Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa
File: 2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa (raw, json)
Hash identifier: KMD/ALL2N2LqU8y7+1f9YpFqy5OsmhRXi+hfcZ2aIxY=
Subject key identifier: D9:81:C1:C7:26:7F:CF:81:5C:AE:DE:BC:4D:0A:8C:7F:4C:24:C2:63
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 0194986713D4F4FD8735E62D3026952FB5C0
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa
Signing time: Fri 24 Jan 2025 13:01:19 +0000
ROA not before: Fri 24 Jan 2025 13:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215273
IP address blocks: 2a09:6000:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:67:13:d4:f4:fd:87:35:e6:2d:30:26:95:2f:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Jan 24 13:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d981c1c7267fcf815caedebc4d0a8c7f4c24c263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:f2:7b:a8:fb:5c:75:d9:87:f3:3d:4f:cc:
f7:60:04:17:7d:7a:f0:31:be:57:9c:a6:ea:9a:5e:
e4:ee:34:d2:e4:2e:6f:b6:c0:b0:8d:6a:3e:c3:da:
ef:92:39:d7:9b:1d:ad:1e:cb:b2:f7:7f:24:26:ec:
e4:87:b1:93:f2:91:b8:31:cd:4b:16:98:83:76:5e:
1c:4e:f5:73:59:28:47:da:4f:16:aa:33:66:ad:b3:
88:98:20:11:6d:dc:bb:26:64:ce:ed:4a:84:8f:eb:
e0:71:39:0b:5c:57:9e:fa:f7:f7:84:78:93:74:9e:
9d:8e:61:09:94:50:2a:ef:f0:66:0d:a6:99:8b:7e:
ce:d1:21:05:e3:1c:f5:45:d2:67:c7:cb:53:e9:67:
a8:f1:38:0c:4a:d2:53:53:09:60:76:fb:71:6b:ed:
6c:ff:0a:46:17:95:17:40:c2:31:d6:71:a8:c0:96:
01:91:b1:1e:83:53:0a:bf:ae:3d:44:4a:88:74:38:
2d:6e:57:f5:c5:6e:b6:66:06:6d:3e:92:c0:8f:75:
e0:21:b2:a2:12:8a:40:c1:d9:b3:1b:94:49:a9:5b:
d3:c5:93:93:9d:09:4c:b6:19:d7:4b:7a:e3:36:70:
66:03:50:b8:8d:c5:c5:9b:bd:88:aa:b0:47:89:29:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:81:C1:C7:26:7F:CF:81:5C:AE:DE:BC:4D:0A:8C:7F:4C:24:C2:63
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6000:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:a1:95:e5:05:cd:f0:43:23:9b:68:52:83:48:92:24:b7:25:
a9:94:61:84:da:9d:03:01:c2:98:94:ea:20:22:ef:4d:95:f8:
1d:df:bd:de:c8:e5:a9:fe:4c:0d:0d:bc:5a:f6:36:d1:d5:c7:
c5:d2:f3:d6:1f:ac:57:b3:06:48:0a:fb:c1:0e:9a:8a:fa:44:
7b:d1:99:35:25:bd:c4:73:c8:f9:0f:59:c4:88:ca:7c:5d:aa:
d1:98:b1:56:a7:99:23:40:cc:1c:2a:78:15:80:3e:7e:30:65:
03:24:88:d9:7a:8f:42:e6:64:f7:82:78:c2:f3:7b:f5:99:8c:
be:3e:8f:a2:f8:44:bd:77:7b:87:82:ba:e0:b4:e7:70:5a:31:
74:05:22:bc:68:3b:eb:67:fa:da:97:25:ae:de:8a:0b:03:fd:
11:25:86:e8:bb:f3:ce:1b:86:76:c8:47:12:59:ee:86:a2:e7:
8b:1c:47:96:56:31:d2:8f:b5:54:03:92:fa:61:3c:c5:45:1d:
7d:84:45:51:4d:69:c8:3d:34:1e:8f:4c:2d:ca:1b:4d:02:df:
a8:f7:04:02:5c:ef:6a:d4:85:52:51:6d:32:f7:09:4d:eb:4e:
96:53:5b:e8:ca:4a:b2:e9:cd:09:1f:3c:60:47:33:e4:b8:f4:
e4:3e:4c:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZSYZxPU9P2HNeYtMCaVL7XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYmY2YjM3Yjk0Zjk1YjQ5MDVjZjhjNmEyMWQ4ODAzZWFi
ZmE3N2UwHhcNMjUwMTI0MTMwMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTgxYzFjNzI2N2ZjZjgxNWNhZWRlYmM0ZDBhOGM3ZjRjMjRjMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kfye6j7XHXZh/M9T8z3YAQXfXrw
Mb5XnKbqml7k7jTS5C5vtsCwjWo+w9rvkjnXmx2tHsuy938kJuzkh7GT8pG4Mc1L
FpiDdl4cTvVzWShH2k8WqjNmrbOImCARbdy7JmTO7UqEj+vgcTkLXFee+vf3hHiT
dJ6djmEJlFAq7/BmDaaZi37O0SEF4xz1RdJnx8tT6Weo8TgMStJTUwlgdvtxa+1s
/wpGF5UXQMIx1nGowJYBkbEeg1MKv649REqIdDgtblf1xW62ZgZtPpLAj3XgIbKi
EopAwdmzG5RJqVvTxZOTnQlMthnXS3rjNnBmA1C4jcXFm72IqrBHiSnbBwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNmBwccmf8+BXK7evE0KjH9MJMJjMB8GA1UdIwQY
MBaAFE6/aze5T5W0kFz4xqIdiAPqv6d+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2Yt
ZTdlNzRkYjcyMWQyLzEvMllIQnh5Wl96NEZjcnQ2OFRRcU1mMHdrd21NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2YtZTdlNzRkYjcyMWQy
LzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKglgAAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQAnoZXlBc3wQyObaFKDSJIktyWplGGE2p0DAcKY
lOogIu9Nlfgd373eyOWp/kwNDbxa9jbR1cfF0vPWH6xXswZICvvBDpqK+kR70Zk1
Jb3Ec8j5D1nEiMp8XarRmLFWp5kjQMwcKngVgD5+MGUDJIjZeo9C5mT3gnjC83v1
mYy+Po+i+ES9d3uHgrrgtOdwWjF0BSK8aDvrZ/ralyWu3ooLA/0RJYbou/POG4Z2
yEcSWe6GoueLHEeWVjHSj7VUA5L6YTzFRR19hEVRTWnIPTQej0wtyhtNAt+o9wQC
XO9q1IVSUW0y9wlN606WU1voykqy6c0JHzxgRzPkuPTkPkwu
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:16 2025 by rpki-client