Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa
File: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (raw, json)
Hash identifier: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=
Subject key identifier: C8:FA:53:88:D9:E8:19:D1:95:91:F0:BD:C1:E5:D9:F0:87:18:3A:FA
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01941FFA835044819F7DBB0228F58D3B9D0A
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31424
IP address blocks: 2001:67c:2c08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:83:50:44:81:9f:7d:bb:02:28:f5:8d:3b:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8fa5388d9e819d19591f0bdc1e5d9f087183afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:f2:c0:aa:23:23:0c:16:fb:ab:ac:20:18:
c6:e2:dc:ef:4b:42:aa:82:ab:62:eb:1b:68:1c:26:
7f:90:cd:50:f4:5b:73:82:74:81:6c:29:08:2f:82:
00:f8:fa:e3:8f:e1:9b:64:c4:0c:7b:5e:a7:69:c2:
3f:46:7b:56:d9:d0:5b:b9:7f:42:86:55:1a:9d:ac:
13:c8:ab:c6:3f:fe:30:d7:f8:c5:92:5a:b5:e5:df:
8c:29:bc:10:3d:43:b6:db:22:a1:90:50:43:a0:03:
c2:a8:5b:da:c0:1c:6f:bd:81:4c:01:94:e3:24:df:
99:e9:34:d1:01:23:87:db:71:66:9e:c5:70:e6:2e:
b4:1b:5a:cf:0e:dc:d5:dc:25:15:a3:77:f8:6a:bc:
2b:bc:b7:3b:23:2e:80:00:a5:50:24:b2:28:84:0b:
1f:1c:e2:ba:71:a3:1e:91:2e:49:53:9f:76:e6:77:
7b:e8:b0:03:83:c4:95:42:4c:5f:2d:7f:31:47:5c:
f9:65:c5:b1:77:45:1d:42:f8:ad:72:44:d2:99:25:
a4:6b:55:7f:52:cc:42:d7:1f:8a:ff:ef:b3:0d:ae:
45:1b:7f:fd:d6:fe:74:a3:12:ca:bc:e4:34:04:2e:
ed:b3:4a:06:47:37:d4:67:84:a0:4a:3e:d7:ff:2c:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:53:88:D9:E8:19:D1:95:91:F0:BD:C1:E5:D9:F0:87:18:3A:FA
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c08::/48
Signature Algorithm: sha256WithRSAEncryption
92:01:7d:14:ed:3c:1a:96:03:05:37:83:08:e7:ac:4b:7c:34:
86:27:9a:73:0d:36:dd:f0:3e:50:f1:c8:81:df:03:70:dd:96:
d4:e3:c4:81:bc:a2:ca:ba:62:94:95:f6:e9:23:16:c0:0c:c8:
c1:40:a7:66:90:14:19:97:79:0b:16:a0:a8:f6:0f:8f:00:7b:
cd:52:c7:54:d2:ab:d7:8c:68:3b:b1:7f:5c:a3:49:c0:ac:5e:
38:02:e4:5a:26:9f:14:3c:89:0b:09:0e:53:46:ff:52:48:42:
76:c3:85:2d:ec:b6:4c:48:12:7a:14:82:b1:c5:b2:48:b8:e0:
d7:29:a1:7c:87:ab:68:f1:69:03:56:7c:5e:6a:ad:9a:38:e0:
d1:fb:ba:11:1b:1a:0a:a3:68:33:60:5d:a5:d0:3c:58:b5:af:
33:06:ea:9d:c5:42:5a:a7:90:eb:68:e8:e8:e8:ad:86:ea:de:
02:9c:3c:ff:2d:17:84:33:33:b4:33:2e:cd:13:e6:d4:b9:b8:
3a:90:06:b5:b7:5d:de:7a:98:4e:65:36:49:33:57:49:5e:84:
88:3f:78:78:7d:71:b0:5e:6a:17:2a:a1:1d:42:15:4b:a2:a2:
72:93:88:53:36:c3:c4:af:30:70:09:f8:3e:28:2d:26:55:44:
13:f3:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:36:50 2025 by rpki-client