Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/yay3nN2FWSrpjXKo77YZUaENbjA.roa
File: yay3nN2FWSrpjXKo77YZUaENbjA.roa (raw, json)
Hash identifier: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=
Subject key identifier: C9:AC:B7:9C:DD:85:59:2A:E9:8D:72:A8:EF:B6:19:51:A1:0D:6E:30
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 01941F8C1C64F738A6F8CD55AA48DDADAAB0
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/yay3nN2FWSrpjXKo77YZUaENbjA.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57454
IP address blocks: 2a0c:cd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1c:64:f7:38:a6:f8:cd:55:aa:48:dd:ad:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9acb79cdd85592ae98d72a8efb61951a10d6e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:8e:cf:ad:34:c8:8a:06:98:ce:0d:87:ae:
6d:d1:0d:06:ad:da:92:ca:a6:64:f5:e2:06:e1:86:
71:a3:1d:8e:1d:c4:0a:8b:05:fd:81:e2:7c:2e:46:
a4:6d:98:10:0a:f4:78:22:c4:3f:ec:c4:7b:43:81:
f2:e2:61:f0:ca:b4:6a:3d:48:b7:92:b3:0d:78:55:
93:60:b7:1b:a9:3f:52:44:f2:76:6c:db:8f:22:74:
21:47:eb:d4:33:b4:40:8a:27:7a:b8:c3:96:6e:76:
28:a4:9a:58:c3:42:d2:d9:8a:0f:4b:0e:ef:a4:01:
5c:f6:3b:72:61:39:51:2d:4b:60:2d:3e:3d:eb:4c:
4d:0f:7c:cd:60:53:80:23:c7:ec:63:29:b8:96:6c:
72:08:29:1e:0a:26:39:30:a3:fa:24:50:61:d6:df:
7e:cc:14:7e:4c:50:af:09:bf:e2:c7:fb:be:2b:2b:
04:f0:a1:5e:b7:6d:ec:82:43:f0:fb:5f:c2:6f:b0:
6f:35:c5:9f:14:5b:8a:24:f0:ea:83:32:d6:b6:e0:
58:08:ab:b3:50:ab:eb:e9:b1:c2:ad:9b:bf:7a:d9:
34:52:2f:7c:a2:c5:88:48:75:1e:07:ae:9e:b6:05:
dd:c9:2a:61:9a:a1:cf:fb:df:a7:5f:68:3c:8f:31:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:B7:9C:DD:85:59:2A:E9:8D:72:A8:EF:B6:19:51:A1:0D:6E:30
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/yay3nN2FWSrpjXKo77YZUaENbjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:1a:55:53:6c:5c:59:9c:1a:e9:3d:5e:fa:67:19:77:6b:3b:
52:d2:7e:60:c9:2e:c5:1a:d0:1b:ce:86:f6:81:5e:5a:e3:e3:
f5:d3:80:2f:24:dc:39:1f:93:17:35:13:d6:db:1a:69:cb:23:
61:93:70:cb:08:62:07:62:1e:af:d5:a1:8f:c0:b2:b5:dd:69:
d7:94:a4:a0:33:48:7c:08:1c:6b:f1:29:d9:a5:3b:cc:65:91:
c0:cc:f1:ec:c5:dd:54:b9:07:3d:64:21:d5:1d:f0:70:36:fc:
08:07:6d:d2:a8:9d:34:61:4d:55:86:ba:a2:6c:66:20:17:1f:
07:4c:1e:ad:a9:41:38:97:30:bf:0f:f9:83:6f:d2:98:cd:ba:
07:6e:83:43:39:42:4b:99:c9:a5:fc:68:4d:c0:0d:42:e8:03:
2d:fb:22:bb:c2:de:60:b3:a3:c2:35:c1:fc:48:2e:13:9f:ae:
15:62:f8:b9:ca:cf:47:2e:1f:27:39:57:2a:66:c1:75:03:af:
f4:36:3e:c2:33:7b:13:fa:92:4c:bc:2e:07:ad:0e:de:36:92:
b7:cc:d2:df:33:e8:f4:3b:c7:ab:97:9b:21:69:c7:25:f6:f7:
ca:d4:ea:f4:2d:e0:dc:26:80:a0:09:9d:1b:be:bb:a6:ad:f4:
c3:1c:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:41 2025 by rpki-client