Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Yhw_q_mzVr4Kkc2TuO1XwfuITsc.roa
File: Yhw_q_mzVr4Kkc2TuO1XwfuITsc.roa (raw, json)
Hash identifier: 80bHBByK/WVgmaEF1pH42SAMKKIJ2ZEHbniosDJG/7o=
Subject key identifier: 62:1C:3F:AB:F9:B3:56:BE:0A:91:CD:93:B8:ED:57:C1:FB:88:4E:C7
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019586817719D139424A516FF3530C1106C4
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Yhw_q_mzVr4Kkc2TuO1XwfuITsc.roa
Signing time: Tue 11 Mar 2025 18:39:46 +0000
ROA not before: Tue 11 Mar 2025 18:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a09:c705::/32 maxlen: 32
2a09:e707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:81:77:19:d1:39:42:4a:51:6f:f3:53:0c:11:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 11 18:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=621c3fabf9b356be0a91cd93b8ed57c1fb884ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:06:8b:21:73:30:bf:b5:73:d2:8a:8a:27:
eb:fa:e8:71:f6:d6:c8:34:3b:15:e7:43:c0:a8:58:
4d:aa:6e:87:f9:56:55:11:71:4a:85:bb:8d:b3:5c:
99:3a:b2:9b:d8:25:cd:48:08:6c:e3:0c:00:6e:fb:
f8:b9:40:55:73:3c:c0:2c:be:92:ed:0d:1b:73:ad:
fe:3a:28:32:2e:9a:f5:40:35:d7:66:1b:08:79:ee:
f4:d0:45:64:ff:6c:ce:f6:3d:8f:fb:55:60:35:3d:
45:54:3d:68:6f:cd:68:b5:99:36:f5:f8:28:b2:e5:
b9:6d:2a:c2:4f:13:08:54:d8:ff:9e:73:81:c9:9c:
dd:13:8a:91:32:70:36:93:a5:f9:3d:d9:d7:00:d9:
1a:ef:40:ca:cb:bf:a8:ae:8a:f3:4f:49:26:73:3a:
71:ac:6d:7d:18:c8:84:14:89:cd:6f:f9:27:7c:84:
ad:8e:60:5a:9c:fa:26:a2:b2:62:ea:36:dd:52:08:
97:6e:80:85:d6:e7:c4:b5:46:cf:ad:cd:88:9f:40:
8f:fb:64:8b:55:08:39:c5:5c:60:82:26:4c:f1:f1:
0a:b2:2f:17:13:1a:b7:82:2f:98:b6:87:a3:2e:22:
3b:a4:e2:e8:e3:be:ab:9c:59:9c:5c:a1:e3:0e:cc:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:3F:AB:F9:B3:56:BE:0A:91:CD:93:B8:ED:57:C1:FB:88:4E:C7
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Yhw_q_mzVr4Kkc2TuO1XwfuITsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c705::/32
2a09:e707::/32
Signature Algorithm: sha256WithRSAEncryption
a5:ac:34:07:37:ee:1a:13:0f:aa:64:e5:fc:e2:fe:86:dc:cc:
4c:0d:b5:ac:df:f0:bb:f0:45:4b:3c:e8:b7:90:eb:20:ff:4b:
a6:2a:5f:c4:23:a4:e1:70:e4:6a:2a:58:5c:09:81:69:fe:b2:
0b:17:67:c3:44:b0:6e:0a:23:29:76:a2:74:3f:09:7d:81:74:
c9:dc:8a:07:2c:a7:59:4f:fe:9f:47:2e:1c:14:76:e2:a0:de:
bf:54:78:4d:2f:64:eb:42:c1:ae:56:bc:bb:b7:5b:3d:eb:e3:
54:d6:c1:39:cc:06:54:32:18:36:e6:65:9c:b5:ce:8b:45:4d:
85:0d:5f:e2:97:ec:77:71:b8:bb:de:ff:82:4d:be:07:a8:59:
e4:87:fe:e2:ae:e6:55:4f:6b:66:17:6d:1e:2d:30:41:50:45:
3f:fc:8c:40:40:7a:2f:6e:78:4f:b5:8a:70:69:33:5e:4b:62:
23:a6:18:f7:b7:40:ef:79:d4:70:5e:06:a1:a8:a4:5c:13:8d:
28:1d:22:64:5b:f4:55:b7:2a:45:27:25:73:34:2d:a9:15:cb:
db:b0:1f:5b:89:74:90:f4:85:83:81:43:5e:7f:bc:32:27:a4:
25:54:90:56:aa:99:0d:bb:ae:2e:c6:86:d6:1b:8a:e0:b9:21:
c2:b2:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:37:03 2025 by rpki-client