Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yVFu2BG-2jPO42o54RBasvcduFQ.roa
File: yVFu2BG-2jPO42o54RBasvcduFQ.roa (raw, json)
Hash identifier: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=
Subject key identifier: C9:51:6E:D8:11:BE:DA:33:CE:E3:6A:39:E1:10:5A:B2:F7:1D:B8:54
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E2AD53EF7A3018F9E878BA57B5655
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yVFu2BG-2jPO42o54RBasvcduFQ.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.74.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2a:d5:3e:f7:a3:01:8f:9e:87:8b:a5:7b:56:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9516ed811beda33cee36a39e1105ab2f71db854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:84:47:f7:42:58:12:b1:65:30:62:ae:60:
37:9f:13:26:93:e3:04:df:8d:12:01:ae:96:3c:f0:
75:ce:96:8b:af:d6:20:eb:df:a7:1c:71:98:a5:b5:
77:0d:c2:2f:27:6d:ab:90:5c:c7:1d:1b:10:a3:3f:
a6:91:31:50:a4:c7:0f:43:e1:75:f8:43:f6:c4:ff:
1e:29:7b:cf:6d:f4:11:db:2c:4f:9d:eb:10:03:18:
9c:81:82:8f:7b:1a:37:73:36:a4:94:ce:29:80:b0:
ad:a6:5a:06:60:20:5d:73:29:77:c4:d6:3a:a1:0b:
0d:2d:23:90:88:96:be:2e:6a:e6:4d:21:11:c5:44:
3d:41:e9:73:c5:ae:9c:86:f5:a5:d7:0d:93:a6:12:
85:40:5d:51:da:fa:72:54:17:e1:c0:a3:2c:79:46:
8d:94:f7:8a:18:72:2e:83:3f:d9:93:6b:7f:29:b6:
16:c1:48:4c:40:2b:85:fa:5d:cb:12:65:10:74:98:
e5:a9:c9:e0:b0:60:f5:f8:9a:9a:1c:ca:a3:ff:e8:
c3:d8:e3:62:a5:8c:fd:dc:72:82:44:3d:42:3b:0f:
32:25:84:56:01:2b:7c:a1:b7:0d:aa:74:94:20:34:
a5:f3:6c:03:2b:68:c7:32:b9:00:33:a4:87:bf:35:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:6E:D8:11:BE:DA:33:CE:E3:6A:39:E1:10:5A:B2:F7:1D:B8:54
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/yVFu2BG-2jPO42o54RBasvcduFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
55:55:ad:b0:72:f5:02:8d:99:c3:52:ae:f2:4a:44:74:21:a8:
c8:1d:8f:5f:a0:04:28:9a:ac:2a:b5:78:47:37:12:96:d4:9d:
e1:c5:fc:f2:7b:63:76:7f:5a:c7:65:c2:73:82:05:ea:d6:11:
59:e6:6c:a3:36:49:e7:d7:1e:b3:71:fc:83:b0:68:b0:81:18:
25:99:fa:04:9a:33:97:46:cc:bb:43:f5:cb:fe:49:2b:ac:ef:
7e:2d:cc:e1:29:27:25:3e:ec:97:00:66:d6:a1:b8:55:bb:59:
c5:72:f6:f7:14:09:51:27:50:51:a6:7c:97:13:f7:bb:f4:a3:
e1:4b:6f:c2:76:3f:c8:03:a6:ef:74:6b:b2:3f:c4:32:67:d7:
ff:a1:d6:0a:30:71:ef:04:f1:58:b9:05:5e:c2:02:df:4a:0c:
61:de:de:fa:d6:e0:70:ec:64:1b:88:37:56:f6:c7:52:48:81:
1c:39:ca:93:12:55:9a:ca:ea:31:fe:c6:12:bb:88:3e:a8:2d:
00:8e:e7:2b:0f:bd:cc:f1:8d:6f:55:ef:81:09:5d:df:dc:1f:
f4:f8:82:42:bd:ea:55:40:17:0a:da:86:41:0e:8b:ec:a3:f8:
3d:1f:93:1a:d0:ea:8e:0f:48:0b:50:8b:ac:e8:b8:8f:dc:8b:
5b:cb:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:35 2025 by rpki-client