Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yenk1FulFKKzRy_UkUqeujhCFDE.roa
File: yenk1FulFKKzRy_UkUqeujhCFDE.roa (raw, json)
Hash identifier: 88ixtFP90mmpbbschipnIT/GNXMn5zvObfjytzgQofg=
Subject key identifier: C9:E9:E4:D4:5B:A5:14:A2:B3:47:2F:D4:91:4A:9E:BA:38:42:14:31
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 0194258F5F5C29C7DD127E6AF3B126FCD815
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yenk1FulFKKzRy_UkUqeujhCFDE.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210818
IP address blocks: 2a11:8a85::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:5c:29:c7:dd:12:7e:6a:f3:b1:26:fc:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e9e4d45ba514a2b3472fd4914a9eba38421431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:d0:7e:01:b9:9a:93:01:b4:f2:b9:1d:2c:
ae:3a:29:6f:7c:ee:48:2d:ff:ef:f2:43:e6:be:1a:
e6:d1:ea:f2:20:00:db:ed:36:12:c8:c2:13:c5:f8:
0f:bc:c8:9f:cb:e0:71:78:a2:d1:64:3b:7c:93:93:
32:16:b9:70:48:d1:43:71:a4:04:9c:79:f8:f8:e4:
f1:a1:3c:64:6c:4a:84:72:e4:0d:5b:79:5a:65:cb:
76:b6:0a:36:3b:64:b9:39:9b:3b:8b:ce:e7:92:de:
f0:d9:4e:c9:8a:3d:32:61:19:5a:9a:42:bf:c1:41:
e3:e0:f1:36:2e:a0:df:68:c9:cb:c1:02:92:83:f2:
33:67:ab:2d:01:2c:30:18:49:58:c3:67:32:73:b6:
40:72:37:a0:ef:66:eb:ef:85:38:0b:4f:29:51:ca:
15:b4:c6:4f:d6:05:c3:2a:9c:50:ca:73:04:87:9f:
6c:71:9c:8d:50:5a:77:35:fd:34:dd:73:d6:b5:fb:
fa:a0:68:b4:65:fb:e5:5e:0e:13:47:b3:f9:91:5c:
be:38:19:4a:b8:40:a0:2b:38:ea:e5:d3:c4:84:ec:
14:6a:86:f9:88:95:42:42:bc:1b:4d:98:59:db:5f:
2d:be:e1:0f:8f:9d:bd:cc:02:26:12:8a:a5:a7:6f:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:E4:D4:5B:A5:14:A2:B3:47:2F:D4:91:4A:9E:BA:38:42:14:31
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/yenk1FulFKKzRy_UkUqeujhCFDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8a85::/38
Signature Algorithm: sha256WithRSAEncryption
64:58:96:7e:4e:e2:bb:45:dd:08:c3:67:75:dc:6f:26:af:62:
21:2e:ef:cf:29:18:a0:99:e8:04:f6:27:1b:46:45:79:b4:8d:
36:27:cf:b0:42:f8:cc:64:a2:7e:99:dc:b2:2f:d0:b5:6a:b6:
83:0c:da:c8:f5:f2:83:8f:00:34:6d:03:85:fe:70:5b:a2:fb:
8d:bd:4b:9e:62:3b:b5:bc:4d:e3:fa:cf:61:b8:a9:50:6b:6b:
f3:98:d8:a2:2e:c5:ba:d1:f5:34:1b:78:c9:64:62:12:b3:98:
1e:9e:2f:03:6e:99:42:d1:f0:68:15:28:eb:57:76:7f:19:b7:
72:17:cb:97:b1:6e:4d:a8:76:40:f1:bf:cb:f7:52:86:ec:12:
eb:3b:4e:0d:d1:db:36:da:9f:13:41:47:1f:72:9b:0a:bf:7a:
2c:d5:07:7b:1d:48:4e:25:c8:1e:e4:b6:31:98:1e:25:dd:4f:
e0:0f:fc:16:91:b2:c2:f1:9d:78:25:d9:5d:4c:cd:a9:be:21:
0e:2f:6a:c3:92:65:7b:2b:10:8a:30:6a:1d:67:f8:aa:8a:d9:
3f:77:11:65:c1:82:06:c2:49:78:74:73:26:02:d4:7d:bb:03:
18:81:4b:df:89:d9:71:84:eb:6d:ea:33:dd:fd:c5:98:b6:c9:
38:f5:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:50:53 2025 by rpki-client