Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/YlBw5zZMyGmVSKcyUcis3LeoBu4.roa
File: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (raw, json)
Hash identifier: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=
Subject key identifier: 62:50:70:E7:36:4C:C8:69:95:48:A7:32:51:C8:AC:DC:B7:A8:06:EE
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019420D645CA19E301F4224F696C9E39F95C
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/YlBw5zZMyGmVSKcyUcis3LeoBu4.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200375
IP address blocks: 193.178.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:45:ca:19:e3:01:f4:22:4f:69:6c:9e:39:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=625070e7364cc8699548a73251c8acdcb7a806ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:35:2d:c5:b6:3d:39:10:f9:b9:af:82:1b:
58:7e:d9:26:01:06:d3:88:30:a2:fc:b2:5b:bd:04:
1e:7b:7d:97:2a:e7:75:ac:4b:0f:5e:56:54:5c:9d:
55:45:3e:a3:e2:25:2d:c0:df:b8:14:33:14:a0:50:
27:70:b1:a8:f8:3c:4b:73:55:55:96:dd:db:ab:7e:
d4:69:1f:68:c0:ac:a6:8e:03:5e:6f:2b:90:1d:ce:
30:47:aa:f3:04:fc:2d:2c:a7:72:6f:8b:1a:e2:79:
e4:dd:b4:10:22:7f:be:7c:74:65:16:c0:44:2d:a5:
f6:ff:d9:18:d9:f6:75:0b:1e:40:0a:a1:60:89:98:
14:7e:35:2f:44:0b:bb:e9:d5:a8:aa:31:3c:93:b6:
be:f0:7f:e8:46:a4:8c:8a:88:a5:44:aa:38:a2:0b:
42:28:39:92:12:3f:13:86:19:53:db:bc:c2:48:9f:
ea:18:68:04:fb:11:42:d7:ae:08:4e:99:f2:da:9e:
89:fd:2b:29:53:e4:fc:4d:8b:63:45:64:44:00:b1:
f8:ac:71:cc:ee:e5:cb:25:1b:b9:d0:8e:59:39:e4:
ff:c0:e8:c7:7a:87:49:ae:08:80:70:d9:c8:d1:97:
f4:68:f2:e0:3d:05:1c:7e:05:5b:b4:83:d1:94:a4:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:70:E7:36:4C:C8:69:95:48:A7:32:51:C8:AC:DC:B7:A8:06:EE
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/YlBw5zZMyGmVSKcyUcis3LeoBu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.124.0/22
Signature Algorithm: sha256WithRSAEncryption
44:43:99:89:d1:af:de:2c:f0:5f:ae:e8:ec:bc:27:53:67:83:
1b:c8:53:53:c7:24:2d:95:78:b0:be:94:a2:53:b2:7b:be:b4:
16:35:ac:b3:85:5c:5d:f0:70:2b:7c:38:c8:e6:0a:06:bc:b7:
c8:f7:ae:d2:45:18:f3:42:56:84:c9:38:cd:b3:34:9d:c1:2b:
63:b0:7a:ad:89:7d:79:06:0c:24:52:02:be:a4:50:a3:aa:42:
dd:f3:84:6f:1e:38:b1:c7:51:dd:44:8e:0d:64:cb:76:c6:c0:
91:e1:1c:c0:b4:56:7e:61:cf:f5:b1:1d:05:6c:9c:20:dc:55:
53:ae:88:fb:05:f1:a3:48:e9:29:bb:90:67:29:c3:ae:93:e6:
2f:c6:75:1e:e6:37:22:82:83:61:3a:1c:f1:5b:c9:42:52:00:
44:6c:92:82:2b:e1:60:16:40:fa:2a:de:0e:4f:63:47:70:e3:
f5:02:60:53:7a:b9:e0:9d:0d:a9:8b:69:ef:af:97:d6:c6:f0:
ff:d2:1e:80:63:21:ea:0a:04:18:c9:bc:97:4b:c2:60:bd:66:
91:86:5e:b2:36:04:84:b4:2b:64:24:57:e2:40:18:d6:dc:99:
3d:01:80:39:17:3b:e9:2b:f3:ae:b9:7b:ec:a2:4c:87:f2:2c:
24:9b:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:25:36 2025 by rpki-client