Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/DY7axdNUahmM11yaDw51VfAp67s.roa
File: DY7axdNUahmM11yaDw51VfAp67s.roa (raw, json)
Hash identifier: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=
Subject key identifier: 0D:8E:DA:C5:D3:54:6A:19:8C:D7:5C:9A:0F:0E:75:55:F0:29:EB:BB
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0194221FC260E482A62BD2840FE2FB328317
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/DY7axdNUahmM11yaDw51VfAp67s.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 51.198.68.0/23 maxlen: 24
2a06:5901:8400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:60:e4:82:a6:2b:d2:84:0f:e2:fb:32:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8edac5d3546a198cd75c9a0f0e7555f029ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:ff:bb:ee:fa:5b:e7:c6:b1:a8:07:1e:16:
7a:ee:29:b4:88:94:b4:4f:be:8d:19:4e:4d:36:0e:
3c:fa:23:13:89:dc:b1:a5:f4:07:60:bc:9d:c7:e5:
d8:85:22:48:e6:62:61:cf:3e:e1:a0:39:2b:71:05:
b2:84:20:bf:7d:f0:5c:76:a0:70:47:d2:4b:f4:8c:
29:bf:c1:4e:af:d7:f9:fc:d9:c3:90:4a:7e:e7:75:
4e:60:50:f8:aa:8c:2d:a5:da:5a:94:5f:65:9f:a9:
ba:e3:04:4d:33:d8:38:c3:c8:8a:a8:66:42:b4:ea:
a7:7a:ed:78:1f:24:b5:bb:27:13:ff:74:03:30:ec:
de:61:a7:e8:a7:e1:a4:75:ae:33:cd:ba:a3:33:6d:
b1:d6:9e:33:52:bf:f4:6c:de:d9:8f:b2:4e:ff:49:
c2:a2:3f:af:01:81:7b:79:ac:39:fe:f5:5b:44:92:
6a:c8:a8:7a:e7:b3:cf:cb:a5:6a:84:99:db:61:84:
76:5f:b9:e4:db:3e:2a:86:ee:f1:75:9d:19:bb:2b:
9b:4d:48:d5:50:01:5e:1f:1b:f4:9f:60:44:d6:ac:
18:e7:a9:62:ae:7e:67:d5:66:ce:28:1d:8b:8a:65:
ae:28:6e:65:fc:cc:9b:38:5b:f8:8c:b4:4d:52:db:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:DA:C5:D3:54:6A:19:8C:D7:5C:9A:0F:0E:75:55:F0:29:EB:BB
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/DY7axdNUahmM11yaDw51VfAp67s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.198.68.0/23
IPv6:
2a06:5901:8400::/40
Signature Algorithm: sha256WithRSAEncryption
18:19:a4:4c:91:ed:c3:f6:c5:88:0d:ad:b3:1f:78:6a:ff:b6:
45:b3:29:c8:11:33:4d:33:68:34:d2:9f:f7:6c:62:ba:c9:a1:
2a:a2:e3:14:e2:9c:ce:65:70:39:5e:95:db:65:60:76:cb:dc:
a8:ff:01:2a:59:bd:8c:2a:9e:02:61:17:9d:f8:e7:a0:7e:0c:
e5:1a:37:f3:17:24:f2:69:e3:7b:30:41:23:64:e4:a8:e8:1f:
c3:92:f6:e8:20:99:38:51:a3:42:52:f8:3b:3f:31:95:0a:e8:
06:30:9e:ea:51:48:80:f8:8f:81:40:64:18:9a:37:a2:6e:46:
e4:93:55:fa:0d:96:7e:2f:b9:4b:0f:4d:ca:38:3f:82:29:d8:
51:cd:6e:b7:ec:d5:89:c7:31:39:df:fb:fb:40:8f:16:54:08:
9c:6e:88:41:c1:3b:d4:9e:f0:05:f2:92:c4:3a:cc:b2:b8:fa:
00:55:c5:ca:f4:b6:78:8b:7d:32:40:ea:a7:6c:d3:fa:c9:9a:
62:ac:4b:bd:09:f3:a4:fa:46:75:28:da:ac:5e:43:99:f4:5d:
ee:18:01:ab:3e:68:95:02:d0:32:c2:4a:a5:aa:18:3d:33:44:
0e:b1:be:1c:9d:b5:f6:8f:87:2d:94:d4:f1:92:9b:3f:3a:92:
7b:7e:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:26 2025 by rpki-client