Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/YAbDv-nvwGeHChb6zA0HOhLQzuU.roa
File: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (raw, json)
Hash identifier: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=
Subject key identifier: 60:06:C3:BF:E9:EF:C0:67:87:0A:16:FA:CC:0D:07:3A:12:D0:CE:E5
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019423695F2A94702570EC029FA983DA4B2A
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/YAbDv-nvwGeHChb6zA0HOhLQzuU.roa
Signing time: Wed 01 Jan 2025 19:48:15 +0000
ROA not before: Wed 01 Jan 2025 19:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212148
IP address blocks: 91.212.156.0/24 maxlen: 24
2a07:b280::/29 maxlen: 29
2a07:b280:100::/40 maxlen: 40
2a07:b280:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:5f:2a:94:70:25:70:ec:02:9f:a9:83:da:4b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jan 1 19:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6006c3bfe9efc067870a16facc0d073a12d0cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:fa:b4:53:6e:b9:03:29:53:73:37:2c:ae:
99:43:c0:63:39:dd:cb:43:73:d8:9c:2e:ce:a4:6e:
28:ac:38:56:2f:e6:ed:e1:dd:74:37:63:47:64:62:
c8:59:f0:a5:3e:17:ea:58:a3:02:ad:c2:2f:6d:1b:
da:87:04:db:3d:c1:c1:31:30:5b:47:30:2c:2c:c1:
27:cf:a8:58:9d:df:98:d8:06:c2:5a:54:86:39:07:
40:bf:09:67:32:dc:fc:55:6f:7e:66:6c:3a:dc:a2:
37:a1:57:d7:de:41:75:90:76:fe:fd:aa:99:1f:48:
be:5d:67:26:59:4a:12:f6:77:11:d5:d0:ff:f7:49:
5b:1e:64:15:3b:73:b3:33:27:1f:ce:06:ad:70:cc:
c9:37:25:83:ee:a7:82:5f:9f:59:85:b2:2b:e0:20:
0b:ce:52:d9:93:59:11:4f:6b:e6:27:1a:88:38:63:
f4:14:3e:22:12:78:a3:27:ef:17:0f:48:b6:e9:cd:
7c:7b:9c:37:99:c3:d6:51:9f:7e:fd:3e:20:22:cd:
90:34:89:e3:76:2b:b6:51:4b:46:15:01:a9:9a:96:
2d:f3:57:b5:d3:5d:b3:de:ad:11:f7:11:10:9d:cb:
3b:d8:52:9e:63:1e:e5:9a:4e:f1:c9:ca:e8:ed:1b:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:C3:BF:E9:EF:C0:67:87:0A:16:FA:CC:0D:07:3A:12:D0:CE:E5
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/YAbDv-nvwGeHChb6zA0HOhLQzuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.156.0/24
IPv6:
2a07:b280::/29
Signature Algorithm: sha256WithRSAEncryption
ad:46:9b:4a:3d:94:fe:de:fd:fc:92:a5:72:0e:df:34:1b:1e:
89:53:a9:96:bb:62:dd:fe:df:1c:9b:2e:31:06:de:fb:4a:de:
4a:db:fa:0e:a8:f4:8f:4e:8b:6b:90:47:48:4e:57:1a:1b:20:
72:b3:81:f5:57:07:71:3c:52:c6:b8:e7:8a:63:4a:07:da:d7:
62:be:7a:e6:89:0d:2a:ec:1f:4d:4d:f3:91:4e:30:dc:1c:64:
cb:9a:d7:fa:dc:3c:52:e8:02:12:e2:0f:53:b0:c0:bb:ca:54:
03:5e:7b:5d:1e:fe:20:4f:c7:92:9e:95:cc:fd:02:dd:8c:9b:
4c:5d:7a:03:9f:d6:a1:4d:77:7f:97:78:d6:d0:79:ac:f3:33:
1e:b1:ea:65:dc:64:a4:7c:6b:a6:88:78:44:66:d6:8b:70:79:
01:6d:d4:48:ed:1d:84:e5:0e:ac:bb:b7:38:c6:d0:98:0a:65:
30:9a:a8:1a:cb:e4:4f:8e:78:18:ae:e1:cd:b3:2a:39:2e:60:
c2:34:63:ce:91:37:d9:d1:0c:6b:4a:c1:a9:2c:6c:fd:28:9c:
63:63:cc:1e:99:6a:41:4d:23:74:bc:a4:7e:fc:e6:51:36:87:
ee:9a:7d:c6:f8:dc:0b:8a:36:c7:f9:f1:20:8b:74:4e:09:0d:
75:e4:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:51 2025 by rpki-client