Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa
File: YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa (raw, json)
Hash identifier: vyK0AzONbiCe5g5hUQ+qpo+ABY7iaBzdOKFUE4y2Cqc=
Subject key identifier: 60:AB:CC:31:C4:6A:2C:6F:05:F5:12:8C:4D:C7:2F:8B:B6:70:19:A4
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 019421B1A7B99F6673877ED757C81BD04372
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 193.160.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a7:b9:9f:66:73:87:7e:d7:57:c8:1b:d0:43:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60abcc31c46a2c6f05f5128c4dc72f8bb67019a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:aa:7e:b0:97:ad:92:84:6d:bd:52:70:f7:
5d:ac:c2:35:6b:44:69:29:70:f4:59:f9:e9:ec:24:
91:50:6e:f3:99:1e:10:fe:0d:c9:35:c9:2c:5c:cf:
4f:03:64:80:6e:95:be:7d:6c:92:fd:9b:04:96:9a:
25:27:21:82:f6:77:ca:fd:e3:c3:bd:b9:b0:b0:a0:
9c:9b:df:76:48:6a:66:9e:b6:6b:bc:68:6a:6d:b3:
69:34:1f:75:71:88:1c:79:b9:94:5f:2a:41:27:b0:
29:2c:75:93:eb:cd:2b:e5:db:79:f5:42:6d:d2:2c:
75:8f:d5:e1:ad:c6:cb:dd:94:78:26:d1:0e:6d:fc:
b6:79:79:55:e5:20:cd:de:2a:45:69:3d:e6:f0:7d:
cf:b2:04:1e:df:b8:2e:b3:cc:a3:ec:60:c9:e9:dd:
28:fb:e0:3e:73:56:84:72:20:7d:c8:86:82:fd:85:
b4:f0:5b:b4:23:56:78:51:ae:cb:4b:e3:b1:b9:fd:
53:95:9f:66:cd:fe:64:aa:a6:bd:13:9f:d6:ff:0c:
7d:09:66:4e:10:ec:38:42:bc:26:f4:00:8f:5b:52:
97:18:18:fc:18:99:0a:3e:53:ea:f9:49:ea:31:16:
54:1e:63:76:0d:88:74:e5:30:f1:de:fb:8d:ed:35:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:CC:31:C4:6A:2C:6F:05:F5:12:8C:4D:C7:2F:8B:B6:70:19:A4
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.252.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9e:35:6d:ad:b2:67:23:d6:33:69:5c:07:26:53:f1:8f:ef:
13:16:9e:ab:f1:6f:aa:88:9c:54:0d:90:a8:08:e8:2f:56:e8:
52:c4:39:8a:97:99:d6:b5:61:00:8b:84:fb:f5:ee:4e:dc:75:
63:f8:78:06:75:08:05:c1:66:1e:00:dc:f1:22:0e:12:9c:5b:
a9:8e:8e:61:c8:58:96:36:34:30:8a:09:bc:a9:81:44:72:74:
86:e3:1c:79:0e:0a:0e:83:6b:54:fa:0a:3e:17:02:05:b0:f4:
00:94:f3:8b:ad:32:aa:41:f1:6f:b4:c0:f7:ad:78:d3:20:78:
e7:2d:06:f6:c0:22:ab:66:bd:64:84:40:bb:7e:a1:e0:f3:82:
89:a9:c3:19:b0:f3:9d:f1:4e:d9:da:16:23:55:d6:6f:1f:32:
55:c5:a7:e3:85:4d:db:10:d9:49:47:21:8e:d1:30:bb:15:b1:
26:0c:6e:53:fd:21:7a:77:c6:57:6a:9b:44:67:52:0b:1e:cf:
ac:a7:da:34:7c:4e:80:87:97:51:39:99:cf:61:ee:72:fa:5c:
e4:38:ff:41:8a:4a:2d:bc:21:09:08:44:a6:c9:b0:da:d3:b2:
51:ae:50:41:cf:70:23:10:69:91:1d:84:31:f2:1d:f9:d0:d0:
c1:5c:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:06:55 2025 by rpki-client