Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YvGTICIQPtclpMrYwq9cvhdFKOI.roa
File: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (raw, json)
Hash identifier: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=
Subject key identifier: 62:F1:93:20:22:10:3E:D7:25:A4:CA:D8:C2:AF:5C:BE:17:45:28:E2
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 01942369EF6211A6BF7CDF91630D8CE61971
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YvGTICIQPtclpMrYwq9cvhdFKOI.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199871
IP address blocks: 195.149.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ef:62:11:a6:bf:7c:df:91:63:0d:8c:e6:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62f1932022103ed725a4cad8c2af5cbe174528e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:c5:f8:4f:e0:3b:9b:82:96:29:2f:ee:bc:
05:50:4b:4e:7e:a5:89:da:3f:bc:69:80:56:bf:25:
9e:9b:46:5c:60:73:8a:b1:36:99:98:59:4a:7a:8f:
d2:02:69:8d:d4:fc:85:43:76:49:fa:a0:72:7f:88:
33:80:d4:3b:87:de:4d:a1:21:ad:63:ed:cf:af:9b:
fb:d2:8a:3f:bf:a1:ba:ef:e5:f4:df:f8:bb:6a:ec:
45:59:5b:08:d6:80:6c:ef:96:f9:71:17:96:4e:0e:
00:0f:20:b5:4a:5d:25:8d:c2:3e:04:78:ad:73:bf:
0b:3d:8b:ce:97:fa:d0:20:18:0f:53:74:07:33:9f:
05:46:22:a2:21:74:54:ee:cd:e9:60:18:b6:e1:dd:
e5:8b:a8:e4:ba:fd:2c:e6:c3:fe:21:75:5e:60:f7:
5c:8d:15:a6:9a:d6:52:5b:c4:78:f0:de:31:29:ca:
3b:a7:7d:ae:9b:73:2e:8e:03:4c:b5:b1:38:d1:70:
31:27:56:f9:1a:49:91:9c:cc:18:8b:79:04:3a:3f:
40:da:06:90:f4:db:65:28:cb:a1:f8:2b:bb:52:4a:
b3:14:fe:65:31:a7:35:ac:97:9b:cd:db:88:41:72:
1c:25:6e:47:3c:df:c2:cf:4b:27:d9:86:37:95:17:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:93:20:22:10:3E:D7:25:A4:CA:D8:C2:AF:5C:BE:17:45:28:E2
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YvGTICIQPtclpMrYwq9cvhdFKOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4f:44:d3:66:f9:e0:b2:3e:90:5f:b1:31:c8:66:e9:71:e2:
c8:2f:63:a7:d7:84:49:6e:e9:3f:f8:26:7b:40:e6:f9:ed:bc:
93:ec:fe:41:b1:49:3b:b2:96:1a:98:d2:fb:f4:f1:dc:52:ac:
11:70:71:38:10:c9:64:d0:e0:ce:04:43:40:3b:00:d9:f9:a0:
96:6c:ca:ab:d4:cc:20:65:78:6d:08:e3:38:41:78:a6:08:a0:
f5:6b:6b:29:39:57:a3:83:11:45:ae:6c:7c:5f:0b:f7:46:31:
c2:15:9c:a7:cd:2c:e3:95:85:a7:db:17:f4:87:01:3a:fb:c1:
58:60:a7:79:be:00:0a:5f:06:e1:4c:61:8a:0f:48:ad:a4:ce:
41:ca:ac:96:a3:98:97:b4:e1:1c:78:9f:5c:68:4f:72:8b:e5:
70:0b:36:a8:5c:3e:7e:ac:0e:3a:bd:0f:e5:20:02:dc:a3:d2:
99:26:16:0e:b2:3c:b2:f1:1a:47:f7:74:2a:4b:6d:a0:1a:21:
f9:e2:67:ed:80:7f:c4:ca:bf:88:ce:27:cb:38:9a:8f:4a:fd:
c5:0d:91:1c:3c:d0:5b:23:ca:44:de:93:c2:01:fb:62:b4:ed:
80:54:cb:44:a5:e8:ff:27:c3:d6:01:18:15:ae:2f:c4:23:19:
a5:2f:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:26:57 2025 by rpki-client