Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Yl2M3tHD9BpxXAF-8RCTakseDqA.roa
File: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (raw, json)
Hash identifier: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=
Subject key identifier: 62:5D:8C:DE:D1:C3:F4:1A:71:5C:01:7E:F1:10:93:6A:4B:1E:0E:A0
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29C8095C4A08FC9354E2C14C2F823
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Yl2M3tHD9BpxXAF-8RCTakseDqA.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397234
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9c:80:95:c4:a0:8f:c9:35:4e:2c:14:c2:f8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=625d8cded1c3f41a715c017ef110936a4b1e0ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:c2:a6:04:4f:6e:d6:df:90:d8:ac:1d:ad:
ca:a7:95:90:87:62:1e:7f:5e:c6:c3:d1:68:69:08:
a5:46:6d:ed:57:7a:8c:97:ba:35:c0:cb:c7:84:b4:
35:b0:53:4a:44:ab:ae:ee:b1:b4:48:be:8b:e3:73:
51:d1:ed:b9:f9:30:b8:88:39:a7:67:d5:26:cc:7e:
4f:9d:fa:bb:4c:0a:22:cd:87:b5:2e:88:e0:a4:58:
b6:ab:a5:17:50:70:7f:70:0b:1e:51:ef:18:c8:5e:
4b:3b:75:f1:1a:d9:cd:5e:d5:7e:06:8f:05:ab:08:
a1:7e:71:1a:32:7e:7c:16:1d:07:8f:48:a3:55:70:
57:6f:42:a9:0d:5c:04:7b:08:44:87:c4:c0:32:0a:
d6:81:63:8b:d3:b4:ad:10:a5:03:f0:85:57:90:b2:
0d:a4:e7:d7:5d:30:df:ea:06:44:fa:2f:f2:05:bf:
dd:f0:f3:1c:84:44:01:f5:35:e7:d7:0a:49:fc:95:
f4:da:fb:6f:7b:10:aa:2c:1b:71:f0:76:7d:fa:91:
48:48:a7:d0:a5:f8:33:a5:c9:da:3e:71:c5:7b:1e:
d2:56:c4:9d:31:c1:62:ff:29:7c:5a:6f:f6:7f:1b:
76:c1:a3:3d:9f:fe:4b:05:ad:b7:5b:d0:b1:a5:0b:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:8C:DE:D1:C3:F4:1A:71:5C:01:7E:F1:10:93:6A:4B:1E:0E:A0
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Yl2M3tHD9BpxXAF-8RCTakseDqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
16:57:bc:84:1f:1d:73:69:34:c5:49:50:7d:41:b3:74:e9:8c:
69:f8:6e:c2:2e:4b:ff:f9:89:8d:42:8f:70:db:3c:52:b7:fa:
04:6a:a9:b8:fb:52:e6:be:ca:48:a5:d0:a5:ef:e5:9b:f9:64:
d2:99:70:66:2c:a6:45:2e:fd:b4:d3:e6:23:ec:7c:3d:92:dd:
aa:26:a9:65:de:2c:cb:ce:16:96:54:2f:42:e5:eb:1b:e9:0e:
c7:2b:4c:af:59:1e:f3:1b:7f:61:3b:7e:3a:e1:77:c9:e6:76:
33:2e:77:7e:f5:82:61:2b:54:9d:75:a2:ee:de:cb:78:93:c6:
8b:35:68:e5:90:01:d3:36:13:ae:f9:a5:a2:b0:cb:7d:09:1b:
6e:1a:2a:f4:73:7c:cb:2a:cb:ae:aa:b3:23:7a:8c:cf:fc:50:
a0:cf:a7:03:27:34:b8:d9:d3:2c:c5:c1:23:c8:9c:88:8e:e2:
c9:67:68:72:80:d3:da:16:6f:66:21:4a:1d:63:80:4e:ac:66:
84:95:bf:e5:8c:3a:a0:5e:67:81:15:30:e5:0f:01:04:4b:e7:
f7:67:bf:d4:f7:b1:35:fc:24:9c:cf:4a:47:6d:f7:87:71:0d:
b9:62:1a:9c:d2:d3:ec:9f:a3:21:e7:77:0f:f6:9c:d1:11:e7:
ba:65:26:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQkspyAlcSgj8k1TiwUwvgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjUwMTAyMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjVkOGNkZWQxYzNmNDFhNzE1YzAxN2VmMTEwOTM2YTRiMWUwZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ArCpgRPbtbfkNisHa3Kp5WQh2Ie
f17Gw9FoaQilRm3tV3qMl7o1wMvHhLQ1sFNKRKuu7rG0SL6L43NR0e25+TC4iDmn
Z9UmzH5Pnfq7TAoizYe1LojgpFi2q6UXUHB/cAseUe8YyF5LO3XxGtnNXtV+Bo8F
qwihfnEaMn58Fh0Hj0ijVXBXb0KpDVwEewhEh8TAMgrWgWOL07StEKUD8IVXkLIN
pOfXXTDf6gZE+i/yBb/d8PMchEQB9TXn1wpJ/JX02vtvexCqLBtx8HZ9+pFISKfQ
pfgzpcnaPnHFex7SVsSdMcFi/yl8Wm/2fxt2waM9n/5LBa23W9CxpQsVsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGJdjN7Rw/QacVwBfvEQk2pLHg6gMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvWWwyTTN0SEQ5QnB4WEFGLThSQ1Rha3NlRHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAWV7yEHx1zaTTFSVB9
QbN06Yxp+G7CLkv/+YmNQo9w2zxSt/oEaqm4+1LmvspIpdCl7+Wb+WTSmXBmLKZF
Lv200+Yj7Hw9kt2qJqll3izLzhaWVC9C5esb6Q7HK0yvWR7zG39hO3464XfJ5nYz
Lnd+9YJhK1SddaLu3st4k8aLNWjlkAHTNhOu+aWisMt9CRtuGir0c3zLKsuuqrMj
eozP/FCgz6cDJzS42dMsxcEjyJyIjuLJZ2hygNPaFm9mIUodY4BOrGaElb/ljDqg
XmeBFTDlDwEES+f3Z7/U97E1/CScz0pHbfeHcQ25Yhqc0tPsn6Mh53cP9pzREee6
ZSYf
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:12 2025 by rpki-client