Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YfjMGFYwhtytWdQ3LqN362SiRDQ.roa
File: YfjMGFYwhtytWdQ3LqN362SiRDQ.roa (raw, json)
Hash identifier: zOzyTVbMHHK8W/nh5e1F+xXrInh94k4vvHdiERq+ErI=
Subject key identifier: 61:F8:CC:18:56:30:86:DC:AD:59:D4:37:2E:A3:77:EB:64:A2:44:34
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B562857507F06EE6AE71C5F3327F4F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YfjMGFYwhtytWdQ3LqN362SiRDQ.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 2a04:a5c0::/32 maxlen: 32
2a04:a5c1::/32 maxlen: 32
2a04:a5c2::/32 maxlen: 32
2a04:a5c3::/32 maxlen: 32
2a04:a5c4::/32 maxlen: 32
2a04:a5c5::/32 maxlen: 32
2a04:a5c6::/32 maxlen: 32
2a04:a5c7::/32 maxlen: 32
2a0e:d00::/32 maxlen: 32
2a0e:d01::/32 maxlen: 32
2a0e:d02::/32 maxlen: 32
2a0e:d03::/32 maxlen: 32
2a0e:d04::/32 maxlen: 32
2a0e:d05::/32 maxlen: 32
2a0e:d06::/32 maxlen: 32
2a0e:d07::/32 maxlen: 32
2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0e:c380::/30 maxlen: 30
2a0e:c384::/30 maxlen: 30
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a10:4b00::/30 maxlen: 30
2a10:4b04::/30 maxlen: 30
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
2a13:1340::/30 maxlen: 30
2a13:1344::/30 maxlen: 30
2a13:4fc0::/30 maxlen: 30
2a13:4fc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:62:85:75:07:f0:6e:e6:ae:71:c5:f3:32:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61f8cc18563086dcad59d4372ea377eb64a24434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:d9:6b:bc:aa:80:41:7f:6f:f7:24:76:15:
1b:a1:3d:22:60:4e:e0:91:06:e3:81:5a:e5:f1:c4:
83:e7:11:fe:3b:e1:46:31:06:e6:23:67:3d:6b:f9:
b9:f3:f9:c3:d0:b8:f8:01:61:a8:0f:dd:2a:6a:7a:
c9:d5:44:cc:9a:c8:6e:51:8f:9b:da:6f:98:f4:57:
30:cc:23:67:6c:c7:92:b4:ed:b5:5f:43:3d:25:7d:
21:ce:7f:78:80:a3:d7:73:b0:b5:4b:a0:71:8a:0b:
d5:78:1a:e2:88:d4:9b:77:39:fa:98:91:fe:6b:1c:
42:00:42:15:cd:02:2a:ff:0e:af:9a:3c:17:64:0e:
2f:6c:c7:e4:cd:25:74:3e:4f:02:6f:4e:39:5e:06:
05:2a:82:a7:59:e2:15:a3:83:24:7f:ab:9a:be:0c:
a2:41:5d:3c:04:96:1f:6c:d7:07:5b:98:b9:46:16:
98:1c:27:3c:ac:cf:5e:aa:24:d6:ab:fb:39:13:88:
2a:a8:f7:de:82:ae:06:0a:82:5c:1b:90:cd:00:bc:
e9:7e:38:75:ea:4c:92:76:69:2b:47:bc:6f:0d:e0:
0e:a6:2b:bb:dd:02:dd:82:21:2b:0c:29:7b:4f:ad:
1a:74:be:67:c6:15:5c:1c:e2:9b:31:57:0c:5e:71:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:CC:18:56:30:86:DC:AD:59:D4:37:2E:A3:77:EB:64:A2:44:34
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/YfjMGFYwhtytWdQ3LqN362SiRDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:d00::/29
2a0e:b140::/29
2a0e:c380::/29
2a0f:db80::/29
2a10:4700::/29
2a10:4b00::/29
2a12:4300::/29
2a13:1340::/29
2a13:4fc0::/29
Signature Algorithm: sha256WithRSAEncryption
51:e8:07:45:8f:f3:78:14:9a:5a:f8:64:c8:a0:c4:1b:ef:e7:
45:a8:83:2d:1b:2d:74:be:0f:0f:ef:36:3d:b6:86:16:4a:8e:
75:43:b7:e6:8b:71:c0:7d:5d:98:9a:05:e1:23:a4:ae:63:10:
b9:98:e5:4c:da:44:78:af:02:06:96:41:79:4a:16:74:bc:da:
bc:4c:6d:be:21:6b:3e:74:20:91:52:d5:4b:2c:1d:bf:b1:4d:
23:5b:af:c4:84:78:aa:26:c1:60:e9:b3:c8:8a:ba:ed:ad:a5:
c1:ee:87:e7:b0:55:ce:66:ed:de:74:54:df:ad:f6:11:5a:05:
51:e4:90:b4:05:a2:ee:21:38:d7:29:37:36:3f:03:de:34:7a:
7c:fe:4c:ae:3a:19:27:f6:e6:c6:46:b0:fb:51:a8:bc:a7:c4:
29:ca:e6:69:00:3c:cd:88:bc:f1:51:bf:40:e1:55:72:ad:d7:
7f:8a:cc:8b:23:e6:10:8d:0b:af:09:02:de:84:17:4c:06:fb:
0b:b7:1d:ad:b4:b0:2e:24:e3:cd:55:43:1c:a7:ab:3f:99:16:
1c:c8:b5:8d:7b:2f:9b:b9:6f:e1:4f:43:a7:69:27:70:d5:22:
10:ef:7d:5d:37:08:75:56:ef:57:46:f1:81:81:9d:99:98:0e:
3e:c7:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:57:07 2025 by rpki-client