Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/RYZ_HUggvvOzHTuXBACbgajQpo0.roa
File: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (raw, json)
Hash identifier: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=
Subject key identifier: 45:86:7F:1D:48:20:BE:F3:B3:1D:3B:97:04:00:9B:81:A8:D0:A6:8D
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019426D9A3954C60D0E9A89434F891767ED8
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/RYZ_HUggvvOzHTuXBACbgajQpo0.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2852
IP address blocks: 147.32.0.0/16 maxlen: 24
193.84.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a3:95:4c:60:d0:e9:a8:94:34:f8:91:76:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45867f1d4820bef3b31d3b9704009b81a8d0a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:09:e8:87:82:d1:e8:51:76:bd:d2:fc:bc:
39:33:ca:62:11:9d:51:8b:e0:14:66:3f:49:77:e0:
e8:0d:72:4e:77:0c:e7:e8:9d:eb:fe:3b:e8:30:93:
ba:83:d3:8c:66:3d:1b:7c:f7:b3:22:93:bf:07:a3:
2d:be:92:2b:67:8c:dd:8d:57:a7:f3:d9:70:5f:d3:
be:96:76:5c:ae:30:89:a1:14:c4:e6:6d:82:79:aa:
a9:38:dd:a9:b0:e1:e5:84:9a:69:7d:ed:6f:0e:f0:
c4:08:0e:f6:e3:24:c9:0c:e9:9e:bd:a5:f0:d5:c5:
02:4a:1e:82:fa:92:61:ef:a2:08:ab:dc:73:10:37:
6d:9a:e5:25:f1:64:ce:be:18:96:1a:4b:5e:09:ee:
47:4a:5d:16:a2:89:ea:91:6f:9f:ea:7f:c8:b4:cf:
30:d9:28:8b:9c:55:fb:54:bf:ae:30:1a:9b:bb:95:
52:20:77:b5:de:44:7b:db:2a:7e:85:1a:ff:8a:e2:
8e:6d:be:08:b1:0e:ae:94:3b:d1:7b:bf:d6:2c:c7:
4b:ab:ba:0e:54:70:bf:54:dc:6e:8a:ec:71:4a:3f:
d1:9f:51:25:b6:01:43:7e:89:ff:aa:d2:e1:ed:27:
a8:65:a6:c4:fe:46:72:1d:c0:f1:e8:96:a4:87:30:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:7F:1D:48:20:BE:F3:B3:1D:3B:97:04:00:9B:81:A8:D0:A6:8D
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/RYZ_HUggvvOzHTuXBACbgajQpo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.32.0.0/16
193.84.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:0e:6d:7f:64:85:9d:84:7d:60:87:98:e9:58:fa:4a:fa:e4:
5a:e9:76:fe:bd:88:47:92:41:e8:d3:94:6f:88:1e:93:a5:5f:
26:1d:f8:d8:ef:83:cd:1d:e6:c8:de:19:0e:4d:4d:48:9c:8b:
de:33:4b:5d:10:fc:95:5e:9f:44:ec:34:86:d7:b8:37:ab:c4:
e6:f6:4b:44:2a:ec:c9:4e:f6:4e:a0:fa:87:b3:2f:be:50:c4:
c1:e2:f3:a0:11:7f:4c:e1:f7:09:07:54:ce:f0:a9:09:c3:1c:
97:53:a9:46:2b:6a:dc:a8:d1:5c:4b:d2:b9:3c:1b:8f:55:6b:
63:22:42:60:fd:fe:4d:9b:e5:41:78:46:15:73:03:ed:9f:d1:
c9:de:89:25:36:e4:74:4d:bf:a3:4a:4b:d6:0d:ec:7b:4a:c2:
f6:9a:d3:06:48:eb:90:5e:00:02:2f:1f:79:5e:48:11:49:1a:
c9:c4:f7:7a:2e:38:d0:d6:39:53:40:f7:ed:53:c9:cc:1d:14:
fb:2e:46:ec:b5:6e:4a:de:0a:37:6c:d9:29:68:7c:b3:dd:58:
6a:6a:77:23:82:0e:ac:9c:10:72:fa:2e:17:34:fa:8e:38:04:
80:b8:93:c8:4f:7a:06:cd:47:20:bd:66:2b:68:24:d2:5f:32:
66:83:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:39 2025 by rpki-client