Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yExdCq18W8PN0uJNoni46-mqDLs.roa
File: yExdCq18W8PN0uJNoni46-mqDLs.roa (raw, json)
Hash identifier: WSKriRp6rFDoWygxt9XCuZYqzRyO6ViMIh/amFRIKxU=
Subject key identifier: C8:4C:5D:0A:AD:7C:5B:C3:CD:D2:E2:4D:A2:78:B8:EB:E9:AA:0C:BB
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274632C6F65390B2ACF447B6CF8685B5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yExdCq18W8PN0uJNoni46-mqDLs.roa
Signing time: Thu 02 Jan 2025 13:48:19 +0000
ROA not before: Thu 02 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209261
IP address blocks: 2a0d:2581::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:32:c6:f6:53:90:b2:ac:f4:47:b6:cf:86:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c84c5d0aad7c5bc3cdd2e24da278b8ebe9aa0cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:3b:e3:b2:55:4f:ec:3e:90:e2:ba:04:1b:
32:55:f7:16:87:60:7c:4d:02:09:32:ec:7e:57:c8:
e0:32:f0:0e:74:f2:64:ff:4d:b0:56:e6:87:06:d8:
ec:88:cc:a9:3c:3a:ca:e1:83:b5:8f:4f:4a:c4:3f:
14:72:76:a2:b1:bc:5a:a0:07:ed:a6:73:5d:08:2e:
63:4e:b4:55:7d:f5:2a:7d:35:6a:49:3d:14:e6:7d:
db:2c:bc:f8:9a:24:68:b2:9e:fc:48:62:ef:e3:de:
71:ed:2c:cf:93:34:c5:f4:98:50:0c:3c:76:99:02:
05:a4:1e:9c:ac:76:a6:62:bd:75:57:7e:ba:86:27:
e7:05:97:55:6c:a4:da:a6:47:22:45:af:11:63:a8:
1c:f7:07:95:9e:a7:45:2e:4e:dd:75:18:e5:7e:33:
44:e5:c3:42:08:4d:64:0b:58:cf:50:2f:ac:9a:08:
f5:3e:9a:bf:e1:c7:71:69:fb:8e:5f:31:8b:d9:64:
c1:09:e1:5d:e5:6b:24:cd:94:c4:6c:8d:9f:45:75:
af:01:8e:fb:a6:fa:2c:99:5b:2c:f2:ae:8d:fc:2b:
77:ee:7a:90:06:84:89:16:03:c3:b8:29:72:12:82:
8e:e7:39:e6:c2:2e:73:c4:61:50:09:ad:b1:11:5d:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4C:5D:0A:AD:7C:5B:C3:CD:D2:E2:4D:A2:78:B8:EB:E9:AA:0C:BB
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yExdCq18W8PN0uJNoni46-mqDLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2581::/32
Signature Algorithm: sha256WithRSAEncryption
48:a7:cb:8a:2c:ad:d6:5e:29:fa:96:35:1d:4f:fd:f4:48:ed:
7f:a3:84:f8:5f:bd:b7:d6:79:68:67:27:f1:18:51:27:cc:28:
33:c8:3d:b9:54:df:5b:65:bf:58:8d:7d:e7:26:22:d3:7f:04:
35:11:68:b8:1f:ad:a6:6a:c9:06:18:2a:96:24:a4:9d:6e:73:
4d:27:8b:91:3f:52:ff:f4:71:9f:6e:30:cb:10:2d:59:51:72:
69:92:ec:79:31:38:9c:20:d2:53:68:37:20:25:77:ce:1d:62:
7c:ac:43:78:71:58:76:e4:53:2b:48:8f:f8:0c:5f:9a:51:a5:
3b:a1:f1:2e:2f:7c:24:ac:0f:c4:7f:1e:c1:9d:f5:06:b2:95:
22:99:36:16:d5:31:a5:de:4e:78:d1:d4:c2:a4:a8:74:33:ba:
a0:9b:7e:10:78:5c:2b:1c:b3:e9:41:39:d3:06:1c:24:5a:4d:
a8:73:43:dc:fa:b3:16:3c:a5:4d:f0:d9:02:50:49:54:e5:78:
e1:80:fe:92:5e:0b:70:4b:4c:0e:08:4e:4e:1c:d1:0f:ba:2f:
f2:0e:88:a8:2c:98:c6:7d:7c:16:2e:33:e0:71:d3:58:00:07:
20:2d:46:e6:72:88:43:c8:83:13:e6:0f:4e:32:f0:e1:62:f1:
28:2a:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:17:10 2025 by rpki-client