Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YQOQ43lAHfc9Hg4PS4sHcaF7Vgk.roa
File: YQOQ43lAHfc9Hg4PS4sHcaF7Vgk.roa (raw, json)
Hash identifier: 9DIGKs1e2CRwnhwAaaDlsE9Iet9DSPvudbruEj4TCMc=
Subject key identifier: 61:03:90:E3:79:40:1D:F7:3D:1E:0E:0F:4B:8B:07:71:A1:7B:56:09
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01973F968277F1ED03D207C279799ED93B9C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YQOQ43lAHfc9Hg4PS4sHcaF7Vgk.roa
Signing time: Thu 05 Jun 2025 10:15:17 +0000
ROA not before: Thu 05 Jun 2025 10:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21100
IP address blocks: 2a10:6c40::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:96:82:77:f1:ed:03:d2:07:c2:79:79:9e:d9:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 5 10:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=610390e379401df73d1e0e0f4b8b0771a17b5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:5b:4b:52:7b:57:88:5b:51:4b:de:9f:e1:
d9:c1:b0:6f:1f:7b:50:27:b2:98:c2:88:01:5f:45:
4c:e1:1a:cc:96:70:0c:b2:cf:ac:44:d9:5b:45:96:
1a:c4:e4:02:0f:65:66:04:d1:11:62:0b:07:98:2c:
92:47:1e:16:a1:ca:f8:a1:98:01:f7:5c:16:4b:96:
7a:3e:8d:06:13:bf:b5:e5:32:e9:0d:50:b2:03:4a:
81:b8:1a:b4:9a:be:92:1d:54:8d:ff:03:63:41:74:
5f:c3:82:c0:81:15:08:a9:0c:9b:76:e6:73:c7:2d:
bc:4e:56:8a:bc:63:ba:ed:bd:56:d1:ae:c1:4b:57:
07:1e:33:2f:4c:ef:b5:75:56:c2:42:1c:24:87:d3:
e9:c1:a6:05:83:ca:31:29:5f:23:20:41:a9:41:eb:
55:4a:d7:96:0b:b2:4b:02:05:ac:94:6a:50:89:8a:
e6:d3:d9:a1:04:84:d2:9b:bf:35:7a:3f:ea:89:40:
3f:c0:10:1b:71:55:0a:3c:5a:bc:2e:3e:74:c1:71:
6a:09:23:a0:5d:de:65:89:27:66:22:34:29:fa:9f:
16:d6:da:51:16:de:dd:67:dc:6d:29:2f:a9:51:4c:
76:63:e4:b5:70:e0:4f:03:62:81:97:16:e0:49:a8:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:90:E3:79:40:1D:F7:3D:1E:0E:0F:4B:8B:07:71:A1:7B:56:09
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/YQOQ43lAHfc9Hg4PS4sHcaF7Vgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6c40::/29
2a13:8000::/29
2a13:de40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:95:58:af:8c:67:77:d5:7e:c1:d7:91:7d:32:dd:6e:9f:1a:
24:a2:4f:a5:64:de:9c:7c:70:a4:90:b6:70:65:35:02:c8:2a:
60:56:81:b7:9f:76:7c:dd:9b:95:90:28:78:19:3f:81:4e:73:
db:00:29:2c:79:c9:8b:82:c6:81:31:06:c7:fe:63:19:df:d7:
91:31:d8:1e:98:20:84:83:83:04:00:77:db:38:36:cc:f0:0d:
57:8c:ae:fd:16:fd:33:81:60:ae:a4:55:92:4f:4c:f4:59:2b:
a0:ab:56:85:60:07:46:09:26:c4:d1:72:d6:75:ff:b1:ca:1f:
5b:7f:ad:3a:e1:d8:ca:bf:5d:41:14:e2:ed:b8:58:ba:7c:7f:
2a:bd:b1:32:30:e9:d5:79:90:3d:e4:d0:8b:7c:d8:28:a3:48:
b9:b6:82:a1:91:a9:13:43:20:9f:d5:ac:65:37:f3:db:4a:55:
49:69:7c:40:e1:ab:da:65:58:99:ef:13:56:12:08:a4:f0:15:
ea:c0:09:4a:d2:1d:20:97:ac:68:93:82:57:03:ed:64:96:a3:
21:a0:b2:fb:57:38:cf:71:56:fe:bf:8e:85:40:c6:eb:e8:5a:
5d:f9:95:5d:c2:9c:0a:e4:af:83:10:05:8e:5a:8c:49:c1:04:
2f:fa:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:21:01 2025 by rpki-client