Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/yU3PmPgtk_Q1_ItafnX_KVBrbCk.roa
File: yU3PmPgtk_Q1_ItafnX_KVBrbCk.roa (raw, json)
Hash identifier: GoQsAvbsk/WPOH6IvKcU+h1jpthGhWlcRsfJ2nlir2A=
Subject key identifier: C9:4D:CF:98:F8:2D:93:F4:35:FC:8B:5A:7E:75:FF:29:50:6B:6C:29
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019424B26219B2FC8CDB052E15E5E38A1FE3
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/yU3PmPgtk_Q1_ItafnX_KVBrbCk.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 5.182.244.0/24 maxlen: 24
89.200.219.0/24 maxlen: 24
185.233.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:62:19:b2:fc:8c:db:05:2e:15:e5:e3:8a:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c94dcf98f82d93f435fc8b5a7e75ff29506b6c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:e1:e3:ac:b1:12:48:95:e3:88:5a:b8:fd:
b1:25:2b:39:83:9e:78:93:df:30:ac:dd:37:6d:ee:
02:93:41:cf:30:11:3c:01:86:a0:75:27:60:76:24:
1f:2b:5b:2b:a2:53:86:01:64:e0:af:ff:f6:ff:62:
8d:a3:11:68:d7:c3:47:20:ed:bb:2f:62:79:f4:e1:
6b:4e:76:d3:7e:59:ac:4b:95:b0:48:01:44:1d:cb:
1f:46:1c:7d:a6:d3:ef:13:2b:80:f1:a4:04:66:16:
b5:05:cd:6b:f2:2b:ef:00:c8:06:38:28:26:6a:c1:
59:93:00:cc:60:44:31:24:6d:52:f0:07:38:4b:39:
19:46:e2:f2:26:53:86:a5:aa:4e:21:46:06:84:b7:
90:ea:ce:42:0e:08:98:af:58:6a:e5:be:58:5f:ce:
f7:e4:4e:71:ee:8f:25:af:24:87:6c:06:b9:86:cb:
a4:0d:8b:8b:2f:b7:35:d6:d5:d7:3d:ce:a7:25:30:
0b:a1:e6:f3:94:8d:0c:a7:7c:2b:5f:38:0c:58:74:
65:4b:a5:0c:18:52:9e:a1:72:c5:f5:cb:53:d1:32:
02:00:6d:ef:61:8e:65:36:46:9e:2c:0e:96:6e:2e:
8c:ef:79:89:aa:9f:42:d8:d1:1f:65:1c:c9:a5:07:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:CF:98:F8:2D:93:F4:35:FC:8B:5A:7E:75:FF:29:50:6B:6C:29
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/yU3PmPgtk_Q1_ItafnX_KVBrbCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.244.0/24
89.200.219.0/24
185.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dc:ef:08:b5:49:94:b0:c6:69:d8:35:b4:d3:86:0a:8f:c0:
fa:12:db:ca:14:35:ea:34:ef:c5:84:e5:bd:59:f1:bf:5a:c5:
79:a3:59:f4:71:46:10:5d:b2:aa:c6:87:72:00:0f:4e:37:98:
d2:b1:a3:13:81:55:cf:f6:fc:fa:aa:73:a8:a7:25:25:35:0e:
52:a8:9f:a8:43:f7:7b:cd:8c:f3:23:df:45:5d:0c:5e:d5:f3:
83:19:68:46:89:31:70:3a:72:46:3d:1b:d3:9b:33:e3:39:83:
31:48:a6:5a:8a:a3:e1:18:6b:46:92:2c:eb:99:90:8e:fd:f4:
9a:af:2a:04:bc:71:23:ef:47:8a:78:dd:05:e2:e9:91:06:bc:
6e:a5:bf:71:d1:31:cf:98:46:71:7a:81:6c:21:17:51:ad:0e:
38:8d:19:63:6a:1e:b1:bb:4a:17:15:92:ac:70:20:56:de:94:
b9:83:bc:4e:a3:87:99:50:59:ee:e5:2a:c0:1c:24:2f:c9:1b:
33:58:f3:ea:b3:19:45:ab:fa:a3:c3:ef:61:4a:19:f7:66:6e:
32:ec:de:cf:e4:d9:d0:3c:2c:7a:0c:2c:d9:a5:64:f1:df:df:
7a:3e:fd:e2:d8:d4:c5:91:30:fc:ff:15:69:df:f2:d9:b1:7c:
b8:fd:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:18 2025 by rpki-client