Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YLQ6Q66s4Ebvl-SNz3GUFY3ZvwE.roa
File: YLQ6Q66s4Ebvl-SNz3GUFY3ZvwE.roa (raw, json)
Hash identifier: vrr+Mmk4FDL3155TGUosZO3CchIqFO9eUFl6Y3sIUBo=
Subject key identifier: 60:B4:3A:43:AE:AC:E0:46:EF:97:E4:8D:CF:71:94:15:8D:D9:BF:01
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067E33853BD06E9792035471C458E95
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YLQ6Q66s4Ebvl-SNz3GUFY3ZvwE.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216381
IP address blocks: 194.209.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e3:38:53:bd:06:e9:79:20:35:47:1c:45:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b43a43aeace046ef97e48dcf7194158dd9bf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:0a:04:3b:63:0b:a9:e6:08:23:98:47:f0:
ff:17:57:15:05:40:99:c8:53:de:c4:0b:93:ed:93:
21:25:64:a5:0c:ba:70:3c:04:08:89:d6:a4:86:db:
67:dd:0c:26:b0:5e:03:20:8e:b7:35:35:0e:f5:09:
07:36:4f:98:2c:e1:c7:3e:95:aa:e2:4f:0f:43:7a:
8e:fb:9a:d3:ee:1f:ce:02:bb:34:4e:15:3b:2d:b2:
25:9a:27:0b:b7:bb:de:e7:05:32:b5:6e:e3:8c:5e:
e7:75:03:81:77:80:77:ec:39:58:92:2c:78:5d:c3:
3c:c7:1e:b5:aa:5f:2d:ff:dd:94:82:21:6a:8d:6f:
a3:99:9e:0c:2e:c8:1c:63:d1:f0:73:34:38:89:31:
be:f9:06:bb:ab:8e:fc:a1:d0:2c:6d:e9:07:95:be:
a1:dc:1e:bf:e7:4a:15:95:ee:9e:28:bb:bd:a5:72:
69:84:ff:27:8c:00:c3:06:90:33:39:d1:11:d9:2d:
b5:01:4f:ed:10:5d:c7:d7:dc:f8:fb:fd:95:5e:fb:
cf:2c:54:11:8c:dd:cd:7a:53:f9:ff:7f:f0:41:4c:
3f:4f:20:ca:88:b4:94:57:af:7c:d9:dc:cf:94:62:
04:f9:d6:30:a1:ee:0a:e3:e6:37:38:74:5a:3d:40:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:3A:43:AE:AC:E0:46:EF:97:E4:8D:CF:71:94:15:8D:D9:BF:01
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/YLQ6Q66s4Ebvl-SNz3GUFY3ZvwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cd:95:e2:f3:26:cd:55:62:81:7b:f6:09:8e:6b:b5:bc:83:
4e:2c:7f:42:4f:48:0e:cd:0b:f0:ee:9e:7c:6b:94:1d:f4:83:
7a:23:7e:4c:37:7c:72:cf:b4:f9:8f:31:05:da:e6:95:26:f4:
13:2e:e1:12:9e:7e:90:1d:63:a8:d9:59:84:7c:e6:5c:06:76:
2c:4f:91:1c:43:9c:2b:f9:e8:87:5f:e1:2a:f5:40:1d:93:21:
34:1c:72:34:e5:bb:1c:0c:e0:4b:8a:be:7d:da:0f:36:b7:bc:
a4:86:7f:44:bf:27:90:5d:5c:7c:74:a1:7f:f1:8f:a1:ad:ad:
2f:68:ca:68:c9:a0:b5:af:94:f2:47:e8:79:5f:68:17:03:2e:
39:8f:3a:42:fa:04:2d:79:81:e5:fd:2f:76:e3:1a:9e:16:3a:
f1:4d:32:80:ab:48:f5:46:5d:7a:0a:e6:01:cd:bd:8f:bf:cc:
2b:f6:ba:21:ec:d9:27:0a:3e:d3:7f:c1:75:2b:8a:f7:93:bf:
7c:ce:18:49:8d:a1:a7:19:e0:e3:f5:68:aa:8e:1e:3b:3c:7a:
6a:50:92:9f:0b:6b:44:1d:2c:01:6f:ab:4f:ee:2a:52:c9:78:
59:56:44:a1:da:b5:b7:09:72:d5:32:fe:d1:a7:1d:dc:02:89:
6b:de:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:03 2025 by rpki-client