Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/c-YB5zSc0c1xWdOauA62tbaTi7U.roa
File: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (raw, json)
Hash identifier: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=
Subject key identifier: 73:E6:01:E7:34:9C:D1:CD:71:59:D3:9A:B8:0E:B6:B5:B6:93:8B:B5
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0196F7681283EC64809DB2FB199E2BC9D399
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/c-YB5zSc0c1xWdOauA62tbaTi7U.roa
Signing time: Thu 22 May 2025 09:51:54 +0000
ROA not before: Thu 22 May 2025 09:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44928
IP address blocks: 2a00:c0c0::/32 maxlen: 32
2a02:520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:68:12:83:ec:64:80:9d:b2:fb:19:9e:2b:c9:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 22 09:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73e601e7349cd1cd7159d39ab80eb6b5b6938bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:e2:08:9f:db:c9:57:7f:d0:de:ec:a8:f7:
a5:9e:32:d5:1f:ce:fd:f3:87:a2:54:4e:a8:04:b0:
eb:78:61:fa:b8:85:78:d6:39:85:3d:12:0e:80:13:
f9:a4:f6:88:69:60:27:95:3d:b7:d7:4b:2b:55:ac:
d6:26:e4:e1:ad:93:be:d5:3c:52:27:20:14:06:bb:
c6:4c:25:e0:86:ea:03:12:95:10:c7:52:ed:e3:c7:
89:f4:5e:de:02:e3:ec:4b:52:a6:2e:ba:5a:a6:bd:
a5:41:64:27:b3:90:b3:2b:d4:2b:e9:73:db:dd:dd:
5c:c6:71:b2:c5:f4:d3:d2:7b:07:20:1f:69:c0:3f:
96:fa:5f:43:b8:fb:ac:43:52:88:e5:6a:d8:c3:76:
10:73:76:9d:d2:d3:c0:37:be:60:e9:ed:38:8e:5d:
95:bc:7d:f0:22:e2:61:3f:89:b5:31:25:37:17:79:
a3:53:ed:eb:a5:8b:6f:e4:ce:e0:44:df:30:47:12:
20:a7:9c:8c:f3:a4:af:6a:5f:78:86:37:33:41:85:
ca:40:98:84:89:56:6c:b8:99:b7:7d:4a:f8:9e:ab:
10:72:94:1a:8e:76:79:00:3b:f5:1f:3b:0b:74:0a:
92:e9:83:a7:e0:70:0a:dd:ea:c6:b4:1c:08:50:1e:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E6:01:E7:34:9C:D1:CD:71:59:D3:9A:B8:0E:B6:B5:B6:93:8B:B5
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/c-YB5zSc0c1xWdOauA62tbaTi7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:c0c0::/32
2a02:520::/32
Signature Algorithm: sha256WithRSAEncryption
48:94:aa:76:3e:8e:02:d1:d5:d5:c8:ef:43:2c:ab:99:99:d6:
89:43:3c:09:4d:a6:5d:b5:52:33:be:d4:5c:72:aa:04:00:cf:
6c:32:d4:be:05:79:fe:ec:2e:ca:4a:c0:04:73:ce:67:bb:54:
72:56:9e:09:ff:f8:b9:17:8e:91:34:6f:2e:d9:23:3c:e6:fe:
70:c7:b1:df:66:f7:de:54:c9:2d:28:df:b7:18:3f:a1:3c:b5:
38:6c:e7:92:fe:3e:70:6d:19:37:e3:c5:10:ee:6a:95:64:1f:
b9:a8:d8:6d:bd:a5:7e:1e:66:ea:39:4b:ab:f5:de:f8:db:2f:
09:f7:41:fe:34:f1:4c:0d:51:36:ed:c3:43:9f:c7:96:96:81:
52:50:da:28:36:26:9f:97:26:05:74:ee:aa:48:40:bf:ad:2f:
10:a5:66:03:2c:7f:93:58:28:66:c8:13:e4:67:e5:87:55:02:
f5:f5:9a:fe:db:24:60:cc:82:1c:44:80:0f:ac:60:ad:a6:a0:
3d:4a:a8:9a:d8:c3:06:af:a9:fd:14:bb:71:f4:36:ee:51:29:
7d:58:e1:3d:c3:9f:87:a8:db:24:3b:e5:5f:3f:c5:ff:aa:11:
4d:47:2a:49:93:59:f1:c9:52:ba:61:8a:6d:ca:4a:c4:f2:3a:
cb:79:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:11 2025 by rpki-client