Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/y7gAm7kghjHHyhd8lNyuOvqL-gE.roa
File: y7gAm7kghjHHyhd8lNyuOvqL-gE.roa (raw, json)
Hash identifier: WTPaSKHOX9uHT0vFATOWJ6Sa/T+XEBB2nCNbOZzZ6VI=
Subject key identifier: CB:B8:00:9B:B9:20:86:31:C7:CA:17:7C:94:DC:AE:3A:FA:8B:FA:01
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239DB7E1D3245EFEA0000C84F8D319
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/y7gAm7kghjHHyhd8lNyuOvqL-gE.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207326
IP address blocks: 87.248.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9d:b7:e1:d3:24:5e:fe:a0:00:0c:84:f8:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb8009bb9208631c7ca177c94dcae3afa8bfa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:59:a9:02:99:8c:63:8a:52:93:3c:f4:0d:
5d:55:7f:91:80:d1:eb:3c:37:cf:78:b9:da:05:2a:
4b:e1:75:4c:e0:10:a1:63:dd:8f:3c:17:50:d9:67:
30:99:b6:65:64:27:f9:6b:f3:b7:44:2f:d0:5c:f5:
31:81:9c:13:5f:10:66:76:6c:ba:1a:e8:b9:49:36:
4b:be:0d:d1:a0:cb:7f:6a:9e:64:5e:74:71:b6:7d:
07:6e:b5:e6:e1:52:26:f1:1f:68:61:95:b0:e9:6b:
80:ce:9a:0c:1e:51:af:31:2f:f6:f6:b9:cc:80:4b:
eb:f0:8c:2e:73:65:4b:43:05:f6:5d:ba:be:94:d4:
4e:24:f0:ec:ed:5e:f9:11:17:97:70:84:a1:01:ad:
09:b8:d1:1d:a5:ea:74:b1:6c:7e:bc:5a:85:6e:1f:
40:07:46:f9:e5:e9:38:15:db:f9:16:84:cb:85:a7:
86:09:6e:54:a7:2d:1e:b6:7b:b4:e9:8f:b4:38:91:
68:2a:d9:b8:9f:23:62:b7:8c:c2:48:41:74:db:d7:
7a:8b:a4:64:57:c7:53:9a:51:21:98:61:b6:71:f0:
65:52:d1:dd:b8:6f:f7:7a:a6:44:9b:d6:54:62:c9:
a5:bd:a3:7b:ee:1f:73:53:f5:a4:b6:3f:66:5a:b3:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:00:9B:B9:20:86:31:C7:CA:17:7C:94:DC:AE:3A:FA:8B:FA:01
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/y7gAm7kghjHHyhd8lNyuOvqL-gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ae:0f:dd:c0:0d:96:f7:67:65:ba:0a:19:f9:8b:90:6e:ff:
45:62:68:5c:4a:1a:31:d7:33:b0:62:35:1b:c1:36:db:8c:5c:
64:19:f8:c7:bc:34:c4:fd:53:4a:36:a9:64:e4:b9:e9:23:b9:
75:1b:fb:9d:f0:2d:13:e0:16:ed:b8:8a:31:8c:48:c0:45:a8:
43:ef:3d:4d:56:87:a8:da:0b:45:6b:38:cc:70:e6:0b:57:62:
55:de:66:f5:46:14:17:3a:87:17:66:ae:2c:04:b7:39:4d:4e:
bd:de:67:6a:9d:cc:10:5a:d1:9f:14:d4:f3:8e:84:2d:17:d4:
59:e6:8b:87:18:13:21:12:54:e9:d9:e2:76:20:e1:27:f9:3c:
81:9a:ce:2a:12:f5:63:d3:02:0c:7e:84:81:2a:ff:a1:8d:a4:
54:8d:61:fc:23:ee:e8:67:ae:56:76:50:fa:09:f9:b2:11:fb:
17:01:48:69:e4:8b:49:97:c7:c6:97:7a:56:43:64:e0:5e:6b:
68:b1:f1:41:5e:46:15:bf:b3:0f:05:11:ea:a5:4e:10:c7:71:
92:f9:ca:fd:cc:42:3e:e3:2b:6a:0e:2c:a4:25:31:f3:6b:56:
49:72:73:ac:91:ae:00:5c:c2:8d:77:8c:bc:7b:09:75:52:e8:
8d:8d:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:34 2025 by rpki-client