Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/YTt-w92v-yglPtABnig5iH6xH6I.roa
File: YTt-w92v-yglPtABnig5iH6xH6I.roa (raw, json)
Hash identifier: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=
Subject key identifier: 61:3B:7E:C3:DD:AF:FB:28:25:3E:D0:01:9E:28:39:88:7E:B1:1F:A2
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019424454FB4644A2589B7E69BD85FF3ECF3
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/YTt-w92v-yglPtABnig5iH6xH6I.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 2a05:bec0:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:b4:64:4a:25:89:b7:e6:9b:d8:5f:f3:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=613b7ec3ddaffb28253ed0019e2839887eb11fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:31:84:7c:38:e9:11:f4:01:41:e6:0a:3f:
0f:74:64:4b:60:21:a9:d9:07:9f:82:66:4b:d1:fd:
3c:dd:fd:a4:35:c2:c9:64:19:85:d3:4c:c5:1f:5a:
8d:c3:3c:60:db:1b:e3:74:68:6b:4d:00:b2:af:1d:
1e:4e:8b:71:f7:c9:c5:5c:05:d2:30:87:f5:96:ce:
c6:7e:56:1b:d4:f8:d6:a7:6d:4b:1a:83:fd:76:e1:
1d:87:92:6a:74:84:d6:9d:92:3d:cb:03:e1:09:38:
a6:db:71:01:37:30:26:57:07:ad:4b:4b:cc:56:0e:
2c:47:3d:cc:e8:2b:e2:2d:7c:37:38:99:fa:bf:e2:
de:25:8a:c8:c1:75:29:3c:ee:53:6a:59:88:7a:c8:
c0:45:93:37:30:04:1a:a9:23:21:37:87:3b:2d:d6:
1c:cc:04:55:74:40:3f:88:72:d7:33:00:9c:6a:13:
d3:23:b7:e7:ad:f6:15:c3:31:af:20:a2:71:70:8c:
f9:ff:c2:5c:8d:0d:8b:c3:f5:e3:bd:a5:53:38:ac:
fa:d0:ea:cb:ea:f3:1b:5b:c7:c6:e1:5e:34:d2:10:
ad:97:9b:65:01:ea:2a:53:86:bd:dc:01:6b:8a:52:
07:fc:d4:bb:85:6d:71:af:0e:31:ec:05:07:f4:cc:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:7E:C3:DD:AF:FB:28:25:3E:D0:01:9E:28:39:88:7E:B1:1F:A2
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/YTt-w92v-yglPtABnig5iH6xH6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bec0:34::/48
Signature Algorithm: sha256WithRSAEncryption
83:a3:a0:84:77:e0:1f:d5:12:d5:ed:56:8d:4b:fc:53:6e:47:
10:c3:f1:c1:3f:7c:c4:bd:1e:90:90:02:29:0d:62:0a:1f:77:
5d:16:5c:13:2c:1f:93:39:b1:5c:ac:35:30:6b:cb:42:1c:78:
dc:77:9f:dd:39:52:d1:73:2e:4d:ae:e0:1a:d6:2e:e5:ed:dd:
27:92:f8:a8:a6:07:86:79:36:1f:f0:4d:05:b2:a8:09:9f:3c:
d7:dd:1e:89:f6:12:51:05:ba:81:ad:1d:19:d8:f0:13:ec:90:
6f:c3:ea:76:c4:50:ee:43:ac:64:aa:ca:13:f2:78:ee:7a:f8:
2a:3b:d2:da:e2:9c:73:70:b7:73:93:aa:03:e2:1f:b5:d0:cd:
64:62:91:38:4f:b3:c2:05:ac:e9:30:10:d8:b7:27:13:b0:0a:
a2:0b:63:8d:b3:4f:e0:fc:2e:0f:68:57:b3:1c:5e:b0:ce:cf:
cc:bc:b2:9b:4b:d2:cb:58:73:30:a2:00:23:8b:96:c6:c1:d2:
e5:64:19:de:9b:ea:34:60:e0:ac:30:b6:56:9a:0b:17:01:f2:
4c:58:aa:d4:97:11:1f:88:b4:ef:b9:2f:56:c6:fd:1b:96:69:
a7:e4:3c:72:44:7a:d4:13:b9:c0:40:b3:e5:7b:06:14:cc:62:
92:f7:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:44:08 2025 by rpki-client