Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa
File: YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa (raw, json)
Hash identifier: 6zYw4RGhgL5oXoJxuJXImN5CehSpcJqIUUxqFJsp5EQ=
Subject key identifier: 60:F5:D8:8C:10:07:FF:A0:93:6B:63:D1:CE:DF:05:51:74:AF:D2:E7
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0196433ECAF42FC7292D3129D10599F24BA2
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa
Signing time: Thu 17 Apr 2025 10:15:10 +0000
ROA not before: Thu 17 Apr 2025 10:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a0e:5384::/32 maxlen: 32
2a0e:5386::/32 maxlen: 32
2a0e:5642::/32 maxlen: 32
2a0e:5907::/32 maxlen: 32
2a0e:ccc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:3e:ca:f4:2f:c7:29:2d:31:29:d1:05:99:f2:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 17 10:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f5d88c1007ffa0936b63d1cedf055174afd2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:f9:49:91:51:01:d9:fa:46:15:4e:d7:f4:
5d:38:83:32:9b:67:5b:a0:dd:e2:05:d9:a3:a7:e7:
e3:e6:7e:13:07:6f:23:75:f0:10:5f:cd:f0:25:a0:
c8:78:78:c7:05:0e:09:67:71:06:5a:03:e0:a4:00:
2b:fd:72:25:19:c8:62:49:e8:bc:6f:a6:4d:f3:62:
75:3d:f5:47:ce:b3:55:95:0d:ca:cb:42:7a:9d:1c:
b5:7c:bb:74:25:9b:ea:f6:c9:75:8a:c1:c2:fb:f6:
64:32:42:8c:76:82:75:d4:bc:a9:55:b3:ad:d7:ef:
cc:e7:57:d2:7c:fc:e3:45:47:59:64:61:d5:b1:43:
94:46:29:7d:06:7c:d9:33:0b:76:7a:d4:07:9a:50:
84:fa:bd:f2:fe:d8:76:6c:c8:20:4a:a5:d4:ba:10:
00:af:04:ca:1f:05:ac:6f:6f:7c:6d:42:da:ff:f1:
6c:7c:72:f0:09:38:2b:4d:57:13:97:80:4f:21:a4:
25:40:33:42:ab:9e:90:d6:e1:a8:32:48:44:fd:ab:
30:33:db:ae:93:56:9b:68:40:c2:8d:0a:90:4b:ba:
39:59:f9:33:c9:f6:77:de:ff:9a:de:9a:96:69:54:
b7:dc:b3:13:1e:bc:5c:57:4f:2f:7e:ce:44:02:38:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:D8:8C:10:07:FF:A0:93:6B:63:D1:CE:DF:05:51:74:AF:D2:E7
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5384::/32
2a0e:5386::/32
2a0e:5642::/32
2a0e:5907::/32
2a0e:ccc7::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ff:a7:b2:ed:2d:b1:97:a0:06:07:58:17:a2:a5:38:97:8a:
3b:f2:91:34:b3:f1:3e:1b:4d:71:ed:5a:94:60:1a:8d:91:ec:
80:9b:28:ae:c9:0f:17:02:8b:b5:b1:0a:95:43:d6:dc:67:7b:
22:19:87:c3:75:fc:7a:21:79:10:c6:49:42:03:75:7c:89:1a:
fb:10:83:c7:ee:98:87:21:e8:74:d8:f8:e4:d6:48:60:3a:d1:
0f:52:63:7b:2d:f6:35:41:4b:5e:8f:76:a0:bc:d8:e1:16:27:
73:d9:94:47:38:20:70:35:bd:d5:1e:59:ab:a0:ff:cf:3f:5d:
82:8a:3f:50:12:70:3e:fe:9b:4e:02:4c:3c:02:e2:bb:52:d9:
74:1d:cc:e8:49:33:60:27:f5:87:17:a5:5c:ce:5e:71:58:81:
24:7e:e6:be:f6:e2:eb:4b:22:f6:fe:fe:d5:88:f6:5e:e1:17:
85:07:9c:8a:06:36:28:8e:83:1c:b6:61:73:5d:6e:12:c9:5a:
d9:5f:d6:ce:6d:bf:cc:f7:d2:6d:32:ea:06:8d:ae:68:64:37:
84:a4:80:89:cc:c3:70:de:8d:7b:86:09:d4:f7:47:4d:61:64:
f8:81:78:8b:9a:1d:21:71:4d:38:96:4d:92:01:17:4f:6e:20:
3e:c6:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:59:09 2025 by rpki-client