Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/Yk5hr_46fHKwNIfdaU2RpVY03Dg.roa
File: Yk5hr_46fHKwNIfdaU2RpVY03Dg.roa (raw, json)
Hash identifier: zchFd4tPt1R/PoNWpyJoiQR0f/5mITppmQTZQYX3YJ4=
Subject key identifier: 62:4E:61:AF:FE:3A:7C:72:B0:34:87:DD:69:4D:91:A5:56:34:DC:38
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0196400067F1C4DC50DFCD86D03B491801BD
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/Yk5hr_46fHKwNIfdaU2RpVY03Dg.roa
Signing time: Wed 16 Apr 2025 19:08:10 +0000
ROA not before: Wed 16 Apr 2025 19:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a12:7300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:00:67:f1:c4:dc:50:df:cd:86:d0:3b:49:18:01:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 16 19:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=624e61affe3a7c72b03487dd694d91a55634dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:cd:b8:84:c4:ab:b7:56:8f:f8:15:30:b8:
45:9a:e8:87:bb:09:16:f9:c3:fe:54:98:6a:4d:fe:
7e:28:78:82:4d:91:d1:df:a5:86:0f:da:ad:ab:d2:
b4:55:89:b1:67:0f:89:d3:72:5b:6f:ca:91:8a:62:
2c:49:e4:58:da:47:30:54:9c:d2:d4:d5:fd:f7:7d:
8f:80:38:45:e6:0b:8c:a3:35:c7:5e:d5:9e:fe:09:
da:d8:c6:1b:69:5a:ff:10:3a:34:db:af:85:9a:8f:
e6:61:94:a8:b6:b1:af:d6:08:04:be:8d:7b:24:11:
41:02:15:f9:20:6e:24:b7:ab:7b:da:6a:23:e3:67:
b5:b3:30:b5:b4:8c:1b:9e:3b:4f:5c:4d:3a:71:14:
b2:32:80:fa:8c:8f:cd:ff:7e:36:73:82:8b:0e:11:
92:de:f1:cd:90:5f:d1:74:d2:bf:be:65:bf:95:12:
93:1d:a3:d8:51:40:d4:4e:e5:ec:18:c9:98:b4:dd:
4a:80:dc:66:31:96:96:3a:79:a9:38:81:34:a3:a3:
84:27:7f:9e:76:94:bd:31:e8:2b:d3:a9:3e:f8:5e:
73:b1:13:95:33:d2:34:cf:ad:b8:cc:96:3f:20:36:
21:0d:c1:f6:2e:b1:ea:9b:4b:4e:90:3c:44:c8:70:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:61:AF:FE:3A:7C:72:B0:34:87:DD:69:4D:91:A5:56:34:DC:38
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/Yk5hr_46fHKwNIfdaU2RpVY03Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7300::/32
Signature Algorithm: sha256WithRSAEncryption
6b:25:37:de:5d:23:7b:c0:36:8b:da:1a:48:7e:39:6b:c9:97:
8f:cf:a2:c0:c1:ce:19:a5:e9:33:ee:fa:20:aa:02:dc:30:d6:
d6:c5:34:8f:44:a7:3d:cb:73:d0:4a:8c:4a:df:f1:60:70:c9:
f5:cf:f5:22:6b:78:9a:86:ad:d0:1f:cb:92:c8:25:43:8c:a2:
14:7f:4b:b1:94:1c:6e:72:71:b3:59:29:7a:59:26:37:58:92:
d1:78:2f:cd:ca:3c:93:15:0d:09:ca:41:1c:8c:9e:94:c5:c9:
05:05:6e:fd:09:87:a0:07:da:b5:4b:96:4b:a5:72:6f:09:f6:
77:9b:5e:a5:89:9f:f5:ed:b5:be:47:9e:f9:7c:35:53:c6:07:
0c:d7:25:2c:04:23:fc:60:b7:a2:1a:15:79:04:1d:12:bf:1a:
19:af:b7:15:92:12:84:02:33:14:56:47:e8:ed:9f:9b:a2:7d:
45:ce:1c:d2:73:fe:fb:dc:89:a8:18:35:b3:f4:68:97:6a:05:
a5:59:2e:21:e5:9f:7d:c9:7a:07:e4:55:41:24:13:28:12:65:
60:b5:2d:dd:c9:69:59:57:87:03:52:15:28:7e:a4:c0:60:22:
75:45:2d:9d:33:86:9b:06:fc:61:d1:f5:b3:7b:81:60:49:77:
f3:ca:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:55 2025 by rpki-client