Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycsMoh_YLf6knyCs_c4PC0NOrSM.roa
File: ycsMoh_YLf6knyCs_c4PC0NOrSM.roa (raw, json)
Hash identifier: ooPEy2q/H2sparktd0AZng1EigS07t6INfvE8+FPZ0U=
Subject key identifier: C9:CB:0C:A2:1F:D8:2D:FE:A4:9F:20:AC:FD:CE:0F:0B:43:4E:AD:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252240B49007FCD93A60ED21FD85D500
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycsMoh_YLf6knyCs_c4PC0NOrSM.roa
Signing time: Thu 02 Jan 2025 03:49:49 +0000
ROA not before: Thu 02 Jan 2025 03:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210606
IP address blocks: 2a10:2f00:175::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:40:b4:90:07:fc:d9:3a:60:ed:21:fd:85:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9cb0ca21fd82dfea49f20acfdce0f0b434ead23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:b3:81:c7:e3:c3:e9:1f:5b:2d:90:0e:db:
15:f2:d3:f1:3f:b8:23:80:1a:5e:55:29:8c:96:bb:
06:af:10:9a:fc:62:d1:42:53:f8:08:7b:a4:ee:fc:
87:c8:bf:6f:13:3d:e3:29:0f:bf:1f:6f:74:93:15:
04:1e:e9:6d:64:7a:dd:ea:b6:18:7f:53:7e:a0:1f:
6a:9a:9e:59:1a:05:e1:7b:64:a7:fb:72:48:a5:9f:
55:0e:bc:2b:fa:3e:13:f6:0f:b8:3d:b7:fb:b9:5e:
0a:a0:45:23:25:46:eb:60:68:ba:52:f6:ef:3d:52:
f6:a5:19:5c:21:26:e6:a1:04:d7:6e:a7:37:d6:5a:
55:01:25:4b:ad:f4:bb:17:ca:72:e2:86:5e:38:f6:
04:ec:c1:36:3a:a1:fd:35:43:cf:2b:3c:e0:9f:a1:
75:13:a3:cc:51:38:0b:cc:b4:30:fa:2b:74:96:53:
d4:2c:6d:fd:6c:99:89:68:f0:79:fd:d8:d0:58:84:
6e:b6:bb:14:10:ea:ef:9c:76:43:57:2b:9f:48:19:
3f:b9:c8:eb:10:e0:ac:97:cc:bf:47:a9:0f:f2:df:
de:63:9f:d0:f8:d8:cf:45:4a:14:e8:d9:a1:12:7b:
42:86:d9:ed:83:01:4a:a6:a7:f3:af:06:8c:08:12:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:0C:A2:1F:D8:2D:FE:A4:9F:20:AC:FD:CE:0F:0B:43:4E:AD:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ycsMoh_YLf6knyCs_c4PC0NOrSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:175::/48
Signature Algorithm: sha256WithRSAEncryption
33:99:79:57:30:9d:d9:f7:53:cc:59:cd:1c:4f:92:25:22:1e:
29:38:4b:4e:a4:f6:95:8b:a7:94:85:7b:9a:1e:3c:55:07:ef:
35:cf:8d:39:bb:13:23:e2:d0:51:f7:97:2b:19:1f:59:5c:d3:
a8:9d:91:0e:88:aa:e2:8f:99:e2:b4:94:85:88:53:15:1d:ab:
d0:31:10:c8:6e:9b:c4:8a:71:83:14:fd:84:5e:9a:f8:d1:33:
99:76:d3:b4:83:fa:2b:e3:43:e8:07:39:43:4c:40:de:30:37:
6b:36:e5:a9:6c:79:53:b7:af:47:ab:73:d2:97:45:e7:11:49:
b4:88:24:4b:e2:24:b4:db:d5:61:d1:bd:cb:b8:78:ab:91:3d:
f7:e6:b6:1a:16:6c:0e:13:aa:ff:be:0f:ef:16:53:f9:03:c8:
c8:8f:6a:a8:b0:e6:16:03:e5:8e:cd:8d:bb:f4:47:0e:db:e0:
46:ce:d5:d9:bd:cc:c0:74:94:ee:90:db:68:87:f4:13:14:ea:
55:c7:da:e9:a2:33:74:d0:77:66:f0:56:49:23:24:7e:00:88:
fc:02:0e:31:59:95:95:01:38:89:ba:e3:8c:15:98:b6:ed:81:
23:13:57:00:cc:55:52:62:8f:9a:eb:f6:1c:21:7b:9c:d4:ce:
2b:3e:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:25 2025 by rpki-client