Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa
File: yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa (raw, json)
Hash identifier: V0TvJM1MDMOgB+cgdEr/rySGEYGibK2chUUjTcXO7vA=
Subject key identifier: C8:1D:C1:48:7F:AD:DE:2A:9F:FA:4E:C3:5E:BA:BF:43:0B:70:86:EF
Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Certificate serial: 019426D9E78D87E71F01A02327A96AB846E1
Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2001:3300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e7:8d:87:e7:1f:01:a0:23:27:a9:6a:b8:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c81dc1487fadde2a9ffa4ec35ebabf430b7086ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:83:ad:85:78:df:be:0b:9f:e6:d8:50:5f:
23:c0:7b:a4:d9:25:3e:66:72:09:a1:07:dc:01:16:
83:8f:41:f9:45:af:fb:5f:c2:bd:90:e1:82:76:f0:
8a:86:e2:bd:40:df:2f:2f:f1:08:48:c6:12:03:83:
d2:18:6d:02:c9:8e:ec:da:b9:13:df:3d:2e:3c:02:
cf:0a:6f:94:35:26:54:f8:9c:a9:53:1e:14:b5:22:
b5:08:39:d8:c4:5a:a3:ab:2f:94:c1:ed:8a:e4:ca:
19:37:48:89:1b:ed:a5:55:f4:b4:78:03:c9:fe:e5:
23:9c:29:53:45:1e:83:2a:dd:ef:42:74:50:8f:c6:
92:b9:0a:8b:c8:c0:9d:6e:0e:68:93:24:52:a4:2a:
75:b1:c9:7d:80:81:d7:a1:11:e9:53:16:ff:51:37:
d6:e9:d6:2b:0d:54:83:01:23:39:f7:5a:8f:2e:2e:
36:a6:3e:6e:cc:25:b5:86:dd:33:3d:dd:c6:ea:fc:
95:0a:0e:a1:57:a9:41:4e:94:9b:39:5e:05:0a:0e:
c3:9b:04:da:bd:54:18:93:01:ad:09:46:73:d5:30:
1c:2b:fa:95:9a:6b:fb:af:ea:d4:cf:45:4c:9c:ad:
4c:2d:af:5b:93:2c:67:45:59:19:d7:83:2a:bf:7d:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:C1:48:7F:AD:DE:2A:9F:FA:4E:C3:5E:BA:BF:43:0B:70:86:EF
X509v3 Authority Key Identifier:
keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3300::/32
Signature Algorithm: sha256WithRSAEncryption
18:29:88:fb:ca:fb:42:7b:82:df:6c:7c:47:56:94:4f:be:29:
f4:fb:d6:b0:ac:f1:b8:59:6b:79:bb:11:ea:12:40:39:7b:57:
df:96:e3:6a:28:4b:82:8e:d5:2c:5c:f8:5a:1c:0e:73:63:78:
43:fd:e8:a5:b7:ca:82:0d:9a:af:ad:ff:95:63:00:cc:10:4c:
52:84:74:4f:fb:df:10:e8:26:fa:6e:1d:ae:cd:7d:68:c0:a9:
fe:22:45:22:96:8d:7a:f3:07:99:f2:86:32:e4:1c:76:f0:d9:
71:75:b8:c9:3a:1c:da:dd:46:26:67:70:9b:21:3c:96:7d:ed:
4c:6c:40:df:c7:00:58:79:6e:a4:6f:d3:71:fa:52:c4:03:ad:
2a:a9:b7:b0:31:15:68:1d:ff:5a:b4:14:f0:c1:af:21:8d:79:
2d:e8:0e:a4:9a:3d:7a:0a:15:2b:b4:7c:b6:f5:da:17:d7:c6:
d6:f9:8c:a1:33:44:ae:b1:98:a6:ae:5b:d6:15:56:33:69:43:
69:0c:cf:00:c1:67:c8:12:08:f3:2c:d8:09:d2:9a:3c:bf:d2:
a5:97:a1:51:fa:0d:7a:ca:53:0a:3a:e5:16:a8:bc:b9:e9:1d:
31:7e:7e:1a:8c:46:b8:6b:58:08:49:3d:01:09:22:21:34:77:
84:ad:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:06 2025 by rpki-client