Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/Yjz0EriP9DUb51GdW-zHnP36Zd0.roa
File: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (raw, json)
Hash identifier: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=
Subject key identifier: 62:3C:F4:12:B8:8F:F4:35:1B:E7:51:9D:5B:EC:C7:9C:FD:FA:65:DD
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0194258EFB687205ECBCC3D775EB9BA0240B
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/Yjz0EriP9DUb51GdW-zHnP36Zd0.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41860
IP address blocks: 2a03:8880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:68:72:05:ec:bc:c3:d7:75:eb:9b:a0:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=623cf412b88ff4351be7519d5becc79cfdfa65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:ec:08:3c:d2:b2:41:14:1d:fb:a6:c5:c7:
18:6c:62:11:a9:58:d5:96:37:c5:87:78:9a:2c:ac:
d2:1f:20:db:30:1f:0a:83:04:60:1a:7c:ac:53:30:
dc:1a:56:a8:16:4b:33:e6:85:75:11:1e:92:3f:25:
4f:80:97:f3:c0:e4:f3:b7:0e:f6:29:12:1c:1c:be:
be:79:af:0e:5e:9c:2c:34:99:f9:ea:2b:9b:0f:8a:
0d:af:81:fa:a6:af:e3:38:56:a0:34:48:14:35:a5:
b7:9c:88:79:e1:04:f4:96:40:e6:87:70:06:35:57:
a6:82:6d:66:f4:e5:6b:de:bb:46:96:08:2f:e8:e6:
fb:10:61:e9:1f:78:f4:2e:0d:34:d0:b9:af:55:6a:
dc:1d:e6:1a:5f:be:92:d1:2e:74:4f:82:45:27:26:
10:39:74:9e:79:55:0d:3a:d2:77:77:6a:99:e5:b8:
72:a1:df:fd:17:a2:e6:d2:ea:bb:c3:a3:ff:6f:d3:
ca:09:89:88:12:d3:1a:d7:02:0f:0d:63:8f:b3:a1:
66:38:25:a9:45:0b:12:dc:1e:cb:dd:65:33:19:dd:
73:4e:9f:a6:c5:cf:01:a3:58:19:c2:44:67:2c:aa:
17:79:30:b8:ca:09:e2:b9:7f:96:91:df:17:31:57:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:F4:12:B8:8F:F4:35:1B:E7:51:9D:5B:EC:C7:9C:FD:FA:65:DD
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/Yjz0EriP9DUb51GdW-zHnP36Zd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8880::/32
Signature Algorithm: sha256WithRSAEncryption
89:a7:2d:06:79:eb:fb:d3:80:82:b5:ee:19:56:99:5c:97:ad:
9a:86:6b:85:57:ee:a3:14:59:57:69:8a:fe:cf:c5:15:f3:0e:
e7:f0:db:5e:78:6b:1a:97:13:ec:73:ed:66:85:94:87:98:5d:
33:bc:d6:bd:e0:22:52:b4:a3:a1:50:28:40:81:27:b3:12:cd:
7e:44:ff:7f:31:af:2c:18:6c:7e:b8:a9:bc:47:36:7b:5a:48:
45:84:b2:b2:97:16:f7:4c:85:b3:87:4f:38:86:d0:c0:2a:66:
8c:4e:1c:e8:fb:1f:9c:b1:8d:e9:fa:87:d8:96:43:4c:45:11:
39:95:ed:ba:95:84:a5:79:d9:d4:80:f0:4f:9a:7f:ce:93:a1:
9b:e9:ff:3d:6f:28:dd:07:99:65:c5:9c:11:34:fa:86:bc:fe:
b6:dd:18:33:ba:65:26:eb:ca:fa:5d:d7:e9:33:cf:8d:ee:f6:
52:85:c5:a4:f3:77:07:3c:e8:14:07:f7:cc:bd:5f:cd:95:28:
6a:66:6e:bd:ad:86:77:bd:76:92:ad:c7:12:ac:d0:6b:49:d9:
82:d4:b0:55:90:55:02:0d:cf:b0:58:0b:2f:fd:c1:32:6a:79:
42:ec:e3:6a:cd:5d:39:6a:0f:96:30:57:86:30:77:e7:9c:fd:
3c:16:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:58 2025 by rpki-client