Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y8Deq_cv-q9TepGJ7XzDgQifL_Q.roa
File: Y8Deq_cv-q9TepGJ7XzDgQifL_Q.roa (raw, json)
Hash identifier: X9HI4L1eZqJrMj+A4iWvhT1g5FqU09FtNNGHjJw70Qo=
Subject key identifier: 63:C0:DE:AB:F7:2F:FA:AF:53:7A:91:89:ED:7C:C3:81:08:9F:2F:F4
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC63FE7C2E81C4A69633A21242A9A
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y8Deq_cv-q9TepGJ7XzDgQifL_Q.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60021
IP address blocks: 45.9.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c6:3f:e7:c2:e8:1c:4a:69:63:3a:21:24:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c0deabf72ffaaf537a9189ed7cc381089f2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:17:10:4d:e7:73:0e:60:b6:61:e5:a0:98:
24:88:c7:ef:c5:fd:12:76:3d:68:bb:cb:6c:58:e0:
af:f7:8e:00:00:ce:99:78:d9:b0:71:cd:12:60:6f:
4c:4f:5e:11:5a:45:32:44:aa:21:3f:20:03:89:7b:
2f:c9:59:4e:6a:27:b3:eb:4b:6c:75:9a:5c:f5:6c:
2e:63:c3:5d:b6:f4:37:92:92:aa:67:11:d7:a9:46:
14:4e:b4:b0:56:08:63:cb:54:e3:b9:de:c1:05:a8:
22:17:b7:ad:a3:88:b8:22:cd:14:f8:14:4a:8b:68:
b6:71:1f:83:5c:f1:47:0a:12:6c:47:69:e4:92:d4:
d0:e0:ac:94:f9:ff:54:bc:89:21:a9:2c:52:5b:93:
30:93:18:ad:15:e9:42:4a:46:ea:5d:81:d8:2e:bb:
3a:e1:18:7e:a3:86:6b:b6:63:88:b6:4b:bd:3f:ab:
45:23:c5:f5:5d:1d:8d:e7:1e:a6:69:93:6a:93:2b:
6a:3c:e5:c7:b2:7e:74:20:26:8e:e8:6e:fa:65:d3:
e9:b7:32:76:bc:df:f9:6c:6f:76:b3:97:59:e6:84:
56:72:82:d2:4b:a1:4e:4d:86:be:ba:d5:56:15:f2:
5e:d3:cc:24:cb:29:76:c5:18:ce:14:61:ec:19:9d:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:DE:AB:F7:2F:FA:AF:53:7A:91:89:ED:7C:C3:81:08:9F:2F:F4
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y8Deq_cv-q9TepGJ7XzDgQifL_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.8.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:eb:5a:a0:fd:81:a5:2b:69:c3:c4:b6:db:c5:cd:e3:75:f5:
d6:94:12:e2:e8:6e:cd:34:15:b1:0d:53:b6:74:43:a0:41:1a:
e2:d0:38:fe:b9:75:83:80:6f:1f:24:d5:37:b8:eb:97:f0:cc:
5a:f1:01:15:0b:14:f5:96:88:00:ad:f8:47:1f:88:59:97:17:
6d:07:6b:4d:e2:56:44:cc:ec:8d:22:03:b0:13:27:4a:34:df:
43:95:7f:a3:de:fe:c5:0b:f9:30:0d:7c:a6:d7:70:3c:59:6f:
7c:dd:5b:25:fd:b4:ab:f2:ab:44:7c:7b:5b:0e:39:90:3e:48:
8a:5c:07:94:0a:aa:2c:a1:ff:89:75:6a:83:9c:f0:d8:b3:af:
56:0e:06:9d:e3:5d:2f:bd:cc:0c:26:01:74:8b:37:e2:71:5f:
58:95:94:d1:91:52:9b:35:6a:d7:86:ba:1a:22:10:7a:d5:69:
b1:32:5c:73:e7:56:1a:ad:3c:d7:39:36:7e:14:c9:fc:94:2f:
c1:2a:68:17:9e:4f:de:af:f5:38:27:97:e4:ab:a5:98:0b:8b:
fd:80:0b:25:8d:5c:0b:ab:07:6d:d0:a4:0d:76:0b:f4:d0:e6:
a9:54:b3:bd:4e:9a:e6:9e:0f:90:9b:11:05:99:65:df:e3:d3:
d8:a6:49:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljsY/58LoHEppYzohJCqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2MwZGVhYmY3MmZmYWFmNTM3YTkxODllZDdjYzM4MTA4OWYyZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVwXEE3ncw5gtmHloJgkiMfvxf0S
dj1ou8tsWOCv944AAM6ZeNmwcc0SYG9MT14RWkUyRKohPyADiXsvyVlOaiez60ts
dZpc9WwuY8NdtvQ3kpKqZxHXqUYUTrSwVghjy1Tjud7BBagiF7eto4i4Is0U+BRK
i2i2cR+DXPFHChJsR2nkktTQ4KyU+f9UvIkhqSxSW5MwkxitFelCSkbqXYHYLrs6
4Rh+o4ZrtmOItku9P6tFI8X1XR2N5x6maZNqkytqPOXHsn50ICaO6G76ZdPptzJ2
vN/5bG92s5dZ5oRWcoLSS6FOTYa+utVWFfJe08wkyyl2xRjOFGHsGZ3pEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPA3qv3L/qvU3qRie18w4EIny/0MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvWThEZXFfY3YtcTlUZXBHSjdYekRnUWlmTF9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQkIMA0G
CSqGSIb3DQEBCwUAA4IBAQCn61qg/YGlK2nDxLbbxc3jdfXWlBLi6G7NNBWxDVO2
dEOgQRri0Dj+uXWDgG8fJNU3uOuX8Mxa8QEVCxT1logArfhHH4hZlxdtB2tN4lZE
zOyNIgOwEydKNN9DlX+j3v7FC/kwDXym13A8WW983Vsl/bSr8qtEfHtbDjmQPkiK
XAeUCqosof+JdWqDnPDYs69WDgad410vvcwMJgF0izficV9YlZTRkVKbNWrXhroa
IhB61WmxMlxz51YarTzXOTZ+FMn8lC/BKmgXnk/er/U4J5fkq6WYC4v9gAsljVwL
qwdt0KQNdgv00OapVLO9Tprmng+QmxEFmWXf49PYpkna
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:47 2025 by rpki-client