Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/lh0Ymr_ga0779X3_Cx26imTai5c.roa
File: lh0Ymr_ga0779X3_Cx26imTai5c.roa (raw, json)
Hash identifier: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=
Subject key identifier: 96:1D:18:9A:BF:E0:6B:4E:FB:F5:7D:FF:0B:1D:BA:8A:64:DA:8B:97
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 0194616E622AFD6B233316C73D8F10142F6E
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/lh0Ymr_ga0779X3_Cx26imTai5c.roa
Signing time: Mon 13 Jan 2025 20:50:11 +0000
ROA not before: Mon 13 Jan 2025 20:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207748
IP address blocks: 2a14:a901::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:6e:62:2a:fd:6b:23:33:16:c7:3d:8f:10:14:2f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Jan 13 20:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=961d189abfe06b4efbf57dff0b1dba8a64da8b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:b1:27:5f:83:21:df:cb:15:3e:34:5c:f2:
68:3a:e6:74:90:35:10:bb:0e:15:02:6e:2e:71:a4:
68:4e:0f:c2:b5:c1:43:3b:8b:ca:f6:95:68:95:65:
ea:16:fc:be:82:29:78:76:99:66:f2:ed:0b:a3:49:
5f:59:86:ae:ca:1b:80:0d:6c:b4:f8:0f:3a:1d:e3:
c1:e0:d5:23:bb:da:95:68:02:90:4e:44:a2:85:68:
40:52:d3:9a:5b:17:db:94:11:73:08:4b:b2:a6:ad:
af:96:51:b7:4f:54:41:af:51:9c:84:98:6b:49:ad:
f5:5b:29:64:c5:3e:ce:20:25:bb:03:4f:6f:c8:45:
2b:ca:0b:57:1d:de:f3:9d:e9:b3:7e:fd:be:96:2b:
2e:62:53:fd:a6:a3:14:ad:5d:98:53:8e:5b:a9:fa:
19:6c:8e:a4:99:1d:3d:e7:74:9b:3f:21:1d:e0:fc:
95:d6:a7:4a:65:3f:0e:1d:b9:60:8b:33:c1:87:88:
bc:05:de:97:da:62:69:b7:16:e6:79:fd:a1:81:2c:
3d:be:6f:2c:ad:97:5e:82:7c:58:84:39:4b:74:30:
3d:3a:44:87:fd:b1:79:6f:54:42:7c:a8:fd:a1:32:
03:34:eb:be:e0:d6:a8:47:05:8e:b2:25:73:b8:12:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:18:9A:BF:E0:6B:4E:FB:F5:7D:FF:0B:1D:BA:8A:64:DA:8B:97
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/lh0Ymr_ga0779X3_Cx26imTai5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a901::/44
Signature Algorithm: sha256WithRSAEncryption
72:f2:d0:08:24:46:ad:20:bf:ed:45:61:bc:c5:52:51:5f:ae:
e0:11:d6:33:ee:39:df:23:22:fb:9b:cb:3a:4f:7d:42:28:4d:
cc:46:f6:db:7e:ce:c7:b9:84:e7:a5:9c:bc:cc:c6:6b:19:e4:
39:09:ac:46:39:40:79:27:87:78:f7:d6:ae:d7:99:6a:1e:3a:
2a:2b:81:e6:d9:4d:76:16:60:45:7f:b2:0d:b9:df:0d:c7:f6:
b0:21:e5:7f:88:51:c8:3a:13:43:f3:9c:79:b5:a5:18:f9:ee:
d4:63:ea:38:b0:f3:c0:cf:b1:c2:7e:f4:9c:96:bc:0a:fb:ca:
ad:fa:2c:da:71:f2:6e:db:9b:69:13:d8:9e:42:5e:76:bd:ed:
b9:f7:d9:65:3a:a2:b3:29:2b:97:58:fd:f3:f3:ef:3d:fc:0e:
4f:8f:6d:e9:27:83:4b:ee:81:30:1e:34:c3:0e:80:d1:83:76:
01:3f:92:9e:d4:2d:24:40:5a:9b:a0:6b:81:0f:1c:8a:0c:fe:
67:0b:3d:c5:ed:18:db:3a:ee:fb:93:e7:a1:31:ae:98:10:ff:
65:a5:e3:06:db:76:f3:51:b3:ac:39:c4:dc:01:95:28:71:77:
b2:44:bf:2a:66:e9:8c:f3:81:3d:2b:db:a6:c6:67:e1:31:0c:
e8:18:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 20:13:47 2025 by rpki-client