Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/YiYsGJx6tfQVO081Vxo55GvUSDA.roa
File: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (raw, json)
Hash identifier: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=
Subject key identifier: 62:26:2C:18:9C:7A:B5:F4:15:3B:4F:35:57:1A:39:E4:6B:D4:48:30
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019427488DDA0D76D49908FFAFC2AB6C5D64
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/YiYsGJx6tfQVO081Vxo55GvUSDA.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.94.3.0/24 maxlen: 24
2a03:1e03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8d:da:0d:76:d4:99:08:ff:af:c2:ab:6c:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62262c189c7ab5f4153b4f35571a39e46bd44830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:55:36:1b:20:f1:f5:dc:00:7e:95:57:ac:
a6:82:e6:6f:48:60:a4:82:1d:c7:8b:f9:5c:9a:be:
c7:be:c0:3f:1f:a9:64:55:5a:fc:02:00:86:29:6d:
dc:07:38:36:36:54:70:2a:74:ca:e2:31:c9:94:13:
ba:6f:0f:55:6b:e2:55:9e:9b:de:99:06:b2:98:d9:
82:c9:d6:f9:49:a0:66:a7:96:d7:43:11:ac:0f:f4:
ab:60:83:ea:85:16:42:33:da:db:06:5a:f3:3f:7f:
99:cf:02:95:43:74:97:13:1c:99:2f:1c:d3:32:6a:
48:f2:f9:a6:ac:5e:36:7f:00:ff:ca:03:5e:e1:ca:
6b:b2:4a:aa:65:a8:d5:eb:59:33:7e:4d:12:96:2c:
1f:26:51:9f:20:f9:d4:41:c3:61:6c:57:21:bf:63:
5a:2e:0a:86:4a:20:e3:4c:f1:c7:87:e0:bd:6b:19:
23:21:05:46:b1:c8:60:f3:99:66:83:77:30:80:4b:
a6:2b:04:ac:23:5d:37:31:08:d5:6c:b7:bc:8e:ef:
26:cd:87:67:de:4c:85:7a:74:dd:5e:0b:9e:5c:e5:
96:31:02:81:bf:ed:1e:b3:52:d2:04:15:f9:46:27:
d2:60:32:06:31:21:81:d4:7d:f9:0e:ee:30:e1:b1:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:2C:18:9C:7A:B5:F4:15:3B:4F:35:57:1A:39:E4:6B:D4:48:30
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/YiYsGJx6tfQVO081Vxo55GvUSDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.3.0/24
IPv6:
2a03:1e03::/48
Signature Algorithm: sha256WithRSAEncryption
9b:30:4e:c5:4c:88:e7:5e:ad:5b:20:34:6c:1e:7e:08:61:b2:
48:ae:1c:37:0e:b8:6c:78:b3:f3:e2:c5:91:b6:c7:18:79:5e:
b5:9d:d9:8b:bd:9f:64:1a:6c:fb:04:20:31:5f:6b:3f:5f:a0:
af:c3:e4:ee:c9:34:f8:f3:a0:bc:c3:84:95:0f:09:44:b7:fa:
36:2f:eb:da:e4:65:94:5d:fb:eb:01:46:e1:7c:c7:5a:ce:45:
bb:2b:57:de:9d:02:a8:5f:c0:b5:99:d3:4e:7a:79:14:10:f1:
18:6c:6a:4e:59:f5:d0:70:6d:a3:53:2b:d5:32:37:4e:06:f8:
5c:ee:07:be:ef:9f:99:08:3f:0b:70:02:d6:6d:11:cb:c7:22:
89:23:91:d4:3b:d5:8a:18:ee:33:dc:78:cb:a7:36:ef:6c:56:
54:01:80:3e:3d:0a:26:48:87:57:e7:d5:a2:4a:be:0c:29:95:
b8:0a:d1:a8:01:81:83:4a:51:48:ed:9b:c5:53:6e:87:bc:91:
72:1e:56:ac:dc:b1:0c:cb:3a:72:e9:fa:48:9b:9f:5c:f9:0a:
f7:26:61:6e:7c:73:4f:91:e7:58:82:12:bf:d4:8a:08:c9:10:
0d:77:3f:dc:46:fc:64:f2:63:94:bf:79:23:51:a4:11:82:e3:
ba:0d:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:12 2025 by rpki-client