Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/y-M_EBDyqDFIVawFxida8qjR5Co.roa
File: y-M_EBDyqDFIVawFxida8qjR5Co.roa (raw, json)
Hash identifier: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=
Subject key identifier: CB:E3:3F:10:10:F2:A8:31:48:55:AC:05:C6:27:5A:F2:A8:D1:E4:2A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 01942143A8EE90ECAD8C0D70454E1D977326
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/y-M_EBDyqDFIVawFxida8qjR5Co.roa
Signing time: Wed 01 Jan 2025 09:47:49 +0000
ROA not before: Wed 01 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47246
IP address blocks: 2a02:ddc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a8:ee:90:ec:ad:8c:0d:70:45:4e:1d:97:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe33f1010f2a8314855ac05c6275af2a8d1e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:e9:91:46:58:60:cc:5c:9a:78:4c:3f:cd:
87:98:8b:a6:5e:24:39:05:13:3a:aa:d6:4a:8d:a4:
cf:9f:b5:ea:8d:de:ee:0a:7f:29:bd:21:ef:17:53:
db:a4:77:c4:27:84:cd:27:9e:03:a1:59:88:c5:30:
9e:32:4b:48:19:21:a6:ad:c6:f9:d1:5b:53:2c:22:
62:dd:f4:60:95:7f:95:8b:37:d4:ce:22:10:dd:30:
10:a5:9d:bf:e1:d5:5d:8d:86:b7:9a:19:63:08:31:
71:0f:75:89:51:d2:47:f3:a3:0f:d1:04:81:2e:b7:
02:4f:41:8b:24:c3:5b:42:1e:df:ce:e7:c0:69:76:
89:a3:b6:3f:a6:c4:4c:8b:fa:c1:e6:73:3a:01:75:
e6:ae:95:aa:a2:5d:e6:2f:23:5e:f9:8c:24:7d:0d:
6b:1c:c6:75:3e:03:d6:09:2f:a5:e8:5d:e1:65:09:
18:e0:aa:ed:7d:0d:7a:60:bd:fb:6a:d7:09:64:54:
09:97:c4:5f:1b:b2:56:c0:55:36:83:4b:f7:0c:60:
aa:cc:f0:d7:4a:9a:50:17:25:98:42:1c:83:fb:32:
61:a8:4a:65:e1:e7:39:81:e6:e6:53:a7:1b:9e:16:
91:22:8f:24:aa:98:31:91:78:f0:11:f1:c9:68:a1:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:3F:10:10:F2:A8:31:48:55:AC:05:C6:27:5A:F2:A8:D1:E4:2A
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/y-M_EBDyqDFIVawFxida8qjR5Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ddc3::/48
Signature Algorithm: sha256WithRSAEncryption
d3:0c:c6:5b:f4:a6:82:aa:71:60:cc:14:8a:32:16:c6:5b:4c:
9a:60:38:f4:65:60:f2:0e:6b:aa:05:75:e8:74:ee:e0:38:97:
a5:54:fe:1b:ef:9c:47:c3:9b:96:0e:9c:52:72:19:a1:1c:7d:
26:96:1c:b1:78:fa:c5:47:bf:24:9c:96:48:6d:6a:51:74:62:
86:02:ae:2a:26:e0:95:21:99:a3:44:df:ce:f2:eb:a7:91:0e:
f0:72:85:24:f5:6d:fa:f8:d1:4c:51:47:16:64:dc:1e:4c:e9:
ff:e9:32:c7:1f:60:7c:11:66:69:85:e0:d6:68:7d:6f:6e:d1:
e7:26:9a:59:43:fd:16:7f:0c:e1:ba:b5:6a:76:ef:ad:4c:f5:
7b:f8:51:05:36:d3:d1:72:5f:6d:01:d1:14:31:d1:c5:73:e9:
b9:e5:2c:e0:d8:12:0e:de:ae:0c:cf:1c:cf:cc:9b:c2:60:31:
64:4f:98:dd:ba:6c:35:cd:4c:06:c6:cc:3d:ca:4c:ae:04:3a:
07:e4:de:73:d1:82:14:8d:8f:c3:98:a5:36:e1:1f:84:b7:79:
73:c4:00:fc:63:92:66:d1:75:db:42:f5:c2:d8:60:33:75:3e:
d6:5d:48:bd:ff:b5:45:c6:0d:3d:57:b1:e7:64:a5:cb:0b:48:
8a:39:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:39 2025 by rpki-client