Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa
File: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (raw, json)
Hash identifier: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=
Subject key identifier: 62:FE:55:6F:55:18:5F:15:CB:A5:24:05:2F:05:0D:BE:80:4B:D6:E9
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 0194228DE1422BFDC079EAAEB37A9E9FEBB9
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 91.212.26.0/24 maxlen: 24
185.177.44.0/24 maxlen: 24
2a0a:2f80::/32 maxlen: 32
2a0a:2f81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:42:2b:fd:c0:79:ea:ae:b3:7a:9e:9f:eb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62fe556f55185f15cba524052f050dbe804bd6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:ea:b0:b4:ea:25:c6:b0:e5:98:98:c9:4f:
6a:a6:bb:23:7b:1c:4a:61:72:b2:43:08:44:7c:3f:
33:29:58:7b:07:8d:63:ff:50:e7:6b:71:f4:ca:23:
90:20:81:e8:d9:9e:74:63:6e:3b:4c:a7:6b:87:92:
e7:0f:10:01:6a:ec:60:2d:5a:85:9a:ac:04:63:a4:
0b:ac:03:80:7a:b6:74:44:ef:79:99:44:bd:49:13:
d9:82:43:69:f2:2c:01:8f:39:69:ee:97:04:06:1c:
34:83:f5:f9:d4:c3:be:05:87:50:b4:69:91:05:da:
35:13:bb:37:1c:3b:19:b0:0e:aa:11:03:c1:18:a6:
48:b5:31:74:18:46:2d:8d:3e:1b:ed:bb:76:1b:c9:
96:0b:79:f6:17:ab:fc:1b:43:bd:05:a9:8d:c5:60:
9d:f1:4b:84:34:fb:6b:bc:55:06:89:c9:e5:aa:20:
e0:64:00:d4:bc:01:67:8b:e1:e2:d8:41:5e:ff:d8:
fd:31:97:36:0c:63:8e:df:8e:c9:96:09:68:cf:7f:
92:f8:5d:ef:55:ee:ed:2c:4d:9d:6b:ad:17:b8:44:
53:17:a6:a0:76:08:ef:8e:78:48:95:71:56:0b:d0:
58:ef:40:7d:bd:39:3f:e0:10:a5:12:2b:65:2e:47:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:55:6F:55:18:5F:15:CB:A5:24:05:2F:05:0D:BE:80:4B:D6:E9
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.26.0/24
185.177.44.0/24
IPv6:
2a0a:2f80::/31
Signature Algorithm: sha256WithRSAEncryption
3c:b6:41:ec:13:f3:78:92:c6:fb:ab:91:a7:2c:a3:f2:0d:a4:
07:73:97:5e:96:cc:1b:13:d4:e3:b7:5b:9a:88:75:ba:b2:07:
b5:af:b8:d6:b8:d3:cf:cb:3f:67:1f:fc:9c:ba:0b:b2:e6:f5:
11:44:41:05:ae:b2:b4:c0:e9:37:1b:07:41:d7:24:c4:62:c7:
5d:6c:ce:67:b4:f3:f8:fa:67:c0:c6:c0:02:ef:f1:57:2b:c1:
f9:40:11:e6:2d:e8:53:15:14:77:98:d0:89:59:b5:b5:bb:b6:
b3:82:d5:5d:50:57:01:c6:39:89:88:2b:d2:e3:f9:97:6c:eb:
39:f0:8c:01:34:b0:a2:b8:22:93:17:17:0d:32:cc:d5:cc:28:
31:dc:f4:d6:87:35:cc:bc:30:48:16:c2:a7:f3:82:cc:59:ce:
08:08:62:c0:52:bb:21:b7:7c:b2:a1:1e:3f:c0:c8:d0:30:29:
01:60:a1:c4:5f:0c:ac:42:16:3f:c0:c8:d9:c8:1b:2c:ec:96:
f3:be:85:4c:fd:5f:e5:70:9b:19:e0:81:87:53:ce:5d:eb:19:
4c:69:64:f0:97:a3:d9:94:28:72:7f:83:3d:a1:f4:19:dd:e6:
62:9a:d4:36:49:66:45:a3:9a:09:cc:21:ea:53:f4:06:86:9f:
bb:76:a2:e1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQijeFCK/3Aeequs3qen+u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj
YzMxOWQwHhcNMjUwMTAxMTU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmZlNTU2ZjU1MTg1ZjE1Y2JhNTI0MDUyZjA1MGRiZTgwNGJkNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTnqsLTqJcaw5ZiYyU9qprsjexxK
YXKyQwhEfD8zKVh7B41j/1Dna3H0yiOQIIHo2Z50Y247TKdrh5LnDxABauxgLVqF
mqwEY6QLrAOAerZ0RO95mUS9SRPZgkNp8iwBjzlp7pcEBhw0g/X51MO+BYdQtGmR
Bdo1E7s3HDsZsA6qEQPBGKZItTF0GEYtjT4b7bt2G8mWC3n2F6v8G0O9BamNxWCd
8UuENPtrvFUGicnlqiDgZADUvAFni+Hi2EFe/9j9MZc2DGOO347Jlgloz3+S+F3v
Ve7tLE2da60XuERTF6agdgjvjnhIlXFWC9BY70B9vTk/4BClEitlLkcuUQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGL+VW9VGF8Vy6UkBS8FDb6AS9bpMB8GA1UdIwQY
MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt
ZmI0MGQ2ZGEyNDY4LzEvWXY1VmIxVVlYeFhMcFNRRkx3VU52b0JMMXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4
LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9QaAwQA
ubEsMA0EAgACMAcDBQEqCi+AMA0GCSqGSIb3DQEBCwUAA4IBAQA8tkHsE/N4ksb7
q5GnLKPyDaQHc5delswbE9Tjt1uaiHW6sge1r7jWuNPPyz9nH/ycuguy5vURREEF
rrK0wOk3GwdB1yTEYsddbM5ntPP4+mfAxsAC7/FXK8H5QBHmLehTFRR3mNCJWbW1
u7azgtVdUFcBxjmJiCvS4/mXbOs58IwBNLCiuCKTFxcNMszVzCgx3PTWhzXMvDBI
FsKn84LMWc4ICGLAUrsht3yyoR4/wMjQMCkBYKHEXwysQhY/wMjZyBss7JbzvoVM
/V/lcJsZ4IGHU85d6xlMaWTwl6PZlChyf4M9ofQZ3eZimtQ2SWZFo5oJzCHqU/QG
hp+7dqLh
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:13:00 2025 by rpki-client