Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa
File: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (raw, json)
Hash identifier: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=
Subject key identifier: 62:44:76:05:88:D1:F0:7E:80:22:FE:95:13:2D:B1:E5:DE:42:5A:4F
Certificate issuer: /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial: 01942143FC63F95E1B4F03B85BB015CEE677
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203215
IP address blocks: 192.166.8.0/22 maxlen: 22
192.166.8.0/24 maxlen: 24
192.166.9.0/24 maxlen: 24
192.166.10.0/24 maxlen: 24
192.166.11.0/24 maxlen: 24
2a0c:7ac0::/29 maxlen: 29
2a0c:7ac0::/48 maxlen: 48
2a0c:7ac0:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:63:f9:5e:1b:4f:03:b8:5b:b0:15:ce:e6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6244760588d1f07e8022fe95132db1e5de425a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:db:c9:8b:43:7d:5e:33:ea:33:f8:d0:1e:
ea:36:a4:64:f8:10:ad:43:75:48:f2:ed:69:75:ac:
4a:80:39:a0:6b:c7:1d:58:4d:fe:3b:c3:b7:76:6c:
46:09:66:7a:1f:44:c4:86:c9:7e:36:1f:f0:71:bf:
26:70:a3:ed:41:ab:b4:f6:f2:cc:e0:46:a9:f3:80:
4a:b9:b1:e0:df:69:24:85:f5:e1:85:a6:a4:44:cc:
cc:ea:a4:d6:79:dd:49:ee:86:cf:70:92:d0:a7:af:
fe:5f:02:7a:79:28:63:1b:f5:ab:7c:0a:8b:7b:d6:
23:81:a2:9f:92:5a:5f:f8:21:09:4c:4f:42:27:db:
39:c1:33:f9:8a:c0:a0:bc:6a:2f:f2:95:79:98:86:
b6:5a:df:3e:f1:1e:81:ee:2a:d7:7a:f0:c8:dc:c6:
b4:eb:15:f8:f4:9d:39:3d:15:97:0d:f9:21:7b:6a:
73:0c:2d:0c:e7:0c:ef:a9:18:36:1b:e8:6f:4a:58:
77:e1:88:18:33:b1:7e:ee:7a:41:a7:25:44:de:68:
09:6a:ea:ef:ec:10:5a:d0:12:6f:df:8c:53:c4:6c:
4d:ba:b4:53:d4:e7:b4:e3:0c:87:73:b3:bb:c5:92:
dd:10:a2:4f:42:0a:16:63:62:5c:f1:f0:c4:a9:db:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:76:05:88:D1:F0:7E:80:22:FE:95:13:2D:B1:E5:DE:42:5A:4F
X509v3 Authority Key Identifier:
keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.8.0/22
IPv6:
2a0c:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:84:4c:32:25:0d:e3:48:47:53:f7:ce:5e:2e:b2:8a:d4:e4:
a9:ac:bc:b7:a8:56:02:e4:7b:06:2f:35:32:3f:6b:f1:8b:d8:
bb:9b:99:47:58:cc:28:b6:bf:e5:cf:2d:3b:d4:f7:a0:7e:ca:
be:e1:b2:dc:98:f6:da:46:a2:85:9e:43:06:2a:04:e4:0e:06:
4b:49:e8:7e:54:31:23:8e:51:13:ef:0c:bc:75:fa:4d:05:33:
58:22:bc:7d:a6:3f:ee:52:d9:e5:7b:8b:77:70:a9:ee:df:7a:
e6:2c:5a:99:73:f9:ca:cf:55:f7:52:0c:fc:e6:dc:06:81:ed:
3b:a8:04:69:bf:f9:fb:04:75:b1:d3:f4:dc:02:9d:59:8b:64:
10:f1:9c:66:c9:02:b5:8e:f9:73:9e:a9:93:e1:1b:19:bd:32:
1a:1f:c1:2b:75:ce:13:65:5e:e4:7d:c5:aa:99:01:2e:d6:cf:
5b:76:39:34:71:ae:c3:12:64:f8:f1:fc:70:ef:ff:bf:4c:e4:
d3:ce:56:a7:26:c9:50:bd:b2:e7:3b:6e:7b:21:c5:7d:e2:37:
3d:d1:f3:01:8d:27:9a:2c:34:fd:a3:ff:f4:46:6c:79:3c:0d:
08:ed:38:75:23:ab:19:27:08:06:3a:df:b7:03:30:13:c5:48:
ac:93:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:58:40 2025 by rpki-client