Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ykMpu1OjLYCWHCVsOgMXym15xtE.roa
File: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (raw, json)
Hash identifier: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=
Subject key identifier: CA:43:29:BB:53:A3:2D:80:96:1C:25:6C:3A:03:17:CA:6D:79:C6:D1
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B885F30A468FA20482215084C7666
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ykMpu1OjLYCWHCVsOgMXym15xtE.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207294
IP address blocks: 77.228.237.0/24 maxlen: 24
188.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:88:5f:30:a4:68:fa:20:48:22:15:08:4c:76:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca4329bb53a32d80961c256c3a0317ca6d79c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:9c:50:77:db:33:83:4a:1d:97:18:e5:7d:
38:d4:61:eb:47:c3:ba:f6:4d:b4:79:3b:74:c2:62:
27:f6:90:d5:52:81:05:89:da:17:63:4c:ae:c9:9c:
a7:52:49:7d:8e:0e:3d:6e:99:21:df:83:9e:8a:c5:
d4:66:bb:d9:0c:b1:ed:6e:ac:c8:da:af:03:74:42:
34:70:7a:c0:8e:79:b5:4e:df:a0:80:a0:f9:9c:a3:
ad:67:66:7b:7e:6f:d8:b4:84:d0:ef:44:a2:b1:55:
75:b3:01:cd:a3:8b:ad:a7:ba:9d:2c:87:c9:7c:ad:
c8:d5:e6:4f:d0:d0:a2:a2:c0:e7:92:fb:4f:e4:76:
46:cb:9e:51:d4:ba:94:23:7e:2b:29:21:10:f2:2c:
e6:8b:ad:43:ea:43:8a:68:22:70:e8:13:bf:a6:3d:
ed:23:0a:c3:90:be:20:17:47:7b:fe:05:80:73:78:
4d:1b:1a:35:4b:f9:41:14:18:90:51:bc:af:13:6f:
39:e1:c0:71:d1:cd:34:67:12:1b:4f:cd:fd:05:8f:
ec:65:60:7e:ea:8a:c6:cd:96:23:2b:5c:dd:f8:2f:
b6:a6:8f:38:b7:2e:7d:06:a7:9f:1b:01:7e:29:09:
a5:a0:b5:4d:32:bb:d1:c6:e7:b6:7a:c2:d8:f3:40:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:29:BB:53:A3:2D:80:96:1C:25:6C:3A:03:17:CA:6D:79:C6:D1
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/ykMpu1OjLYCWHCVsOgMXym15xtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.228.237.0/24
188.86.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:de:07:4e:3a:57:b5:7e:cd:c9:ac:d0:5b:a3:a4:5c:3c:fb:
43:e3:19:80:a0:8f:39:e7:94:a8:99:b7:e8:48:60:70:57:82:
88:1f:1e:87:54:1b:89:ef:ef:bc:1d:9b:de:6d:97:c3:68:35:
d6:b0:1a:46:a5:5b:b7:7e:3f:4a:2c:4c:c9:08:ea:54:61:0b:
24:f4:6a:5d:a3:24:13:f1:76:2e:b6:6a:57:3d:55:7d:a2:be:
68:6a:d8:59:8b:10:65:b9:f8:a3:c9:c7:49:38:69:08:bb:09:
5b:e0:ae:c4:6d:bc:15:41:15:7b:ed:de:d9:0b:77:78:9e:a4:
9a:58:a8:5b:86:b6:6e:c8:ec:c4:53:89:97:f7:08:8b:78:8b:
63:c4:92:f4:53:78:8a:72:a7:a8:cb:5d:0a:2e:e3:3d:1b:1b:
7c:dd:b9:df:3e:a6:fc:1e:b6:dc:64:ad:2c:e8:0f:db:b6:8b:
5f:66:ba:e9:25:d9:e0:bc:14:e1:85:f5:fa:d8:3d:ab:67:ed:
d4:a3:a5:d9:2e:7e:1e:c8:32:56:a8:26:fb:46:7b:cc:6d:77:
7a:e2:65:c3:21:3c:ee:09:01:b4:01:be:c2:67:57:30:d6:42:
79:c4:05:bd:78:89:ea:92:a9:27:df:62:78:24:0a:4f:b9:85:
4d:24:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:01 2025 by rpki-client