Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa
File: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (raw, json)
Hash identifier: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=
Subject key identifier: 63:8E:AF:08:E5:D8:1F:0E:EB:41:A4:0A:1F:8B:D5:BE:3B:28:3E:3D
Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial: 0194206863A34093A12F5F6FB3E7F826EDCC
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200694
IP address blocks: 2001:67c:1344::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:a3:40:93:a1:2f:5f:6f:b3:e7:f8:26:ed:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=638eaf08e5d81f0eeb41a40a1f8bd5be3b283e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:c7:fd:99:01:01:b8:36:c8:1c:b9:b0:a5:
dd:39:b2:fd:62:d3:19:62:09:de:72:47:9f:47:18:
d3:57:a8:15:14:e8:49:26:21:b0:53:2d:f1:20:59:
df:cc:9e:d7:33:40:81:a2:d0:0f:c3:a1:ca:d2:5f:
e8:46:c2:08:87:2b:51:7d:a8:b8:2b:55:db:0a:ae:
43:20:d8:07:9e:2a:43:12:a7:9c:8b:2d:bd:09:3e:
2a:ab:b7:10:3e:d6:0f:80:98:52:ac:1d:ac:58:d9:
3c:11:3b:20:fd:7b:01:71:e7:45:a5:a5:fe:5e:b0:
97:d9:a4:6c:f4:5a:19:a0:43:8b:a0:9a:8d:fe:13:
4f:44:e8:85:02:85:b9:ab:79:fc:82:27:d6:86:3e:
9e:31:40:49:cb:c2:64:5b:5e:e6:d8:83:a4:d6:14:
e1:51:17:20:ab:dc:9e:9a:9e:7a:94:cc:3e:cc:32:
84:e0:9b:53:3b:8f:2f:b3:f5:23:ad:39:ec:68:f4:
e5:d6:d4:a1:cd:cb:6d:ae:cf:a2:82:06:0c:b7:d7:
72:68:27:5d:62:ef:15:4f:5b:cd:09:4d:b7:5b:7f:
4d:a2:0a:05:59:6e:93:66:01:80:40:4e:59:b0:6b:
22:f2:1a:7e:0d:a9:7b:42:23:59:1d:a4:73:58:2f:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:AF:08:E5:D8:1F:0E:EB:41:A4:0A:1F:8B:D5:BE:3B:28:3E:3D
X509v3 Authority Key Identifier:
keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1344::/48
Signature Algorithm: sha256WithRSAEncryption
29:21:78:c8:e3:64:42:0a:0e:26:1f:81:5a:1f:b0:1a:91:a9:
ed:b7:f5:b6:de:64:90:99:b1:6f:25:3c:26:03:59:2f:d7:a6:
34:03:84:9c:e9:24:c0:57:94:60:42:a7:f8:fb:f8:60:f8:c3:
ee:cd:19:6c:d2:2c:a4:d9:33:32:ce:83:f4:e3:c2:ba:25:1b:
70:a7:6a:f9:47:e3:d5:d8:ce:79:cb:b9:7d:89:bb:9e:39:55:
74:37:2b:dd:29:cc:19:40:e4:75:5b:06:1b:a0:77:71:e1:49:
c6:ba:6d:ca:d0:e6:4b:b5:b6:03:2f:56:fa:ab:40:11:ef:b6:
b4:dc:fd:ec:e4:72:3a:3b:e6:2c:e2:e4:79:a0:f1:45:77:fd:
1d:ae:ec:4b:86:26:3a:90:cf:d8:94:81:10:4c:3c:50:b9:17:
c4:d3:04:b1:4a:32:4f:29:34:72:7d:b4:2c:83:2c:11:15:ac:
ed:3a:44:0d:06:b0:f8:97:92:ed:fd:5e:5c:44:c8:41:22:6d:
e5:b3:71:91:ae:04:d6:9a:8a:32:7e:84:4d:0a:4d:81:68:67:
3f:75:ff:d2:d0:b7:c3:30:b5:71:7a:df:7c:b5:96:60:32:60:
f8:68:61:57:20:00:1f:1a:07:f3:b0:6a:9e:e7:f1:27:6c:27:
d4:ff:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:56 2025 by rpki-client