Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/Kyq8dvDQCWTM4SDI01T-WEma_xs.roa
File: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (raw, json)
Hash identifier: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=
Subject key identifier: 2B:2A:BC:76:F0:D0:09:64:CC:E1:20:C8:D3:54:FE:58:49:9A:FF:1B
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 019426D953891C9616C99FE7108EA0220D0E
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/Kyq8dvDQCWTM4SDI01T-WEma_xs.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200881
IP address blocks: 2001:67c:2dd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:89:1c:96:16:c9:9f:e7:10:8e:a0:22:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2abc76f0d00964cce120c8d354fe58499aff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:33:46:eb:1a:93:c9:97:b9:61:62:8b:6f:
ab:02:64:3d:d6:57:2a:7c:c1:46:01:98:2c:9c:f3:
3a:3a:fe:91:ef:79:7b:be:31:14:f2:c3:a6:2e:76:
28:ce:21:f1:ea:bf:19:88:9b:8f:21:0f:f4:71:cc:
cd:82:5a:1a:35:fa:12:91:f5:d3:d2:5b:65:49:9a:
c9:3f:07:e1:f0:25:a3:1f:31:59:e0:b5:61:19:47:
b2:85:7d:ca:9a:af:3a:ec:13:81:75:0b:68:13:8a:
ae:8f:53:1e:99:cf:9d:2b:0d:e3:52:70:6a:47:d8:
39:8f:5b:c9:57:a0:17:69:b9:b0:01:f1:ba:a2:69:
9a:0d:88:6c:8c:f9:cf:39:fe:a2:9c:bf:a3:66:3c:
1c:2e:36:46:30:6a:28:9c:4c:33:fe:e8:54:4c:e5:
21:b6:72:11:7a:09:fa:34:89:65:ea:43:ee:fa:e3:
d0:a1:a7:00:df:51:54:76:a7:f4:e0:f6:48:04:4d:
64:18:16:94:89:a4:31:6d:db:34:8b:9b:53:f8:8e:
8d:0f:72:95:d1:32:e1:d5:f2:0c:7e:24:46:0f:86:
ee:1d:8c:4b:b4:d7:70:57:2f:15:15:9a:77:dc:c9:
75:74:32:ef:3c:51:4a:88:16:53:0b:a6:1d:db:31:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:BC:76:F0:D0:09:64:CC:E1:20:C8:D3:54:FE:58:49:9A:FF:1B
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/Kyq8dvDQCWTM4SDI01T-WEma_xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dd0::/48
Signature Algorithm: sha256WithRSAEncryption
e6:89:89:77:39:91:8a:71:0e:45:33:a4:ec:fd:44:03:c8:67:
a8:4a:e2:f9:8d:90:0c:da:b2:41:c1:25:19:ba:60:ef:18:58:
62:e1:8c:84:db:7a:b4:8a:a4:79:15:35:dc:51:ec:4c:1f:a8:
01:63:98:f1:14:fd:6c:66:46:57:f7:6e:5c:ef:49:72:49:c3:
50:67:ec:6e:6d:04:0a:d8:0d:07:a8:39:10:07:c7:da:86:63:
b8:e7:fb:e8:02:48:e0:80:a3:18:3a:e1:c2:c7:56:b0:23:76:
82:fe:a9:c7:08:b0:95:bf:38:01:0b:07:1a:c4:10:99:66:06:
31:a0:5a:0f:6a:98:e9:13:ea:31:6f:46:25:b2:39:ad:24:91:
ba:df:0e:4f:0e:2a:28:48:0b:91:ac:18:67:68:76:82:e9:99:
d9:10:ac:87:ad:92:f5:ec:f3:39:2d:42:6b:52:66:d1:90:66:
5d:e7:86:fa:ab:a9:0d:a1:aa:b8:d2:d5:04:07:32:88:39:a5:
d2:a0:ab:f3:2f:98:9c:ba:dc:a5:76:e4:96:95:d4:88:73:99:
69:30:27:10:bb:9d:e5:29:0c:d9:65:d6:9a:80:d5:ae:3f:98:
68:40:de:ef:9a:cb:68:99:8e:14:3b:88:6a:ef:cf:c0:bd:ad:
db:a3:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:44:52 2025 by rpki-client