Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yjHXpxae4GvC2hVgF9lA84wEs5M.roa
File: yjHXpxae4GvC2hVgF9lA84wEs5M.roa (raw, json)
Hash identifier: 4Bi95QC518DbFT+lc7i5bmvKADegBbbEtWKzYAy7Xo0=
Subject key identifier: CA:31:D7:A7:16:9E:E0:6B:C2:DA:15:60:17:D9:40:F3:8C:04:B3:93
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019423D6FBFD3BC04A39E0AC8ED8F3D04342
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yjHXpxae4GvC2hVgF9lA84wEs5M.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 45.114.208.0/22 maxlen: 24
103.104.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fb:fd:3b:c0:4a:39:e0:ac:8e:d8:f3:d0:43:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca31d7a7169ee06bc2da156017d940f38c04b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:a5:2b:43:a3:fb:16:4d:21:03:8f:2e:5b:
d4:38:6a:2e:14:3d:36:b2:fb:da:09:17:92:72:8b:
48:00:11:30:4c:1b:01:71:a9:c2:d2:1f:1b:91:af:
b6:51:12:c4:44:89:e8:04:7a:f3:8b:cf:45:6f:90:
20:24:39:47:09:e8:c4:d0:8f:b8:c5:95:c8:d0:61:
40:30:75:34:a2:71:3d:3d:82:85:92:ac:a0:67:4a:
79:3d:d0:1e:5e:6a:63:8c:96:d7:1c:52:51:5a:2e:
be:f3:37:d7:c4:b7:92:52:8f:55:74:7a:c6:3f:d8:
9c:89:87:b0:de:a9:0b:e4:3b:94:bc:38:ae:2f:93:
e6:88:aa:70:9f:bf:db:ad:37:db:f8:ab:b9:10:4a:
65:54:69:e0:04:cb:53:c1:be:fd:4f:8d:a2:eb:6f:
e5:d5:19:c2:83:55:a0:08:4f:f1:05:b8:d7:87:df:
b7:4f:9c:db:6e:7d:56:6d:89:d3:81:e2:39:0a:69:
e3:d3:dd:5c:36:36:a3:87:bc:15:40:a8:77:0d:1d:
8a:93:c3:8c:68:b6:cf:e9:73:55:0b:a8:14:c1:cd:
9c:f6:6e:dc:88:e4:fe:7e:4d:32:f8:2f:1a:6b:7c:
54:bf:e6:9e:62:c4:de:02:7f:ad:29:93:33:0c:e1:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:D7:A7:16:9E:E0:6B:C2:DA:15:60:17:D9:40:F3:8C:04:B3:93
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/yjHXpxae4GvC2hVgF9lA84wEs5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.208.0/22
103.104.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:89:3f:0c:58:47:fb:a8:39:6e:23:f0:de:6f:db:39:b1:8b:
e7:96:e5:07:0f:6d:f8:c6:e0:19:ad:e6:84:ea:d8:c1:4a:b7:
99:87:08:16:05:49:47:d6:3a:5d:04:f6:5b:95:0b:d7:f3:69:
42:e6:11:48:fc:77:78:9e:85:5c:4d:c5:34:43:63:d1:cc:80:
ac:5e:21:82:6a:a5:16:69:f0:3d:48:8f:a3:3e:03:a4:f0:5e:
32:38:62:82:e2:a2:f5:16:18:36:bb:c5:b8:97:77:8d:41:39:
7f:0f:d8:e1:a0:04:5b:f0:ef:d1:b0:17:9a:25:3c:1d:d8:fa:
cc:fc:05:b9:ad:52:f5:54:0c:4d:45:f9:94:3a:0e:1b:60:ad:
84:15:c3:26:35:7d:8d:2e:37:c9:56:f1:0c:49:a3:6c:24:06:
b0:7a:49:ef:2b:03:fe:a4:f9:b7:4b:88:a9:5b:9a:f5:bc:78:
7d:e9:09:2f:1f:42:fa:2a:fa:1e:62:60:32:a2:a2:b6:64:8b:
a4:4c:b0:d8:75:ca:44:c7:18:58:0a:2b:49:cd:b1:01:3f:5f:
2c:48:5f:03:01:ad:1b:a0:71:15:99:2e:75:31:74:c6:52:1b:
88:a3:27:07:e5:bb:f7:3d:9c:29:36:e9:ab:98:02:a4:e1:25:
9f:80:b8:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1vv9O8BKOeCsjtjz0ENCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3
MGIzNTUwHhcNMjUwMTAxMjE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTMxZDdhNzE2OWVlMDZiYzJkYTE1NjAxN2Q5NDBmMzhjMDRiMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t2lK0Oj+xZNIQOPLlvUOGouFD02
svvaCReScotIABEwTBsBcanC0h8bka+2URLERInoBHrzi89Fb5AgJDlHCejE0I+4
xZXI0GFAMHU0onE9PYKFkqygZ0p5PdAeXmpjjJbXHFJRWi6+8zfXxLeSUo9VdHrG
P9iciYew3qkL5DuUvDiuL5PmiKpwn7/brTfb+Ku5EEplVGngBMtTwb79T42i62/l
1RnCg1WgCE/xBbjXh9+3T5zbbn1WbYnTgeI5Cmnj091cNjajh7wVQKh3DR2Kk8OM
aLbP6XNVC6gUwc2c9m7ciOT+fk0y+C8aa3xUv+aeYsTeAn+tKZMzDOGDawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMox16cWnuBrwtoVYBfZQPOMBLOTMB8GA1UdIwQY
MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt
ZTE1NDM3MzgwMDk5LzEveWpIWHB4YWU0R3ZDMmhWZ0Y5bEE4NHdFczVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5
LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXLQAwQC
Z2gUMA0GCSqGSIb3DQEBCwUAA4IBAQA8iT8MWEf7qDluI/Deb9s5sYvnluUHD234
xuAZreaE6tjBSreZhwgWBUlH1jpdBPZblQvX82lC5hFI/Hd4noVcTcU0Q2PRzICs
XiGCaqUWafA9SI+jPgOk8F4yOGKC4qL1Fhg2u8W4l3eNQTl/D9jhoARb8O/RsBea
JTwd2PrM/AW5rVL1VAxNRfmUOg4bYK2EFcMmNX2NLjfJVvEMSaNsJAaweknvKwP+
pPm3S4ipW5r1vHh96QkvH0L6KvoeYmAyoqK2ZIukTLDYdcpExxhYCitJzbEBP18s
SF8DAa0boHEVmS51MXTGUhuIoycH5bv3PZwpNumrmAKk4SWfgLjM
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:53 2025 by rpki-client