Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YNQ1A5LbIrn4a43fHUQkQkgiDQ4.roa
File: YNQ1A5LbIrn4a43fHUQkQkgiDQ4.roa (raw, json)
Hash identifier: UbPOjOTR2RaiBzNe8xucjLS7wdbR7ODryFV60ZkmjhE=
Subject key identifier: 60:D4:35:03:92:DB:22:B9:F8:6B:8D:DF:1D:44:24:42:48:22:0D:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522841FB85D1D738FD182EF7FBB439A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YNQ1A5LbIrn4a43fHUQkQkgiDQ4.roa
Signing time: Thu 02 Jan 2025 03:50:06 +0000
ROA not before: Thu 02 Jan 2025 03:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215188
IP address blocks: 2a0e:97c0:800::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:84:1f:b8:5d:1d:73:8f:d1:82:ef:7f:bb:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60d4350392db22b9f86b8ddf1d44244248220d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c0:4a:e4:7a:e4:d2:7d:41:94:60:f2:0d:62:
e1:2a:0c:64:57:1e:91:70:1f:09:b3:03:1c:ca:1a:
8f:11:aa:96:83:2c:1b:3d:b0:3d:2e:18:45:28:f1:
f0:0e:91:46:48:5d:ec:48:8e:3f:fb:81:18:04:1c:
da:04:e3:12:02:82:23:f8:c8:8a:29:3e:38:8b:ae:
6b:1c:a4:b4:f2:2b:e9:01:d7:10:09:d3:51:1c:c3:
8f:46:54:1f:46:4f:3c:8c:ba:15:f2:a4:53:20:fd:
77:6a:ea:d1:12:fb:bb:5f:6b:0e:bc:c4:f8:67:2a:
1c:8e:82:0c:8c:c6:a3:46:e7:e0:66:e5:ce:0a:9c:
fd:33:03:37:9b:2a:64:d1:c0:38:0d:52:17:d2:61:
e1:d5:21:b2:f4:65:18:99:89:16:0e:52:b0:3e:da:
12:ec:87:3c:b5:44:7c:e4:00:77:06:3c:bb:d2:77:
70:eb:28:be:d4:f7:53:d8:9c:3f:86:d4:ef:81:eb:
6d:b9:83:38:df:88:7b:5c:a9:18:a6:43:75:a4:43:
a8:d9:0c:ae:ab:62:bc:1e:e2:d5:71:6d:77:ca:a2:
af:38:b9:42:b3:e1:ed:6a:e7:1a:44:0e:0a:e4:9b:
90:67:7a:6b:6e:3a:41:88:21:5d:39:98:26:24:a4:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:35:03:92:DB:22:B9:F8:6B:8D:DF:1D:44:24:42:48:22:0D:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YNQ1A5LbIrn4a43fHUQkQkgiDQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:800::/44
Signature Algorithm: sha256WithRSAEncryption
33:58:ee:35:01:40:75:9c:dc:b0:a3:3a:cb:7a:20:62:38:2d:
c3:62:7a:06:7b:96:85:7e:38:b2:01:34:55:ae:88:78:6d:78:
9f:b9:d7:6f:15:4b:c5:c5:66:5f:52:50:13:1a:4d:cb:db:86:
71:49:92:00:1a:1f:b4:c8:1d:6f:2e:53:38:6d:a6:56:d7:bc:
46:44:85:97:1e:28:8a:d2:7c:f0:7b:bb:e2:2a:11:fe:d4:f4:
75:cf:2c:a2:0e:1f:e5:ef:36:fc:4c:34:38:61:24:4a:a0:4e:
ec:8b:a9:db:a8:96:da:5d:ba:c0:fd:4e:a1:6a:48:48:f0:8f:
6c:ac:43:f6:b3:3f:9b:2c:b9:62:2b:2c:ff:a3:87:92:be:03:
5b:ad:81:27:3f:2d:1b:9b:46:38:04:12:6a:76:29:71:de:b1:
7f:bb:dc:a6:98:a6:86:c9:83:25:46:61:b4:b3:f4:85:df:ed:
6c:41:8c:33:bf:e4:f6:64:68:7d:61:da:43:01:3d:4f:56:67:
5a:1b:e8:7c:99:bf:fb:d5:c3:71:dd:d7:cf:5b:01:a4:5e:c3:
63:bd:a1:e7:61:0f:7c:c4:ce:ff:62:84:ea:c1:4f:b6:02:76:
32:d1:bd:f9:8d:6c:6f:18:42:29:c9:bf:90:be:e2:e2:ed:8b:
c2:6e:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:25 2025 by rpki-client