Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/yG3GRDnYBo69OMDgoi6l30IqdQQ.roa
File: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (raw, json)
Hash identifier: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=
Subject key identifier: C8:6D:C6:44:39:D8:06:8E:BD:38:C0:E0:A2:2E:A5:DF:42:2A:75:04
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019424B3E37FD702DEB04B875B82C773316B
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/yG3GRDnYBo69OMDgoi6l30IqdQQ.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.17.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:7f:d7:02:de:b0:4b:87:5b:82:c7:73:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c86dc64439d8068ebd38c0e0a22ea5df422a7504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:32:1a:40:fc:b4:03:ed:10:1a:f0:d3:8f:
aa:cc:dc:45:84:93:37:fe:c3:40:32:8a:ae:ab:6a:
f2:23:d0:87:fd:b3:c8:28:f8:d2:6c:9e:99:35:73:
ee:1c:30:09:e5:80:65:c5:2f:f3:ee:ab:19:07:75:
29:8a:2e:59:ff:d5:67:e6:4d:6a:b8:b0:a8:41:26:
2d:38:69:90:fa:bf:3c:4b:e7:bc:2e:15:a5:e3:6c:
3e:f7:01:13:a5:cc:ec:18:e5:94:be:92:0e:c5:35:
bf:30:57:6b:6b:08:f6:d5:56:77:d6:22:aa:b0:2c:
b2:63:34:80:9f:f0:42:33:80:6f:cf:09:4e:15:79:
d7:d6:47:83:d3:ee:e7:98:d9:e8:0a:bf:2e:0a:bc:
d3:59:39:20:3b:60:9f:ab:11:28:4d:7f:32:98:e7:
89:28:3e:19:0e:68:a1:f6:bc:36:a0:8c:cc:24:a3:
62:0a:57:ca:0b:e2:c5:86:70:87:f7:e4:58:c9:ea:
82:c9:64:b6:76:fd:44:07:b3:a0:ca:cd:f5:bd:af:
fa:35:47:77:af:ac:79:b7:8f:bf:0e:bd:d3:d7:d1:
5e:06:8b:00:f9:ba:a0:8c:60:aa:23:98:e8:31:52:
9d:09:c9:c3:d6:df:44:f0:68:d1:a6:b0:b6:e5:81:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:C6:44:39:D8:06:8E:BD:38:C0:E0:A2:2E:A5:DF:42:2A:75:04
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/yG3GRDnYBo69OMDgoi6l30IqdQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.209.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5c:23:3b:3c:a2:f1:92:89:03:73:0e:94:57:ca:1d:54:5f:
5c:a6:09:59:f4:02:04:0b:78:71:38:cf:56:c4:a6:63:99:5e:
a2:45:db:70:fa:58:fb:2e:6b:69:27:88:3a:cd:1d:1a:61:84:
84:72:f8:11:55:e9:28:5f:ae:87:e7:4f:c4:55:ef:a1:a4:c7:
67:fc:d7:62:9c:82:ee:c4:83:3c:ff:00:fb:bb:f5:22:ef:c9:
71:8e:21:82:a2:b0:b4:34:5e:1f:96:1d:cd:16:15:66:0d:04:
3c:5a:7a:7d:98:d9:61:38:84:39:73:3d:16:6b:d9:71:69:ec:
85:c1:21:65:85:5b:06:22:5c:5b:4e:69:b5:29:8d:26:1b:c1:
85:06:b4:3e:04:3a:79:9e:97:79:dc:ca:17:43:65:e8:3e:2e:
76:e2:47:02:c7:9f:04:02:ee:74:cf:fe:2b:22:23:39:f1:7b:
b9:17:62:2e:5d:12:cf:ca:e3:54:6d:0a:5f:39:b0:12:68:7d:
90:18:d5:6c:03:b4:1d:91:fc:dd:58:c6:02:b2:80:10:af:0a:
18:b7:bd:13:c3:6b:2e:04:00:c1:54:a1:2c:77:bc:a0:d5:6b:
d1:32:c6:a0:e2:b5:c2:88:ab:aa:70:8b:e9:47:50:47:13:1d:
d0:0a:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:44 2025 by rpki-client