Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/YFzAJtaEN2OUk02732wPr2MSjTc.roa
File: YFzAJtaEN2OUk02732wPr2MSjTc.roa (raw, json)
Hash identifier: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=
Subject key identifier: 60:5C:C0:26:D6:84:37:63:94:93:4D:BB:DF:6C:0F:AF:63:12:8D:37
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01967A7FAF7882F480B42D742FD6179BAB5B
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/YFzAJtaEN2OUk02732wPr2MSjTc.roa
Signing time: Mon 28 Apr 2025 03:45:10 +0000
ROA not before: Mon 28 Apr 2025 03:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136897
IP address blocks: 2a0f:9a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:7f:af:78:82:f4:80:b4:2d:74:2f:d6:17:9b:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Apr 28 03:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605cc026d684376394934dbbdf6c0faf63128d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:89:ed:1a:3f:b7:c0:66:cb:58:af:99:f7:
8f:4d:fc:fd:2d:34:93:13:e8:64:b7:b8:76:47:93:
76:96:19:90:2a:1a:92:8d:ed:70:a8:3c:9f:b2:fe:
98:55:c4:91:8b:8a:dc:dd:d4:f5:d9:c8:0c:45:1d:
65:16:ca:6e:52:56:df:e9:70:b8:3e:6a:34:8d:1a:
3e:6c:f6:38:63:6b:3a:55:ef:e7:e7:58:f1:3d:5c:
07:1e:44:25:64:c3:c6:1e:80:43:f4:89:81:50:29:
4d:4b:31:b9:b0:a5:a0:84:4e:9b:b2:12:c8:ca:b1:
b0:af:1b:9b:7a:ee:50:71:20:ac:dc:4b:86:1a:3d:
7a:e5:cb:c3:f0:81:eb:2d:e2:4e:cf:7b:f8:72:4f:
7d:10:6d:3d:19:a0:3d:32:a5:71:8e:c0:84:1e:b6:
bb:98:6a:32:72:2b:8f:cd:26:ad:e7:61:6d:8c:dd:
ad:30:d5:91:ee:4d:ba:64:9e:a2:9c:cb:7b:02:f0:
e8:5e:e2:22:92:97:2f:63:dd:3d:5d:20:5d:08:30:
79:29:3e:4d:eb:a7:ba:11:88:3d:b3:09:f2:a7:e2:
11:d0:ca:d0:ac:56:49:f0:79:d9:7a:1a:e3:f4:d2:
0e:a6:b0:68:c5:78:fa:2d:e2:20:3c:85:bd:4c:c6:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:C0:26:D6:84:37:63:94:93:4D:BB:DF:6C:0F:AF:63:12:8D:37
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/YFzAJtaEN2OUk02732wPr2MSjTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9a00::/48
Signature Algorithm: sha256WithRSAEncryption
6c:73:86:ff:fc:b9:6b:ba:80:be:76:fe:91:da:16:77:5a:2e:
bc:32:f5:7d:04:6f:a9:04:9f:6c:4a:1a:08:74:b1:ff:05:c8:
db:02:8d:4f:b3:53:5b:9c:9f:79:89:b6:fa:04:db:c1:75:bd:
21:d6:b8:48:d0:e8:46:81:42:c9:21:4e:bc:41:f6:7d:48:f9:
d7:b6:66:1b:dd:1a:10:ad:2c:f4:f2:c1:96:c9:fa:89:af:5e:
7d:ac:77:30:c5:33:8d:c0:8c:ab:3c:e3:a6:b9:22:64:26:91:
34:9b:ba:af:51:18:ac:2d:d3:cb:1b:e6:0f:a5:2c:a1:6f:91:
f2:44:84:09:3f:bd:e1:09:ef:18:75:6f:7a:7b:7d:02:14:fd:
5e:0a:ff:4b:78:e0:d5:c0:fc:36:97:da:73:2b:7b:a0:93:82:
c0:83:7c:02:f8:24:aa:39:26:4f:bc:b3:a9:24:dc:48:15:26:
c1:e7:db:07:b8:99:9e:72:95:8a:f1:ca:fb:9f:79:54:69:ea:
26:48:3c:e8:c0:2d:cb:96:8b:48:fc:df:56:e2:f3:88:d2:26:
17:98:40:97:1a:c7:9e:01:7f:d8:1e:62:53:d5:ca:5d:b8:e2:
ac:20:cb:fe:f1:1c:12:ba:d5:0c:c8:dc:86:0c:17:f7:56:6a:
65:6e:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:53:23 2025 by rpki-client