Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa
File: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (raw, json)
Hash identifier: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=
Subject key identifier: C8:61:20:09:89:7C:6D:9F:59:CE:7C:1A:FC:D0:AD:F9:F8:EF:7C:7D
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 019427488E8C794F0FDCD2830358527B7CFF
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8351
IP address blocks: 193.105.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:8c:79:4f:0f:dc:d2:83:03:58:52:7b:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8612009897c6d9f59ce7c1afcd0adf9f8ef7c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:df:5f:1d:60:7f:3a:e7:ae:04:fb:97:75:
33:1d:e1:8b:9e:dd:c2:9e:a0:31:80:da:6e:a0:ef:
88:0b:3a:10:4b:40:42:44:9f:db:a2:13:9a:ad:fd:
c8:2b:7f:ac:f8:f6:13:2e:25:17:84:e9:27:1c:ae:
71:c9:b4:12:e5:61:d1:c2:fb:27:0b:46:72:83:2c:
66:68:60:64:19:42:53:e9:b6:93:73:5c:21:1a:32:
eb:f4:de:b1:5e:a4:9f:ae:1b:1f:bb:9c:51:37:c2:
f5:1c:ca:a5:40:9d:b0:56:32:83:2f:c9:55:54:ab:
2d:54:a1:c4:67:36:c4:46:1a:f5:b2:86:ca:83:9f:
7e:68:c5:26:6b:fc:94:d0:f4:7c:5a:f0:2c:12:86:
46:8d:21:3b:37:49:6e:3b:66:d8:51:09:5d:a9:3f:
03:34:2f:a1:db:fe:e7:9d:53:47:0d:6b:95:de:63:
19:16:85:2c:7a:30:48:e1:f5:62:5e:56:9c:92:69:
68:04:35:9a:32:b6:f8:5b:31:9b:d7:b1:3d:dd:ef:
81:53:17:42:38:59:03:e4:77:82:90:6f:ba:77:68:
d8:15:34:60:ab:c1:00:ae:ab:ce:58:b9:1c:1f:04:
ca:48:b1:df:52:46:ce:95:ef:65:92:4e:fd:2d:8c:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:20:09:89:7C:6D:9F:59:CE:7C:1A:FC:D0:AD:F9:F8:EF:7C:7D
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ba:9f:73:c3:e1:f5:01:6b:60:52:fa:be:9c:09:33:1d:70:
4d:ff:69:7d:9a:f7:26:c6:73:ac:a0:b8:d8:9e:87:52:02:3d:
4d:1c:af:ec:cd:af:b7:25:85:f8:e8:c0:53:46:6c:24:9b:4b:
16:d2:ab:54:c1:28:6b:7c:5c:c0:f0:40:cf:2e:ce:4d:3d:5a:
b9:4a:52:a5:cb:08:dd:5a:48:96:0d:6b:cc:1b:ca:b1:84:9c:
5a:c9:c8:f5:88:2c:1c:ff:39:54:1f:04:88:78:5a:32:12:81:
41:20:dd:c4:d0:7c:28:c8:83:d7:dd:50:90:d6:92:7c:24:cf:
44:47:c7:ba:c4:7c:5b:49:2c:d7:e5:39:87:b3:9b:de:a9:3d:
08:52:e2:3b:8c:09:fa:e6:98:8f:f0:f8:0c:76:fd:09:1b:04:
c7:0c:46:cf:0f:f2:a2:88:6f:38:77:74:98:28:8e:ea:a6:74:
9a:e9:24:ac:d1:2f:1a:df:77:a6:d6:f4:1e:df:75:eb:0c:0e:
f1:a3:09:ce:f4:3e:b7:cc:d1:3b:40:99:d4:4d:fa:c8:64:42:
9f:7c:07:b9:b5:c9:ef:c8:d9:5b:e3:10:15:0f:11:55:0b:0c:
5b:52:13:e2:3e:11:67:34:d9:2d:2f:ea:29:1e:bf:95:0d:22:
dc:93:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:45:17 2025 by rpki-client