9:
36:cb:43:d3:0a:14:ac:fd:2b:3e:c1:2f:76:21:20:
49:07:9e:81:c1:a0:52:8f:23:84:ab:31:6d:d0:79:
8d:6a:ec:a6:33:c0:8e:58:6d:be:cc:a6:68:ec:0a:
9b:41:8c:3e:13:75:f7:cd:a5:93:1d:de:24:49:d0:
4a:07:47:81:22:41:03:01:de:30:e5:ac:8f:70:b9:
32:63:aa:37:31:7e:a2:c9:bd:62:d5:7c:8b:5e:1a:
d7:5a:8e:c1:9c:98:26:14:80:e6:71:8c:bf:e5:9b:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:5A:52:E5:FE:65:38:51:B1:E1:0B:94:FA:F1:07:2A:94:C8:9C
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jyhaUuX-ZThRseELlPrxByqUyJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b441::/32
2a11:2f40::/29
2a11:7240::/29
Signature Algorithm: sha256WithRSAEncryption
88:ae:07:02:95:dd:90:4c:66:d6:7c:3a:b1:d1:1e:76:2d:ad:
fd:2c:4e:1e:60:df:ee:2d:f8:40:66:bf:76:c5:2b:68:5f:75:
9f:6f:de:7d:4d:d2:ae:73:a0:cc:14:85:a2:81:26:ef:36:cd:
d7:41:eb:82:73:6a:05:0e:73:b8:13:11:a0:5f:d5:09:56:cc:
c5:6a:c7:f1:09:cb:b9:65:ac:28:23:2d:d1:56:ad:a6:71:53:
70:23:27:b6:04:54:7a:8f:86:d9:1b:71:9a:5e:65:8f:4a:a1:
06:b0:4c:3e:68:6f:de:f9:7e:d6:01:d9:26:aa:8a:ac:88:f0:
91:7c:5e:f5:43:1d:6d:e9:08:76:81:db:52:08:5e:d4:58:e6:
d1:33:3e:9d:67:75:95:a4:8b:dd:56:59:1e:19:e2:15:95:66:
da:31:26:ac:8e:fd:5d:bd:7a:a1:41:bc:d2:89:0f:4f:55:2d:
0d:40:4f:05:60:82:30:79:6f:ce:15:bb:1c:cb:1f:ba:1f:d3:
72:a7:1e:2f:3f:fc:6e:bd:a2:61:fe:94:86:c0:bf:b2:e5:cd:
c7:cc:7b:bb:9d:26:b8:29:77:b5:5b:7a:eb:48:b3:af:cf:65:
46:06:78:9c:48:39:f4:4c:d3:ff:39:8f:d4:68:5f:a6:d7:06:
02:8a:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:21:11 2025 by rpki-client