Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YVR83ClCgerLs1_dxZk4oCYP_nI.roa
File: YVR83ClCgerLs1_dxZk4oCYP_nI.roa (raw, json)
Hash identifier: uL12X+nNtxi12xl68A9QUpSDfuO5CDSeRmlfN0bGVmY=
Subject key identifier: 61:54:7C:DC:29:42:81:EA:CB:B3:5F:DD:C5:99:38:A0:26:0F:FE:72
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428280E8A22259DFAFDBFC337626BACD9
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YVR83ClCgerLs1_dxZk4oCYP_nI.roa
Signing time: Thu 02 Jan 2025 17:55:01 +0000
ROA not before: Thu 02 Jan 2025 17:55:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 82.103.105.0/24 maxlen: 24
195.34.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:0e:8a:22:25:9d:fa:fd:bf:c3:37:62:6b:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61547cdc294281eacbb35fddc59938a0260ffe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:b2:02:b1:a5:ec:cb:39:c6:cc:b8:f4:8c:
86:8f:0d:d6:c5:c2:c7:7c:52:24:7a:b9:35:47:cf:
c8:c5:16:62:e0:3c:1f:f9:f2:9d:f8:1b:33:43:f3:
b7:f9:67:5f:73:41:a1:67:ec:65:f9:6c:9e:57:b8:
5e:5f:17:66:13:6a:4b:98:f0:ae:fe:40:ba:bc:83:
84:bd:1a:5b:07:1a:aa:f1:42:06:03:ec:34:2c:ec:
5d:8d:0b:da:00:44:6a:d0:64:30:97:db:fc:39:ed:
c0:88:6e:63:4c:6a:67:82:32:3d:0c:d1:7f:6f:10:
c8:2e:74:4d:ad:43:d5:ca:dd:bb:c0:56:59:76:96:
b4:cb:a8:a3:3c:16:44:23:67:0f:25:1f:f8:1b:aa:
7e:d4:dd:5e:ba:66:15:b0:b5:e2:6f:0a:d5:96:aa:
1b:7b:12:a5:c9:fc:d5:c9:91:0b:aa:78:78:aa:b6:
24:f8:72:43:f3:af:c5:2c:33:ff:3f:48:53:d0:34:
a4:22:59:53:14:ac:8e:ce:b3:41:bc:39:67:8d:98:
51:c1:10:38:fe:eb:79:17:19:8f:b1:6d:94:39:d6:
1f:ee:98:14:33:96:cf:3a:86:c2:20:f5:03:94:80:
ce:89:01:ba:21:83:19:59:06:1c:d5:5e:0b:21:04:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:7C:DC:29:42:81:EA:CB:B3:5F:DD:C5:99:38:A0:26:0F:FE:72
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YVR83ClCgerLs1_dxZk4oCYP_nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.105.0/24
195.34.109.0/24
Signature Algorithm: sha256WithRSAEncryption
84:06:75:96:6a:cb:8f:0a:3b:6e:a3:58:86:1d:07:59:4b:b0:
f3:f0:aa:2c:bc:2a:28:8d:15:31:83:fb:30:74:1b:c5:06:d8:
4b:bd:1a:32:d6:42:93:2d:60:93:da:9b:33:96:ba:c9:c8:92:
3e:d3:d8:92:55:1b:ee:c2:11:0b:a4:03:6f:68:9d:92:73:13:
71:60:e8:9f:e0:8c:4f:9f:18:8a:99:b7:f1:dd:1f:84:ef:eb:
3c:dc:e6:4e:95:6d:2e:ed:87:8d:21:33:e4:05:8f:e4:1e:20:
7a:d6:41:22:f0:92:fb:6b:1e:7e:78:40:5a:6b:63:28:90:3e:
4b:56:ff:73:de:d7:23:54:94:9a:73:3e:d5:f6:47:73:18:5a:
50:0c:24:0c:c9:ae:83:88:04:91:17:cf:0f:17:0a:c4:0d:bb:
d4:d6:10:00:9a:6d:0e:de:75:3a:03:9b:0e:1d:f8:31:59:5e:
c2:1c:d9:1a:88:f4:c4:b7:2d:13:ef:65:5c:f3:81:8f:bb:ba:
3c:19:fb:a7:97:f2:37:95:05:38:a6:37:17:33:55:c3:90:0d:
e6:11:9e:70:b3:a9:b3:e5:29:e4:95:c7:af:df:e9:01:4a:5f:
00:e1:27:6c:18:72:d0:5d:56:48:7a:f9:f3:86:ff:43:1c:13:
5a:fe:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:42:40 2025 by rpki-client