Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa
File: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (raw, json)
Hash identifier: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=
Subject key identifier: 60:B9:44:E6:9C:53:75:2E:AD:83:FA:CC:25:98:87:44:90:81:B7:3D
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019422202F9B54F3EE7F44D5620FF86ACEE1
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210972
IP address blocks: 45.95.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:9b:54:f3:ee:7f:44:d5:62:0f:f8:6a:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b944e69c53752ead83facc259887449081b73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:de:a3:7b:c5:8f:2b:22:82:bb:24:a2:04:
f1:0e:68:e6:d8:21:63:2a:e2:e5:0a:dc:ff:0f:6a:
c2:99:9e:71:a3:3d:fd:04:93:61:07:3b:21:7c:a2:
f9:23:a9:66:2a:a1:ca:c8:c4:35:02:3f:3e:48:12:
cc:db:ad:d7:80:22:91:96:b5:44:32:6e:3a:66:80:
8c:04:3d:4d:3c:9e:ce:80:37:98:42:b7:65:fc:d7:
11:eb:4d:dc:b3:79:da:f6:79:24:ab:3c:1e:a1:ba:
82:9e:45:2a:0c:c9:88:f2:7c:40:66:c1:fe:67:7c:
8d:55:27:43:23:b5:7d:de:4e:4b:84:99:f2:eb:71:
6e:81:05:06:9c:7e:42:f4:4d:46:b6:37:39:02:12:
be:ea:ee:3d:e7:cb:52:12:1a:64:99:93:ae:04:f0:
db:94:6a:23:e7:43:79:9f:ac:f9:42:cd:60:d5:68:
29:43:66:36:e5:2a:68:d3:6c:4c:33:c4:37:df:3d:
d0:95:36:d0:cf:30:59:b7:a2:d1:d7:d5:ff:6f:9a:
b6:f4:ad:21:ef:18:2a:1a:27:4a:a7:6b:75:3e:28:
cb:b8:48:61:41:db:d2:ae:c7:8b:8a:fb:3b:c4:e0:
79:d5:e9:ab:df:3b:6d:a8:9b:59:db:fc:ff:b2:dd:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:44:E6:9C:53:75:2E:AD:83:FA:CC:25:98:87:44:90:81:B7:3D
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
41:66:63:58:e2:04:0c:69:67:5c:82:1f:ee:9f:75:15:28:fa:
52:77:f0:95:68:7e:f8:1f:d9:1d:e5:0e:29:04:f0:61:8c:ac:
9d:db:cc:49:67:72:0b:2c:2e:5f:eb:e8:d8:61:9d:0d:0c:5a:
c1:5f:d7:74:60:2c:14:db:0a:05:65:c1:9d:2b:a3:c5:a2:27:
50:ed:87:57:27:95:cc:a3:01:69:42:ec:84:68:a1:8c:fb:1c:
0f:dd:6e:51:f3:47:4b:ba:2e:15:ec:2e:b6:72:55:8a:fa:a7:
53:e3:ac:5e:ff:71:ff:22:80:aa:d0:b6:f6:19:81:0d:6c:43:
cf:d2:3d:b7:5f:79:2c:21:36:64:69:a3:4e:00:f9:80:42:29:
87:bd:b8:81:d7:93:2e:97:7d:61:3e:bc:d9:1b:44:eb:93:a6:
c2:b3:e1:e2:71:4e:40:15:88:05:ae:ae:27:0c:71:fd:c9:6a:
c6:9c:d9:5d:57:6a:6e:d8:b5:7d:2d:e0:66:ea:86:91:a2:42:
03:97:69:35:0b:77:a9:df:46:5c:43:7b:76:87:1f:be:17:34:
be:06:5a:b9:97:80:e8:d2:6d:3e:ff:db:f4:1d:9b:95:ec:5d:
56:20:fb:98:10:c1:18:27:26:41:66:b4:21:36:6d:e6:7b:d3:
93:14:60:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIC+bVPPuf0TVYg/4as7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4
MWQyMDQwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGI5NDRlNjljNTM3NTJlYWQ4M2ZhY2MyNTk4ODc0NDkwODFiNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuXeo3vFjysigrskogTxDmjm2CFj
KuLlCtz/D2rCmZ5xoz39BJNhBzshfKL5I6lmKqHKyMQ1Aj8+SBLM263XgCKRlrVE
Mm46ZoCMBD1NPJ7OgDeYQrdl/NcR603cs3na9nkkqzweobqCnkUqDMmI8nxAZsH+
Z3yNVSdDI7V93k5LhJny63FugQUGnH5C9E1Gtjc5AhK+6u4958tSEhpkmZOuBPDb
lGoj50N5n6z5Qs1g1WgpQ2Y25Spo02xMM8Q33z3QlTbQzzBZt6LR19X/b5q29K0h
7xgqGidKp2t1PijLuEhhQdvSrseLivs7xOB51emr3zttqJtZ2/z/st3h/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGC5ROacU3UurYP6zCWYh0SQgbc9MB8GA1UdIwQY
MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct
MWMyMmVmZjcyODE4LzEvWUxsRTVweFRkUzZ0Z19yTUpaaUhSSkNCdHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4
LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9zMA0G
CSqGSIb3DQEBCwUAA4IBAQBBZmNY4gQMaWdcgh/un3UVKPpSd/CVaH74H9kd5Q4p
BPBhjKyd28xJZ3ILLC5f6+jYYZ0NDFrBX9d0YCwU2woFZcGdK6PFoidQ7YdXJ5XM
owFpQuyEaKGM+xwP3W5R80dLui4V7C62clWK+qdT46xe/3H/IoCq0Lb2GYENbEPP
0j23X3ksITZkaaNOAPmAQimHvbiB15Mul31hPrzZG0Trk6bCs+HicU5AFYgFrq4n
DHH9yWrGnNldV2pu2LV9LeBm6oaRokIDl2k1C3ep30ZcQ3t2hx++FzS+Blq5l4Do
0m0+/9v0HZuV7F1WIPuYEMEYJyZBZrQhNm3me9OTFGBk
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:41:59 2025 by rpki-client