Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ygd83f_VnIRT7CYGvaw5CvksSLo.roa
File: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (raw, json)
Hash identifier: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=
Subject key identifier: CA:07:7C:DD:FF:D5:9C:84:53:EC:26:06:BD:AC:39:0A:F9:2C:48:BA
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B842F5B3C2278074A3EC83F2E9940
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ygd83f_VnIRT7CYGvaw5CvksSLo.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51487
IP address blocks: 77.228.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:84:2f:5b:3c:22:78:07:4a:3e:c8:3f:2e:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca077cddffd59c8453ec2606bdac390af92c48ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:a0:c0:f1:c4:4a:70:96:17:06:2c:80:ff:
29:76:d6:fa:03:10:fb:9a:23:d1:1d:14:37:61:6a:
bd:a1:de:0c:06:66:02:be:00:38:aa:0a:1d:7e:a3:
7e:6e:34:75:71:53:94:da:99:1e:38:a7:11:3e:56:
34:e3:2f:86:06:92:cc:18:c6:aa:6b:f1:a3:01:52:
2d:f1:63:35:9a:4b:67:98:62:65:22:87:56:f6:12:
d9:4e:e6:48:f7:e1:b9:25:9e:c3:79:3a:84:c9:35:
4f:05:15:4b:98:93:bb:76:46:c9:f1:75:e6:ba:75:
7a:63:20:07:8a:24:d0:1b:22:24:e5:3c:c1:75:3c:
e4:b0:d2:97:a4:8b:b4:9f:10:57:f8:31:44:c4:e5:
82:14:95:c6:72:09:ff:7c:3a:89:29:92:72:df:83:
01:a6:d3:d3:2d:9a:d8:87:04:71:a5:4e:51:a8:36:
bb:b0:5f:ba:55:7f:c2:ff:41:3a:0e:e9:dc:b3:11:
de:c4:ce:4e:11:d0:0f:20:d8:2c:2d:2b:64:33:78:
1a:73:d0:48:04:72:96:4c:fd:9c:59:8d:9b:7a:56:
77:1f:10:cc:10:d3:14:fb:3a:ef:90:64:71:e0:bf:
b9:0a:94:dd:41:46:f1:a2:70:84:eb:dd:ca:e2:c7:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:7C:DD:FF:D5:9C:84:53:EC:26:06:BD:AC:39:0A:F9:2C:48:BA
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ygd83f_VnIRT7CYGvaw5CvksSLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0f:29:b9:53:c2:7b:5b:1e:54:18:59:61:a7:fb:fd:7f:07:
85:7c:af:65:84:3f:91:1e:7f:b0:47:d9:73:d5:1f:95:2d:f4:
24:86:a4:53:6c:a7:4d:3f:91:53:c3:5c:ea:cd:64:87:9e:47:
3f:a5:e4:b4:c5:67:4c:e4:80:89:e0:73:d8:e8:ea:f9:8e:1c:
74:94:45:b7:6f:bd:2d:78:56:fc:7c:78:a9:92:e2:80:8f:ec:
6a:6b:87:c7:95:e7:ca:b8:db:f0:ff:6a:0f:00:a4:50:e2:4c:
3b:00:a6:d9:b7:dc:cb:7c:4e:a4:e8:c8:0e:79:ec:85:c3:3d:
91:ce:97:e7:b7:6b:41:a4:1f:08:a0:51:a5:33:fc:77:61:f5:
d1:a7:2e:a6:2b:73:23:37:98:5b:0c:95:72:de:f1:fe:1a:69:
15:e5:d1:ed:c3:88:24:ab:51:39:d8:70:16:2b:91:07:5e:8c:
e2:07:2d:96:7f:ad:21:32:3d:60:ac:56:f9:b9:e9:15:c8:a1:
a6:a9:62:50:cc:e5:6f:6b:fc:66:f8:7f:3d:b4:0a:67:84:cc:
4d:5e:e0:4a:17:13:99:2e:2f:ec:06:74:10:0c:b4:33:0e:66:
c1:bd:2d:60:78:7f:e9:56:1e:12:47:f0:98:61:ea:a5:6e:26:
af:d0:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:06 2025 by rpki-client