Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa
File: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (raw, json)
Hash identifier: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=
Subject key identifier: 61:B6:08:63:4A:93:79:2B:29:EA:0F:61:19:CC:BC:6B:59:FA:DD:92
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 0195445B35851562A5847C1E970CC953A966
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa
Signing time: Wed 26 Feb 2025 22:23:02 +0000
ROA not before: Wed 26 Feb 2025 22:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213407
IP address blocks: 2a14:9400:230::/48 maxlen: 48
2a14:9400:250::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:5b:35:85:15:62:a5:84:7c:1e:97:0c:c9:53:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Feb 26 22:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b608634a93792b29ea0f6119ccbc6b59fadd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:67:33:f7:31:25:f4:fe:ce:72:4a:f9:c2:
9c:24:6b:cf:ec:4f:b8:ab:41:46:9f:12:a3:c8:90:
ae:d3:18:67:45:7c:3b:84:c9:3e:29:bc:cd:2c:99:
72:91:58:0c:e6:9e:2a:59:8b:ed:a0:fc:ff:21:96:
0a:cf:b3:55:10:8a:29:ea:59:dc:79:11:07:9a:95:
7a:cd:97:b2:99:23:d3:05:a9:bd:9c:ad:b4:c2:a0:
ae:91:c0:62:85:80:5c:c4:ce:fe:00:68:52:64:8f:
5d:b1:c5:9e:9d:9c:66:f0:51:be:fd:64:d6:19:78:
ea:1a:bf:16:67:c1:47:2f:bf:79:09:8d:95:70:54:
40:99:11:01:fb:0a:e6:e1:7f:65:4a:f8:aa:6c:14:
11:d5:10:e0:6d:bb:15:11:f7:e1:4b:d8:33:8a:94:
a6:ca:18:24:31:81:d6:d0:cd:66:1a:df:ca:b5:76:
e0:71:e6:d1:72:2e:2c:b0:3f:74:f2:c1:89:5a:82:
e0:31:58:d1:ca:a0:21:80:3b:25:dc:dc:fe:90:e1:
50:a2:63:f2:31:1f:38:be:64:d0:52:73:19:0f:03:
04:7a:db:03:2d:84:aa:d9:5f:d2:31:be:db:05:73:
39:63:ef:d4:ae:6b:f0:fe:b7:e8:9d:65:20:d8:c5:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:08:63:4A:93:79:2B:29:EA:0F:61:19:CC:BC:6B:59:FA:DD:92
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400:230::/48
2a14:9400:250::/48
Signature Algorithm: sha256WithRSAEncryption
06:46:19:75:24:99:ac:99:8b:02:33:b3:e7:dc:b1:b0:f4:e0:
05:94:90:6a:20:3c:ca:13:b4:f9:be:37:67:c0:0a:80:77:01:
bc:21:04:3a:e7:9f:22:a4:e0:04:35:5b:d4:4f:91:54:af:86:
55:cc:92:3c:8a:eb:b3:bf:f9:d4:89:23:a1:eb:ba:7d:43:ef:
90:e4:30:06:e8:fb:dd:0a:0d:f1:6b:7c:be:e5:03:79:5d:6a:
4e:d6:c5:1c:8e:c2:ac:ce:4a:3b:41:ed:90:7f:76:d2:53:99:
8f:9c:ac:5f:30:4a:e0:67:07:33:07:6f:b0:a7:d8:47:a6:8f:
46:1c:f9:87:ae:31:8a:7e:6d:a4:65:4f:cb:4f:a0:cd:c3:24:
6b:e8:3a:74:c7:e9:4c:56:60:a1:96:89:45:79:dd:68:e4:02:
79:3e:b5:f4:8a:1e:33:58:f2:46:30:a4:12:94:af:33:75:55:
ea:8d:b9:95:9b:0d:b8:cb:a1:a5:ea:6b:95:c2:05:b8:7e:9f:
d7:16:29:08:af:c1:a3:14:46:e6:19:e5:84:2b:5e:f9:1a:db:
82:43:9f:4a:10:93:e3:f4:ac:c8:57:06:a1:63:55:91:59:36:
01:d4:d3:15:29:10:42:10:ed:6d:7d:ba:34:d7:93:56:6e:76:
96:e6:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:59:38 2025 by rpki-client