Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa
File: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (raw, json)
Hash identifier: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=
Subject key identifier: CB:3C:17:D0:F7:10:86:4C:E5:EE:4A:55:DA:D0:47:50:26:3E:65:4E
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4B88D398560210EE449181CD3706
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40999
IP address blocks: 83.125.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:88:d3:98:56:02:10:ee:44:91:81:cd:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb3c17d0f710864ce5ee4a55dad04750263e654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:18:03:04:da:9d:b2:95:2e:b8:45:85:ac:
b0:df:16:ca:e9:8d:5d:f4:ff:bb:1d:d0:51:bd:55:
9a:21:91:53:ae:07:41:a0:3f:6d:8a:de:14:2b:cc:
cf:9e:f2:e9:01:08:f3:0f:9a:df:e4:72:d1:07:40:
84:9f:2c:05:47:c9:b4:aa:57:3a:1f:e5:e5:f9:d5:
5c:50:18:da:04:6d:00:de:f6:39:6c:07:1e:bc:bf:
6c:c0:07:2e:83:da:ac:4a:ef:33:eb:6c:a0:93:77:
ce:20:55:fc:1c:3c:2c:12:58:d3:b9:3c:61:db:57:
b0:db:ee:ab:9d:62:24:db:f9:5c:71:15:c4:7a:9a:
3a:d4:e6:74:02:d5:45:17:f8:b9:75:22:d3:d6:18:
74:33:9b:47:75:ce:1c:ba:7e:7a:a6:a7:30:e6:4b:
e5:56:c3:a5:06:00:27:88:28:99:cf:ec:05:0d:b4:
8d:33:45:2e:fd:66:c0:b4:15:9b:1d:87:f8:73:68:
5e:60:ac:c5:22:53:8b:de:ed:8b:13:6c:ac:f6:65:
21:28:c1:aa:be:a2:1d:ad:6f:70:aa:ce:3c:9b:97:
ce:58:95:10:b5:f8:29:0c:bd:f2:68:d5:f5:dd:69:
9b:54:30:26:42:b3:9a:44:a1:f6:90:b3:65:71:2b:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:17:D0:F7:10:86:4C:E5:EE:4A:55:DA:D0:47:50:26:3E:65:4E
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.8.0/22
Signature Algorithm: sha256WithRSAEncryption
36:47:53:7c:6a:3b:b4:e7:7f:5f:e3:7f:fb:73:03:8b:15:93:
88:12:6c:07:be:c1:14:c6:fa:99:ca:10:6d:fd:26:6e:4f:61:
60:ca:b9:97:55:29:4c:ca:25:4e:d5:b1:d8:02:0e:2c:ff:a4:
cd:65:f3:53:af:b3:3f:c8:a6:0c:43:42:96:df:a8:56:26:6c:
cd:a7:1c:5b:92:49:e9:e9:7c:56:38:2c:4d:1c:ee:d2:1b:1e:
95:cc:e0:0a:40:5f:0a:1c:96:ab:fb:67:76:80:01:cf:af:21:
eb:95:e9:6c:95:64:6c:12:2b:6d:c3:12:c3:19:7f:a8:8a:0e:
31:02:3b:a1:e4:4e:a1:30:2a:7a:5a:61:3e:ca:2d:16:8f:ff:
bd:c5:5b:94:d0:49:5c:c6:39:1b:b1:4b:61:d9:39:b0:bf:eb:
47:0d:7f:64:f0:79:4f:5e:29:a4:2d:3a:5a:56:41:56:14:34:
ad:ed:c1:0b:bf:15:04:ac:18:73:70:7a:ce:08:2b:dd:3f:38:
aa:f2:84:c4:cf:84:68:e5:c7:04:db:6a:8d:28:64:c6:7d:f1:
e8:53:a4:ef:25:78:66:c0:7e:ce:76:37:6c:85:67:0a:fe:3d:
47:77:d9:87:1c:c7:c9:ad:58:b4:f1:8c:fc:15:90:40:f8:ae:
29:6a:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:03:35 2025 by rpki-client