Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/yNK_se_8Y1MH-IyQZOfpZj_aArA.roa
File: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (raw, json)
Hash identifier: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=
Subject key identifier: C8:D2:BF:B1:EF:FC:63:53:07:F8:8C:90:64:E7:E9:66:3F:DA:02:B0
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA00BF7AD470308A94F28BFC1E4793
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/yNK_se_8Y1MH-IyQZOfpZj_aArA.roa
Signing time: Thu 02 Jan 2025 11:50:08 +0000
ROA not before: Thu 02 Jan 2025 11:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56630
IP address blocks: 213.183.54.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:00:bf:7a:d4:70:30:8a:94:f2:8b:fc:1e:47:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d2bfb1effc635307f88c9064e7e9663fda02b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:c0:72:71:6f:06:f9:3e:dc:d3:e4:aa:63:
41:da:12:75:39:22:0c:1c:ea:fb:04:94:ce:43:ac:
69:bb:3d:57:15:50:ee:24:f5:d5:76:4a:18:36:26:
6a:66:79:fa:30:d1:6d:eb:9c:12:7b:a6:35:ce:77:
e9:0e:79:4d:e4:f0:25:b7:78:44:1f:c1:76:fc:5f:
76:c2:33:8c:96:e9:ae:77:13:b8:3c:b5:ea:8b:d3:
1f:9a:aa:66:af:08:a2:c1:08:31:aa:a1:e1:73:fc:
a2:6f:f8:92:80:32:f1:65:b6:a3:09:48:e0:11:da:
ac:86:22:66:8b:13:fb:ef:f7:d4:fd:db:fd:9c:4b:
04:89:7e:f5:6b:70:c2:e5:45:ed:ad:7d:b6:38:90:
3e:cd:73:41:45:c6:fe:39:cc:4e:c7:c2:93:72:ff:
74:e6:6a:b2:35:f6:5d:da:cb:53:eb:47:1b:89:36:
3c:1d:9f:29:e0:f8:2b:6f:34:6e:9f:95:27:e9:5a:
27:d5:e4:09:bb:21:6c:91:57:0f:4a:d0:64:32:1e:
02:66:9d:d2:38:e8:3f:49:9a:66:70:4b:0e:8f:94:
e5:69:24:5c:cd:9e:a7:44:69:be:5f:ef:50:4d:fd:
98:a3:01:35:6f:9b:55:63:38:72:52:83:fe:9a:a8:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:BF:B1:EF:FC:63:53:07:F8:8C:90:64:E7:E9:66:3F:DA:02:B0
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/yNK_se_8Y1MH-IyQZOfpZj_aArA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.183.54.0/24
213.183.56.0/23
IPv6:
2a03:f80:7::/48
2a03:f80:70::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
Signature Algorithm: sha256WithRSAEncryption
2e:1e:fd:3f:17:28:7e:3f:b5:ac:e3:ae:18:86:dd:2f:71:ea:
6c:4a:fa:01:f3:d4:ce:e6:c9:e8:56:be:e0:16:03:34:ef:98:
ee:41:c9:f4:b2:f8:12:ca:88:16:6a:ec:3a:b4:b3:c5:01:3a:
78:ce:a5:d6:8f:ce:5b:b8:fe:17:e2:50:4c:8b:ed:23:5b:cd:
13:2c:f2:76:c7:7d:1d:30:2f:3e:cc:2e:9e:b3:f8:d5:d1:8c:
8c:4a:66:ae:2c:a2:42:a3:c9:3d:b2:c3:08:2a:f9:49:57:ba:
b9:e0:73:7f:48:c1:78:29:31:af:f9:f9:e3:32:d0:e8:32:6c:
80:b3:42:be:61:02:e5:5b:5a:ca:4e:e1:86:9f:3a:60:6c:e5:
d7:20:f8:4d:57:5f:1e:76:29:72:c3:88:10:2a:48:a3:c7:39:
95:bd:e5:ff:c2:f0:09:86:dd:16:b5:25:8b:a5:1e:09:3c:f0:
a2:6a:70:33:ec:9b:c1:c1:3d:ef:42:33:09:c5:6e:51:70:c7:
14:06:6b:d4:15:17:70:07:3f:e1:5c:85:52:c4:dc:37:d3:0f:
0c:87:c2:53:1e:b6:f5:93:bf:b8:11:d7:31:6b:72:8c:1c:56:
b0:27:42:89:16:fe:82:d0:a7:c5:d8:14:5a:79:61:0f:cf:05:
a5:d1:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:44 2025 by rpki-client