Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YIU-4qo-oAuRHLmOCynpaPalSF0.roa
File: YIU-4qo-oAuRHLmOCynpaPalSF0.roa (raw, json)
Hash identifier: JsQyAb9PtTIbmB15wOfkyewNwt/4cFt2DHNCYba33k0=
Subject key identifier: 60:85:3E:E2:AA:3E:A0:0B:91:1C:B9:8E:0B:29:E9:68:F6:A5:48:5D
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C4EC8B3E77EAB23E9037D4F45CB1
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YIU-4qo-oAuRHLmOCynpaPalSF0.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203535
IP address blocks: 2a05:b0c6:80b::/48 maxlen: 48
2a05:b0c6:80c::/48 maxlen: 48
2a05:b0c6:80d::/48 maxlen: 48
2a05:b0c6:80e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c4:ec:8b:3e:77:ea:b2:3e:90:37:d4:f4:5c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60853ee2aa3ea00b911cb98e0b29e968f6a5485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:68:fa:85:52:b2:71:2f:1f:0d:3a:35:10:
05:ed:9a:5e:ea:4f:8b:06:82:90:1e:c8:01:ee:c0:
96:68:4a:62:a1:ba:4b:cf:6e:36:5b:a8:4c:49:83:
1e:c2:eb:07:6a:c8:b4:ee:1a:bd:f6:56:26:14:27:
86:37:57:e5:6c:09:a6:61:84:6a:1e:61:82:48:f7:
b5:80:87:2b:6f:47:31:65:42:8a:76:1f:3e:43:8e:
62:4d:7c:ee:c7:3f:7f:55:1e:d4:20:17:37:59:67:
8d:5d:39:64:9b:cf:15:39:d7:e1:ab:33:16:8c:71:
48:25:81:02:c6:a7:58:85:1a:7c:39:ca:0e:92:15:
6c:4f:cf:c8:11:26:4c:f1:aa:15:e6:2e:c5:03:03:
29:1d:8d:09:dd:c9:74:c5:e9:48:7a:01:ac:e4:8d:
51:b3:24:a8:c4:f0:40:11:ae:40:f6:fc:c1:b0:dd:
58:c2:18:23:38:3d:f6:6f:84:0e:4e:6b:74:05:66:
79:01:2a:24:5a:01:05:cc:05:d1:20:ea:24:30:b9:
89:a2:c1:03:37:11:80:22:7d:f8:b0:15:85:23:c5:
18:3c:ca:b9:ca:41:bb:91:9c:39:de:36:8d:aa:04:
e2:aa:a3:5f:e7:41:24:82:6c:70:a7:da:3f:4e:cc:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:3E:E2:AA:3E:A0:0B:91:1C:B9:8E:0B:29:E9:68:F6:A5:48:5D
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YIU-4qo-oAuRHLmOCynpaPalSF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:80b::-2a05:b0c6:80e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:8f:76:a3:a3:ae:ff:fb:ab:b2:8e:84:f3:6e:4e:7d:36:7d:
5a:28:a3:6b:e8:9c:0b:65:ba:45:34:e5:c1:b2:8c:84:ee:97:
de:c2:ed:f4:bf:00:e1:82:56:ac:6c:73:3c:ce:f4:de:ba:14:
c8:8a:88:80:83:80:63:81:38:91:c6:2c:f8:a9:b9:97:0b:cc:
ab:c2:d1:34:94:9c:cf:22:0e:21:9e:93:21:31:a9:81:14:2a:
03:e8:3a:7c:a4:39:2f:89:03:73:59:6c:fa:ee:7c:5d:25:99:
50:4e:b3:1e:76:ee:35:47:c0:75:09:38:3d:03:05:21:6a:88:
cd:dc:49:90:95:74:97:e9:29:b0:ef:89:58:dc:91:97:12:c2:
47:39:ac:90:ca:71:0e:aa:11:7b:37:08:f1:ff:f7:61:47:f8:
0c:6b:2b:02:b2:26:66:79:a9:aa:8e:12:d5:10:24:32:1d:08:
c2:b9:96:56:2b:53:be:a2:9e:fa:cb:b8:0b:8d:54:36:a6:70:
33:3b:4e:a0:cf:ec:db:7d:04:22:a6:2e:e6:9f:a2:c3:13:b9:
f7:8a:5d:17:8c:15:49:36:69:6c:13:91:88:f5:ce:00:ae:53:
5a:3f:b0:41:66:11:f6:18:75:9b:78:bc:7c:93:98:46:4b:1b:
18:1f:87:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQnR8Tsiz536rI+kDfU9FyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwMTAyMTM1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDg1M2VlMmFhM2VhMDBiOTExY2I5OGUwYjI5ZTk2OGY2YTU0ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o1o+oVSsnEvHw06NRAF7Zpe6k+L
BoKQHsgB7sCWaEpiobpLz242W6hMSYMewusHasi07hq99lYmFCeGN1flbAmmYYRq
HmGCSPe1gIcrb0cxZUKKdh8+Q45iTXzuxz9/VR7UIBc3WWeNXTlkm88VOdfhqzMW
jHFIJYECxqdYhRp8OcoOkhVsT8/IESZM8aoV5i7FAwMpHY0J3cl0xelIegGs5I1R
sySoxPBAEa5A9vzBsN1YwhgjOD32b4QOTmt0BWZ5ASokWgEFzAXRIOokMLmJosED
NxGAIn34sBWFI8UYPMq5ykG7kZw53jaNqgTiqqNf50Ekgmxwp9o/Tsw3YQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGCFPuKqPqALkRy5jgsp6Wj2pUhdMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvWUlVLTRxby1vQXVSSExtT0N5bnBhUGFsU0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBbDG
CAsDBwAqBbDGCA4wDQYJKoZIhvcNAQELBQADggEBACWPdqOjrv/7q7KOhPNuTn02
fVooo2vonAtlukU05cGyjITul97C7fS/AOGCVqxsczzO9N66FMiKiICDgGOBOJHG
LPipuZcLzKvC0TSUnM8iDiGekyExqYEUKgPoOnykOS+JA3NZbPrufF0lmVBOsx52
7jVHwHUJOD0DBSFqiM3cSZCVdJfpKbDviVjckZcSwkc5rJDKcQ6qEXs3CPH/92FH
+AxrKwKyJmZ5qaqOEtUQJDIdCMK5llYrU76invrLuAuNVDamcDM7TqDP7Nt9BCKm
LuafosMTufeKXReMFUk2aWwTkYj1zgCuU1o/sEFmEfYYdZt4vHyTmEZLGxgfh9A=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:06:47 2025 by rpki-client