Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Y8GPmaQeFxfDr3DqhzaLqaY9_hs.roa
File: Y8GPmaQeFxfDr3DqhzaLqaY9_hs.roa (raw, json)
Hash identifier: t/01qn/hPihTh1pAdDD3LUY9v8M6hU5cNDgH2VNTxEk=
Subject key identifier: 63:C1:8F:99:A4:1E:17:17:C3:AF:70:EA:87:36:8B:A9:A6:3D:FE:1B
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369EAC9FE477220B525068848C7D88A
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Y8GPmaQeFxfDr3DqhzaLqaY9_hs.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198316
IP address blocks: 2a0f:7803:ffe0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ea:c9:fe:47:72:20:b5:25:06:88:48:c7:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c18f99a41e1717c3af70ea87368ba9a63dfe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:e9:cc:42:db:81:6a:b6:4c:8a:dc:d4:09:
7f:3a:6b:1e:89:92:47:19:2f:c4:cd:0b:e1:69:bf:
64:f0:bb:6a:3f:d6:f1:4f:87:a6:58:32:55:41:01:
99:3c:4e:21:f2:8d:72:85:8e:bc:8e:66:19:be:2c:
57:01:06:8d:73:3f:82:81:85:10:57:fe:a1:97:da:
20:af:e7:7d:f3:0a:f5:7c:ab:c5:08:c1:40:03:02:
67:c1:94:82:cf:a3:18:c5:01:61:6c:39:f8:7d:1d:
ce:d0:0e:40:bc:64:1a:7c:e0:41:af:9e:c0:63:d2:
0d:41:ef:a9:eb:87:f0:47:c3:01:5b:c2:b7:ac:68:
7d:cc:a9:03:b1:e4:69:a9:7a:6a:a2:5b:e9:80:61:
aa:c5:3a:d9:50:4d:cc:18:02:6e:96:13:a7:d6:56:
5d:51:21:a3:c7:30:a3:e5:a7:10:24:80:76:b4:82:
9d:9c:77:e3:24:c9:6d:ab:c1:75:17:34:4d:ca:24:
8a:d8:36:94:79:3f:52:17:22:ac:6d:e3:98:90:94:
91:0f:4b:1d:0e:5f:ac:4f:9d:e8:23:da:69:e0:57:
e2:47:a3:37:26:ff:91:02:46:fa:b7:a9:86:4d:5e:
13:64:4e:2c:8a:44:b9:7e:5e:79:4e:e1:f3:87:b5:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:8F:99:A4:1E:17:17:C3:AF:70:EA:87:36:8B:A9:A6:3D:FE:1B
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Y8GPmaQeFxfDr3DqhzaLqaY9_hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
78:55:a9:2a:cf:07:bc:01:8c:f6:08:52:f5:f5:6d:35:ba:7b:
4f:bc:53:e5:2e:bb:e0:37:61:f5:a3:0d:71:16:77:68:fd:3e:
d3:b9:66:69:01:74:9d:46:b1:4f:22:bb:64:a8:f6:6a:c1:76:
df:b0:98:83:d2:5a:4a:89:bf:03:0c:3f:e1:c9:a1:9b:da:c3:
4d:e2:ce:3b:74:7d:3a:73:8e:19:8c:7a:89:6f:b3:a0:68:79:
52:22:06:d5:40:c0:34:5c:3c:15:85:3a:d7:df:0d:b9:88:6b:
21:4f:05:12:4f:2f:d4:f7:b0:af:e4:53:ef:44:9f:1c:d3:94:
2e:6d:a6:e2:00:1a:eb:bd:b7:3d:7c:3e:4d:0b:6e:71:55:cb:
55:d7:48:a8:89:a6:41:dc:0a:df:dd:d1:2b:0c:d1:58:e7:60:
68:d2:41:bf:d8:2c:74:85:d1:26:c9:5a:2f:48:4d:95:59:63:
9f:05:39:59:b9:50:69:f3:d5:68:db:cf:e0:6a:4c:d7:88:9e:
84:e4:1c:45:fd:cc:74:09:8f:59:f6:84:a2:09:a0:1a:5d:98:
6f:f2:ce:ca:ef:da:f2:19:69:b5:ec:11:26:22:0d:9f:da:a0:
3a:81:32:ea:1d:4c:ed:6e:84:0a:2d:73:b2:32:53:39:49:37:
49:73:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:52 2025 by rpki-client