Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/yahFXL8WchvVvLEEaOs9ROPCOuY.roa
File: yahFXL8WchvVvLEEaOs9ROPCOuY.roa (raw, json)
Hash identifier: QGTni4yC0/AQyam/WFFScLyUqzuHZrT6aTReWZmwEg0=
Subject key identifier: C9:A8:45:5C:BF:16:72:1B:D5:BC:B1:04:68:EB:3D:44:E3:C2:3A:E6
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019425FBF45A865C94BBD576D30AC8A211A2
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/yahFXL8WchvVvLEEaOs9ROPCOuY.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.64.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f4:5a:86:5c:94:bb:d5:76:d3:0a:c8:a2:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a8455cbf16721bd5bcb10468eb3d44e3c23ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:07:78:01:aa:2b:04:26:51:ab:86:6a:a4:
87:33:65:f6:fc:01:0c:ae:4b:a5:75:2d:29:99:9a:
5d:2a:4e:50:86:a3:80:13:b4:74:d9:65:23:e6:e0:
ef:a9:49:86:13:36:59:1b:67:34:8b:ff:23:e3:81:
a5:c9:b3:3b:59:52:5f:d5:97:48:9f:f6:86:b7:01:
a8:d1:8c:fd:20:49:db:af:55:b3:8c:24:f9:d0:b7:
9a:cf:c1:1a:64:23:29:1a:0f:c0:6b:8d:12:09:a1:
27:59:ce:0e:d2:ff:34:36:81:05:59:ed:7a:de:14:
60:ca:8d:a2:b1:60:a0:3e:1b:be:39:79:aa:9b:95:
74:52:76:a1:09:eb:a3:d8:eb:4c:46:7b:9e:ff:4e:
79:8e:3c:83:13:64:b2:30:52:4c:b5:33:2d:9c:f3:
49:cc:38:33:77:70:50:e4:a5:8b:d0:d1:8b:1c:ba:
ba:1f:d4:9c:a8:12:b1:fd:40:f6:70:02:24:be:c9:
1b:7a:a7:7c:06:82:09:5e:55:88:56:e3:d8:69:fe:
44:e6:b2:72:93:9f:a2:70:9f:9f:d6:51:a2:c7:71:
0b:6f:0c:6d:8b:18:b9:fb:74:26:ae:71:63:76:e2:
72:8a:c7:80:10:00:84:20:c7:3a:f8:ff:bc:e8:49:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:45:5C:BF:16:72:1B:D5:BC:B1:04:68:EB:3D:44:E3:C2:3A:E6
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/yahFXL8WchvVvLEEaOs9ROPCOuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:55:33:9b:dd:b2:4f:ce:41:24:6f:48:48:4b:dc:87:06:5c:
27:92:1d:38:de:ff:05:f8:a7:d8:6a:9f:9b:d6:a0:03:a2:77:
8a:83:b7:be:e6:a4:0a:d5:11:b3:9c:26:35:26:58:2b:f4:76:
7f:f5:4a:fb:46:03:ea:00:56:6f:69:98:6b:53:5f:04:af:6d:
bd:c6:f8:d5:ff:1d:39:c4:81:96:3f:56:97:99:4c:0e:4c:7e:
97:3d:9b:37:9f:67:34:1e:8a:8e:13:9f:06:a0:a5:4d:e1:e1:
ae:68:4b:a9:1d:66:a1:2a:21:32:15:ed:ab:f2:6f:84:db:4b:
96:e0:7e:04:1a:37:01:b5:42:72:74:75:bf:90:a8:e8:e1:1a:
1b:d1:cb:06:71:ee:bd:c3:26:b7:79:6b:7c:c4:c6:88:ab:24:
17:cb:b9:46:df:fd:46:1d:f5:89:e2:aa:99:4d:34:5d:ae:bd:
a0:0e:20:79:ea:ab:e7:71:4f:6d:0d:11:d1:87:82:9c:28:41:
f9:b8:08:0f:9d:d9:4a:13:b1:17:00:4d:36:bd:84:c7:88:eb:
3c:7c:3f:e9:60:95:09:bb:0f:17:c5:f1:92:85:fa:ea:85:1f:
02:48:d7:7f:37:40:14:95:c7:85:52:82:8f:e0:56:58:03:db:
72:e3:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:37 2025 by rpki-client