Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yQGyuB6Q0276_vzY2uCoM0cuiS0.roa
File: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (raw, json)
Hash identifier: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=
Subject key identifier: C9:01:B2:B8:1E:90:D3:6E:FA:FE:FC:D8:DA:E0:A8:33:47:2E:89:2D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37DD285CCEA7AA22D88474F8AC45D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yQGyuB6Q0276_vzY2uCoM0cuiS0.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47216
IP address blocks: 213.176.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7d:d2:85:cc:ea:7a:a2:2d:88:47:4f:8a:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c901b2b81e90d36efafefcd8dae0a833472e892d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b0:5c:c4:66:a3:97:f2:1f:b6:82:ca:21:28:
2a:48:e4:a3:b6:d1:a5:ca:cc:df:bc:98:65:01:b2:
ea:e6:24:c5:37:09:f5:d4:68:17:6a:b9:8b:b4:3c:
5e:1e:bc:d5:da:7a:5d:71:e7:58:54:18:7e:39:0e:
e5:30:7d:61:19:1e:95:9d:05:55:26:28:85:a3:37:
c7:82:7c:d3:98:69:10:0f:73:45:1f:ed:af:f0:7c:
34:d8:a7:7a:4a:07:5c:97:55:6d:53:a4:5c:91:0a:
f0:4d:27:81:44:a3:68:41:9d:cb:8f:85:b3:07:44:
29:2d:ae:a2:18:68:7a:15:09:5a:ba:ea:e4:f0:5f:
98:93:2f:7a:97:19:79:6e:da:04:d3:84:b1:41:e1:
67:ff:43:51:8b:3b:da:56:23:0a:77:d0:16:a0:a1:
82:80:08:b3:17:6e:97:65:7b:24:59:06:b1:24:92:
16:ee:db:6b:ab:10:dc:bb:eb:84:3a:b6:6e:93:fd:
7e:57:87:e6:26:dd:21:58:a1:4b:ee:b7:d3:67:da:
7b:20:49:fc:ca:24:85:71:3e:f0:bf:f7:7b:76:11:
9c:76:bf:95:a8:78:52:df:72:62:9a:05:17:ee:3c:
73:a8:42:8b:69:e2:96:46:f0:d3:52:7d:c1:3b:0c:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:B2:B8:1E:90:D3:6E:FA:FE:FC:D8:DA:E0:A8:33:47:2E:89:2D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yQGyuB6Q0276_vzY2uCoM0cuiS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.6.0/24
Signature Algorithm: sha256WithRSAEncryption
42:aa:61:f2:6c:12:8c:9c:57:78:88:c1:72:09:03:4e:2b:81:
ef:ab:09:c6:c1:b7:b6:f3:f6:d5:23:45:8d:fe:15:b7:e4:85:
61:82:17:8d:3e:c9:3b:25:98:0b:91:29:76:e2:53:3a:e7:b7:
e8:fd:6c:95:5b:55:61:0c:25:9b:54:cc:a4:e8:1c:28:33:f2:
77:1e:e3:ce:94:42:9b:9f:64:1c:2b:d1:97:0c:96:98:87:49:
05:e6:b7:97:28:3b:7c:7f:59:b9:48:6c:f6:3a:c0:5e:ec:85:
d3:01:fb:01:19:84:32:e2:dc:e1:d2:99:23:ac:00:a0:8d:fd:
40:a4:38:aa:ea:14:03:95:3e:cb:ae:ca:f5:05:c2:5b:96:43:
a5:15:4e:7b:b2:e0:68:4a:da:57:10:ff:86:e8:54:47:9f:d2:
a3:fd:d3:2e:80:cf:7f:24:ca:58:7f:3f:21:42:08:47:d1:41:
48:bc:d8:c4:de:52:04:96:97:d8:65:b7:87:b7:55:c5:f4:1c:
7e:49:dc:33:50:42:61:4a:08:7d:b6:76:38:95:78:27:ac:74:
10:bd:9c:6c:17:6e:c4:42:f5:83:2b:7e:dd:1f:0b:6a:c5:c8:
24:9c:4e:c6:14:c8:59:5e:c1:b6:56:db:30:0c:80:25:38:3c:
4d:20:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:43 2025 by rpki-client