Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/y6447IBS9lGcRS1y6cfP1pWC88M.roa
File: y6447IBS9lGcRS1y6cfP1pWC88M.roa (raw, json)
Hash identifier: tOpxGpBo2KldSCNUwsWOJk2X6zAJeUCHzVEL0VHyCVg=
Subject key identifier: CB:AE:38:EC:80:52:F6:51:9C:45:2D:72:E9:C7:CF:D6:95:82:F3:C3
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427463491F157186EEBF7C2F99E159790
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/y6447IBS9lGcRS1y6cfP1pWC88M.roa
Signing time: Thu 02 Jan 2025 13:48:19 +0000
ROA not before: Thu 02 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209650
IP address blocks: 2a0d:2687::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:34:91:f1:57:18:6e:eb:f7:c2:f9:9e:15:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbae38ec8052f6519c452d72e9c7cfd69582f3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:41:05:3f:81:d2:e8:88:21:b1:54:56:0d:
9c:d4:11:a6:5a:f8:15:5c:28:02:ee:b6:96:5d:24:
db:19:88:12:8d:fe:8a:16:30:8f:8d:47:f2:f7:bf:
8c:05:6e:7b:f2:fc:12:b3:a9:11:39:b6:e5:03:df:
8e:23:1b:a8:f8:ef:c2:9f:74:10:cc:57:4a:fa:37:
d4:56:0e:36:ed:79:00:1a:43:e1:21:8d:c4:08:49:
14:2e:02:5c:ce:a9:f2:66:09:63:00:8d:e2:11:e8:
c1:5c:14:4c:04:86:8c:27:1a:6e:bd:41:97:ce:e2:
b7:8a:48:66:44:14:8c:f9:20:74:d4:b1:05:4d:99:
5b:45:5b:17:4f:60:fc:96:8c:36:1d:5b:f5:80:20:
fa:1b:7a:e1:6c:6a:81:e7:36:56:03:dc:c7:b0:f2:
b7:e6:27:1c:4a:bd:33:28:61:ba:85:a7:8e:22:fa:
04:77:8b:da:7d:94:0c:f4:7a:d6:1a:51:9b:46:53:
db:c6:0c:97:b3:0a:41:96:e5:c7:00:c2:24:fb:98:
b9:e5:f8:89:4a:28:4b:57:94:00:57:3c:d6:7c:37:
d9:e7:e5:04:f0:af:80:da:d6:0e:e3:f5:2b:01:61:
fa:de:49:df:a0:64:b7:88:7f:ac:21:18:85:0f:19:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:38:EC:80:52:F6:51:9C:45:2D:72:E9:C7:CF:D6:95:82:F3:C3
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/y6447IBS9lGcRS1y6cfP1pWC88M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2687::/32
Signature Algorithm: sha256WithRSAEncryption
9b:a9:f3:80:84:76:c9:d2:74:b8:6a:c1:79:63:c3:6f:65:dd:
64:f2:51:88:98:04:14:4b:fd:f9:1f:81:9e:2c:c0:3d:c0:37:
e3:42:39:5f:96:f2:8d:0b:fc:b3:f5:25:cd:2f:e7:54:e6:a9:
03:38:14:93:48:5c:2f:fa:0b:64:9e:45:52:94:2a:7d:9d:b0:
f2:52:48:fe:9c:35:25:9d:d3:ba:e0:82:c7:cd:c7:ba:9c:59:
b3:fd:25:f4:2c:e9:b2:ea:d6:8d:55:01:a8:fa:82:67:6b:16:
8c:2e:f3:f3:38:9a:4b:62:d5:98:73:c1:eb:e7:b4:1a:9f:99:
a4:81:b4:3d:69:ee:4d:01:6c:6b:5f:3d:d0:65:5d:3c:71:58:
d2:25:11:17:f0:b4:de:9d:8f:50:98:8e:2a:e8:2d:13:13:f8:
e3:cc:84:2f:61:fe:e4:5e:b2:0c:c8:d4:d6:7a:af:fb:48:5c:
da:fc:48:69:c7:3b:48:50:af:e3:ec:b4:37:66:2f:02:74:e7:
6a:5d:e6:39:5c:f1:46:9b:9b:e8:b0:f3:6e:56:bd:06:ce:6b:
43:5d:9b:f6:f6:40:3d:ba:33:98:31:0f:7c:5f:d1:e1:c6:cf:
13:37:60:22:d4:b4:2a:78:d1:11:a3:ee:6c:d8:9e:f0:3b:90:
29:88:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:53 2025 by rpki-client