Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YncmmCVbHfc8yNpLIWm9uOVXAt4.roa
File: YncmmCVbHfc8yNpLIWm9uOVXAt4.roa (raw, json)
Hash identifier: qO2gIQaee1JIm40R1DGdhcPp0ebkFcTPiyGLFZw8p7A=
Subject key identifier: 62:77:26:98:25:5B:1D:F7:3C:C8:DA:4B:21:69:BD:B8:E5:57:02:DE
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019564D9088FB838BB873D86154E30E7CC54
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YncmmCVbHfc8yNpLIWm9uOVXAt4.roa
Signing time: Wed 05 Mar 2025 05:48:19 +0000
ROA not before: Wed 05 Mar 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.184.0/23 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.195.0/24 maxlen: 24
213.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:d9:08:8f:b8:38:bb:87:3d:86:15:4e:30:e7:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 5 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62772698255b1df73cc8da4b2169bdb8e55702de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:e2:31:15:49:42:14:3d:cf:ed:1b:1f:41:
25:98:77:84:bb:0f:6e:66:97:36:b0:0b:43:0b:cf:
5d:62:0b:ce:4f:37:de:e8:20:e2:0d:95:ac:9c:4c:
17:9b:8f:ea:85:ed:5b:a9:0d:29:6e:ef:44:c3:4c:
93:a3:c1:e5:41:9f:29:49:22:9d:eb:86:b8:95:20:
a7:9f:c0:1d:a3:7c:72:99:90:50:80:24:62:5f:15:
c5:c5:6d:ae:20:48:f6:38:2a:70:d1:3c:7e:68:e8:
e1:55:54:f6:d9:d0:70:24:f9:f1:3c:72:6c:85:8e:
16:5f:ab:66:24:42:87:54:ca:2e:f9:04:71:e3:41:
0a:e6:4a:c0:80:30:56:c0:50:36:bd:6f:91:de:06:
1d:fa:c5:9e:0e:9c:99:bf:ef:50:39:b7:63:e9:34:
78:7c:fc:bb:dd:ba:e1:09:cf:95:4b:1b:a4:a4:01:
3d:98:97:0d:41:1c:04:cb:93:8c:cb:a3:32:ce:58:
52:5a:27:bb:b6:0f:49:8f:6b:a9:a7:86:00:17:d7:
7d:f7:05:11:d0:b1:b0:bf:6a:8c:9b:14:f0:32:e1:
cd:9f:c6:51:9f:27:1e:1a:12:27:98:7a:5b:28:61:
c8:54:80:b8:25:28:f2:7a:0e:00:18:38:43:e7:40:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:26:98:25:5B:1D:F7:3C:C8:DA:4B:21:69:BD:B8:E5:57:02:DE
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/YncmmCVbHfc8yNpLIWm9uOVXAt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/23
62.60.194.0/23
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9a:00:af:a7:1c:c3:f1:3a:9b:5d:9a:6b:ae:84:88:2e:83:
14:18:13:d5:f5:b3:74:9f:96:93:40:65:48:1b:58:7a:b2:b6:
68:82:35:55:af:cb:33:2e:f8:40:6d:7b:a1:55:55:d4:b2:48:
6b:c6:ec:93:0b:d9:85:fd:23:c2:0a:3c:05:90:02:98:2d:d1:
ce:0f:e5:96:65:2f:af:c5:64:48:ac:fa:67:42:91:95:b6:f7:
c8:73:e1:77:84:80:a1:62:54:d6:eb:32:c4:9c:38:ed:f1:73:
da:fd:48:63:e3:a9:4e:53:38:32:61:93:ec:49:3a:75:aa:20:
e8:11:1e:fe:18:7a:9b:1c:fc:8a:15:af:8f:3d:66:47:e4:a1:
22:a6:05:76:38:2b:2c:cd:22:cc:17:1c:07:64:18:55:c5:e8:
b9:7e:30:e6:53:c3:d6:93:15:d6:8d:47:88:bf:a1:d2:0a:88:
c6:9a:34:e7:dd:73:a1:e9:26:e3:ca:29:7e:96:8c:6a:51:06:
03:f6:ef:36:5d:27:4a:71:0e:92:82:b8:7c:56:9b:3b:97:bc:
62:08:63:93:6f:d5:7c:0c:e5:59:e3:4d:4d:b7:8e:5d:a5:73:
79:4c:0d:ba:da:15:ad:3d:e0:3b:69:70:7b:75:a0:63:61:80:
18:5c:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:47 2025 by rpki-client