Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa
File: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (raw, json)
Hash identifier: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=
Subject key identifier: CB:E2:8A:6B:25:83:91:20:10:27:B5:87:9E:B6:01:30:66:1E:5B:BB
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019424B3C9F7DBDD8659E2449A2FE640E1D3
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43201
IP address blocks: 193.228.160.0/22 maxlen: 22
193.228.160.0/23 maxlen: 23
193.228.160.0/24 maxlen: 24
193.228.161.0/24 maxlen: 24
193.228.162.0/23 maxlen: 23
193.228.162.0/24 maxlen: 24
193.228.163.0/24 maxlen: 24
2a0c:e1c0:2b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:f7:db:dd:86:59:e2:44:9a:2f:e6:40:e1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe28a6b258391201027b5879eb60130661e5bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:e2:f8:78:77:0f:55:1c:73:10:51:dd:14:
08:7b:54:6c:dd:cf:b8:a1:10:cf:83:10:91:0e:61:
96:1e:13:f8:9f:b9:6f:a0:ef:e9:c4:ef:7c:d1:c0:
7d:bc:3d:8f:81:9c:0f:42:31:f9:92:c1:41:47:64:
5c:bb:4c:9b:33:9d:5f:2f:69:fe:f0:78:46:8a:e3:
32:db:bb:be:8e:b1:3f:7d:42:29:32:be:c4:7f:1f:
79:c9:51:05:b5:4d:8f:f1:3f:e6:a1:f1:fd:41:21:
80:ba:aa:fa:88:10:13:63:65:43:d4:ca:43:4c:50:
70:f4:55:64:fb:49:5e:76:d7:23:35:fd:a6:fd:e3:
1b:a5:25:b4:02:24:bf:cc:04:71:eb:e1:7f:66:7a:
80:db:25:bc:fa:78:b1:dd:2f:18:c2:6a:d7:8b:fa:
29:c1:76:6b:3c:c2:6d:7a:70:7e:6d:1e:ed:d6:8a:
1a:de:e7:bf:e9:f6:9e:31:0c:f2:0b:94:71:0c:ec:
51:fe:81:8b:74:df:0d:e3:71:ca:39:e0:12:ad:2b:
6e:2f:00:3f:1c:78:75:be:d6:c5:de:e5:a8:3b:e2:
11:33:3d:fc:aa:1c:c3:fa:da:8f:42:05:14:59:07:
6c:7f:00:a4:79:0d:62:d6:5b:51:64:f0:9e:62:5f:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:8A:6B:25:83:91:20:10:27:B5:87:9E:B6:01:30:66:1E:5B:BB
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.160.0/22
IPv6:
2a0c:e1c0:2b4::/48
Signature Algorithm: sha256WithRSAEncryption
79:e2:53:74:ed:0f:cc:4b:03:60:33:d7:c6:50:3d:dc:ce:ab:
e7:30:e3:fc:32:cb:c0:3d:25:9d:c3:63:84:c3:dd:67:f6:1c:
ef:78:11:e3:56:53:1c:05:6a:0a:f4:86:de:cd:b5:0c:98:8b:
c4:be:61:bd:8a:8d:2c:f0:9e:88:f9:88:51:3f:32:a8:99:8b:
b0:3f:34:56:7f:66:5a:d3:3a:99:be:e5:41:96:63:61:4d:ce:
a9:12:e7:a9:a3:bf:8d:96:19:6a:df:26:66:98:96:1d:95:71:
8a:9a:c9:1c:ab:89:9b:fa:1f:25:c1:27:90:a0:2c:db:ca:ce:
de:a6:18:86:f1:46:c3:30:23:34:aa:c9:d1:33:c4:1f:59:ac:
64:43:f1:a6:00:70:e4:41:cf:92:f3:1b:aa:51:ec:e7:85:43:
85:e1:58:bc:5c:ae:1c:1e:0f:ca:9f:ef:ae:81:84:93:b1:82:
45:1a:28:ae:c6:d5:87:14:d2:aa:ec:fd:a2:f4:c7:bb:8b:ea:
4d:de:07:ef:27:85:00:78:5f:f7:ba:e6:c8:d3:6f:fc:26:27:
0b:60:d9:70:b0:b1:f7:38:45:70:f4:a7:55:92:33:4b:45:25:
d5:0e:3d:fd:db:c2:04:02:ac:c4:05:19:ee:db:d7:4c:41:c4:
60:31:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:33:33 2025 by rpki-client