Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YMfuOzfz0qapFy4IH28nN_Ve1L0.roa
File: YMfuOzfz0qapFy4IH28nN_Ve1L0.roa (raw, json)
Hash identifier: mlkH9fkGhLL1JARC59khkZ0D9FDG7ZxJXFcvxt5Ajng=
Subject key identifier: 60:C7:EE:3B:37:F3:D2:A6:A9:17:2E:08:1F:6F:27:37:F5:5E:D4:BD
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222037D4A2FBED3701E993360BA77A3B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YMfuOzfz0qapFy4IH28nN_Ve1L0.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211153
IP address blocks: 2a0e:8f02:2190::/44 maxlen: 48
2a0e:8f02:f034::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:d4:a2:fb:ed:37:01:e9:93:36:0b:a7:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c7ee3b37f3d2a6a9172e081f6f2737f55ed4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:11:90:1e:65:5d:e5:b9:71:73:43:cf:52:
97:36:00:1a:a9:6e:e8:28:19:08:48:18:3b:c7:cc:
f5:4b:57:b4:e5:1b:72:67:6e:8d:a1:ab:f8:c1:bb:
72:9e:f7:e6:7b:c6:dd:8e:04:74:47:42:96:dc:35:
10:75:66:cd:b8:ef:f7:e4:66:00:36:04:69:81:54:
5c:a9:fb:5f:5d:52:ed:33:ee:36:97:ec:95:c9:a1:
33:03:08:39:72:0b:8a:80:eb:fa:1c:24:2b:e5:90:
b4:89:33:98:1c:ff:52:14:bc:77:dd:09:00:43:72:
4e:4c:20:6e:2e:eb:18:72:b2:c5:b5:c4:fa:db:0c:
e0:eb:f9:85:6d:a3:31:e2:ad:3e:88:de:18:cf:ed:
d3:17:e0:c5:37:2e:84:ca:cc:5c:36:fb:b0:81:20:
a7:d7:33:3f:12:82:b6:da:75:4a:4e:e9:85:3e:88:
1f:80:ec:ec:90:f2:4e:7a:2a:a0:e3:30:5e:4a:39:
d7:5d:c0:47:63:0d:7a:ea:13:8b:f9:7b:07:9e:d9:
16:b0:02:ae:a1:6a:cb:87:0b:a3:bd:22:72:63:ee:
b8:00:0e:4a:ee:54:c0:86:f7:94:07:d4:8b:a9:7c:
f0:39:ca:d7:2d:5c:40:4c:28:20:11:da:17:86:6e:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:EE:3B:37:F3:D2:A6:A9:17:2E:08:1F:6F:27:37:F5:5E:D4:BD
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YMfuOzfz0qapFy4IH28nN_Ve1L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2190::/44
2a0e:8f02:f034::/48
Signature Algorithm: sha256WithRSAEncryption
a0:93:b8:79:1a:25:3e:fe:f9:56:03:10:67:11:32:6d:af:38:
0d:79:7a:5b:9f:f0:e4:a0:d6:23:47:6b:e7:cb:25:b3:4d:d2:
6b:57:7f:e4:fe:c0:84:73:bf:0f:58:0d:88:8b:d8:ca:5d:47:
eb:87:1f:8d:af:09:e7:cf:1c:78:b5:ed:84:c6:ad:78:d1:c9:
0f:35:a2:1e:cb:59:0d:89:92:6e:a3:41:c2:b2:bc:e5:86:ef:
65:99:7e:ee:1e:8d:bc:76:f0:29:a0:67:eb:de:15:8b:ed:b2:
db:60:53:af:1a:44:a7:f2:80:df:3e:8f:1c:7a:1d:b0:a6:2d:
41:20:1d:8d:41:3b:03:eb:66:0a:d2:39:65:d1:0d:88:0d:c2:
2d:d2:6d:61:d1:74:bc:6b:ac:55:55:43:f2:75:9c:77:c1:fc:
ac:ad:1f:7f:c7:73:e7:1e:b6:59:74:c1:b1:2f:28:de:24:83:
30:ee:fe:6e:01:e2:8e:e6:df:45:08:03:93:93:91:0f:7d:56:
36:f7:40:ab:0e:e1:fa:eb:8a:d5:72:10:b3:2a:6a:4b:cc:c9:
6b:80:0f:1a:8a:c2:22:50:59:38:ca:f0:89:39:19:b7:d8:19:
15:6f:ef:59:60:61:0a:ba:42:0e:15:3a:69:ea:cf:58:12:89:
f0:b2:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:12 2025 by rpki-client