Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/YHLRl_WXzdzzbEECoeCuzULL-4o.roa
File: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (raw, json)
Hash identifier: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=
Subject key identifier: 60:72:D1:97:F5:97:CD:DC:F3:6C:41:02:A1:E0:AE:CD:42:CB:FB:8A
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019424B39B575F1E40318C4655A9971DE3D6
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/YHLRl_WXzdzzbEECoeCuzULL-4o.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 146.66.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9b:57:5f:1e:40:31:8c:46:55:a9:97:1d:e3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6072d197f597cddcf36c4102a1e0aecd42cbfb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:3a:7c:43:1d:f1:d5:a0:f1:ab:1a:f2:bb:
70:8c:89:0c:75:3c:85:b2:88:9e:e6:a3:5d:96:71:
c7:2b:9e:5b:e1:86:7d:4e:11:c8:f7:5e:e5:7b:31:
eb:1e:a2:bc:25:a6:71:56:5c:4d:58:32:b6:b1:7d:
68:65:8f:3d:25:37:87:4f:d6:6c:33:ba:e4:39:44:
6c:ca:f1:9a:83:0d:36:8b:1b:5c:f2:a0:aa:2a:4c:
91:13:f4:7b:88:d2:be:40:82:28:61:5d:40:f1:46:
c4:87:a6:a6:63:22:45:2f:a4:bf:5a:a1:31:84:16:
0f:96:52:aa:f8:f6:34:cc:2a:7f:33:df:4e:d6:69:
d1:e1:2e:36:f4:ea:ed:e2:69:d6:bc:89:6d:2f:f9:
18:22:44:49:5f:17:f7:e2:e2:5c:92:11:15:01:4c:
80:5b:d2:00:e2:81:c0:de:10:6c:14:9f:c8:b9:56:
45:5d:3a:e4:d6:74:c1:13:84:c4:e8:11:8b:56:65:
16:3f:29:dd:6c:c7:95:9d:a8:9b:c7:81:41:37:be:
3a:6c:ef:ae:00:de:6c:c5:cd:57:bd:8c:7d:63:5d:
d8:6e:f9:c9:74:db:cd:4a:9b:86:4b:e7:ec:cb:53:
a5:34:39:ac:a3:10:63:66:fe:f2:a3:a2:ea:68:0d:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:D1:97:F5:97:CD:DC:F3:6C:41:02:A1:E0:AE:CD:42:CB:FB:8A
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/YHLRl_WXzdzzbEECoeCuzULL-4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.3.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e5:1e:0d:1b:db:da:e2:50:31:47:b4:3e:62:4e:91:8f:44:
cf:d8:3b:ac:c1:50:19:e5:42:62:74:fe:27:37:f4:ab:d1:ac:
7a:14:ea:86:34:ae:e8:43:ab:60:ae:ea:20:bf:97:a1:89:c7:
3f:81:44:e1:81:e4:6e:9a:b2:b7:08:07:68:9c:71:7b:25:3e:
71:34:9e:16:af:72:d5:02:c3:42:8e:cb:52:5a:33:8d:6c:f1:
d1:e2:2f:62:60:1a:d2:d0:2b:97:3d:cf:2d:07:ed:01:b9:1f:
31:49:e0:36:1c:0c:54:1b:fd:0a:d8:8b:c3:20:08:24:21:aa:
4a:75:50:6e:c9:d2:db:16:75:4d:03:04:80:b3:0d:1e:b8:f9:
11:6c:6a:ee:30:45:32:bd:31:c2:d9:38:16:5f:03:eb:d6:c2:
f7:5f:0c:93:e4:5a:d0:d1:83:e8:d3:e6:7b:fe:a5:03:49:bb:
ff:09:70:f8:e3:9a:53:22:c5:38:44:c0:22:7a:64:73:b5:10:
0b:be:5f:95:19:12:85:18:a7:e5:9b:ed:f4:68:b5:4f:78:bd:
58:28:5e:1e:df:3e:8a:7c:12:42:85:ec:81:2a:af:26:ff:1f:
f2:dc:b6:40:34:d1:66:98:c8:0c:2d:40:5c:55:67:77:48:15:
a9:f4:4c:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks5tXXx5AMYxGVamXHePWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi
Y2M0MmMwHhcNMjUwMTAyMDE0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDcyZDE5N2Y1OTdjZGRjZjM2YzQxMDJhMWUwYWVjZDQyY2JmYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0U6fEMd8dWg8asa8rtwjIkMdTyF
soie5qNdlnHHK55b4YZ9ThHI917lezHrHqK8JaZxVlxNWDK2sX1oZY89JTeHT9Zs
M7rkOURsyvGagw02ixtc8qCqKkyRE/R7iNK+QIIoYV1A8UbEh6amYyJFL6S/WqEx
hBYPllKq+PY0zCp/M99O1mnR4S429Ort4mnWvIltL/kYIkRJXxf34uJckhEVAUyA
W9IA4oHA3hBsFJ/IuVZFXTrk1nTBE4TE6BGLVmUWPyndbMeVnaibx4FBN746bO+u
AN5sxc1XvYx9Y13YbvnJdNvNSpuGS+fsy1OlNDmsoxBjZv7yo6LqaA0TcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBy0Zf1l83c82xBAqHgrs1Cy/uKMB8GA1UdIwQY
MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct
MjNiMjhmMzlhNjAyLzEvWUhMUmxfV1h6ZHp6YkVFQ29lQ3V6VUxMLTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy
LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkIDMA0G
CSqGSIb3DQEBCwUAA4IBAQAy5R4NG9va4lAxR7Q+Yk6Rj0TP2DuswVAZ5UJidP4n
N/Sr0ax6FOqGNK7oQ6tgruogv5ehicc/gUThgeRumrK3CAdonHF7JT5xNJ4Wr3LV
AsNCjstSWjONbPHR4i9iYBrS0CuXPc8tB+0BuR8xSeA2HAxUG/0K2IvDIAgkIapK
dVBuydLbFnVNAwSAsw0euPkRbGruMEUyvTHC2TgWXwPr1sL3XwyT5FrQ0YPo0+Z7
/qUDSbv/CXD445pTIsU4RMAiemRztRALvl+VGRKFGKflm+30aLVPeL1YKF4e3z6K
fBJCheyBKq8m/x/y3LZANNFmmMgMLUBcVWd3SBWp9ExH
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:38 2025 by rpki-client