Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/yeykCTxRfXSLEqjo1MZ7zObmrks.roa
File: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (raw, json)
Hash identifier: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=
Subject key identifier: C9:EC:A4:09:3C:51:7D:74:8B:12:A8:E8:D4:C6:7B:CC:E6:E6:AE:4B
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 019425217F55638E4F31285792CA36CE2821
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/yeykCTxRfXSLEqjo1MZ7zObmrks.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202585
IP address blocks: 2001:678:d64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7f:55:63:8e:4f:31:28:57:92:ca:36:ce:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9eca4093c517d748b12a8e8d4c67bcce6e6ae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:c0:c3:15:c3:8a:6b:44:11:38:78:01:c5:
7e:a6:41:21:41:1c:a8:e3:f7:99:3f:70:bb:be:03:
e9:74:84:75:4f:79:dd:ec:20:af:4c:b2:9c:68:b5:
01:5f:90:31:43:0f:a1:96:77:c0:23:5f:a1:cf:e3:
d6:e0:bc:63:18:9e:ed:4b:cb:ae:32:b7:b5:04:9e:
57:a6:27:23:e5:93:bf:92:1c:73:b5:eb:16:b6:5d:
53:4e:e0:94:6a:25:86:9d:c8:ff:67:fa:e8:fb:62:
c1:18:05:b6:2a:6c:8a:cf:cf:10:51:81:d4:5e:68:
50:9b:b9:15:68:bf:98:b6:84:83:64:89:6e:d2:5e:
9d:4f:06:eb:ae:25:3b:3c:ef:cf:02:9e:d9:f7:bb:
1b:72:33:c5:4c:7f:a3:75:51:c2:45:2e:f9:fc:1a:
57:50:a5:11:27:f9:a1:ed:96:33:64:8d:69:4b:56:
d3:33:3b:a0:e1:7a:6d:59:eb:b4:c1:15:d6:86:8b:
4f:fe:70:f2:6b:01:8e:35:70:48:18:a7:7e:6b:70:
8b:b6:cd:e8:84:fd:3b:6b:2f:a9:a7:75:6b:f4:07:
76:61:c9:4e:bc:18:1d:67:f2:d3:e5:b1:9d:ba:8c:
96:2b:87:ca:fa:a0:7e:90:91:0d:43:3a:09:10:0e:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:A4:09:3C:51:7D:74:8B:12:A8:E8:D4:C6:7B:CC:E6:E6:AE:4B
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/yeykCTxRfXSLEqjo1MZ7zObmrks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:88:7a:55:6e:9a:99:3e:6c:64:78:b6:52:84:fd:ad:6e:6d:
44:f9:c9:b8:48:14:78:5d:2c:70:a7:ac:09:21:1b:34:e5:46:
6f:38:60:72:f3:85:3c:f1:19:0f:29:29:a0:44:e6:6f:55:b9:
60:c3:38:38:df:9e:7f:6b:5c:cb:71:07:9a:95:34:a1:da:63:
d6:9c:29:cd:ea:6b:ad:6c:b4:46:23:6f:41:a2:ac:10:d8:41:
60:30:bc:be:55:d9:65:3e:6b:27:5b:ac:15:8f:9a:20:c6:5c:
e3:9a:7f:67:8a:8f:5e:95:d7:01:98:d6:42:ed:da:9d:4d:9d:
42:89:d8:1e:87:c8:60:0c:d7:36:e1:9d:10:4a:29:fe:65:7d:
4e:d6:62:b3:51:d1:64:12:be:0a:d5:ca:db:5a:74:df:e7:be:
2a:ba:ec:6f:05:c3:6e:c7:0d:8c:c3:0e:41:52:7f:2a:1a:4a:
c1:69:25:c8:fd:e6:ae:8a:d6:af:40:22:8a:b6:df:18:9b:6e:
24:f0:51:7e:a6:fc:c2:55:81:dd:5a:9b:65:75:04:45:7c:82:
12:67:f9:65:91:29:4c:8a:14:4d:82:eb:64:a6:7a:04:a2:e6:
3d:6f:56:c8:f1:d1:2d:77:10:ee:ca:7b:1e:4b:ca:86:0e:a9:
fd:35:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:11:24 2025 by rpki-client