Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa
File: yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa (raw, json)
Hash identifier: UK4ZT9heAIw8jcnXNcqfBznXiBKMuH0NwH/ajGH3z/U=
Subject key identifier: C8:61:31:BF:A6:93:DB:3C:30:AB:81:3A:E1:1E:0F:43:B6:57:6E:35
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 0194282629DF172B8658C241F6B48772C74C
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa
Signing time: Thu 02 Jan 2025 17:52:57 +0000
ROA not before: Thu 02 Jan 2025 17:52:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202062
IP address blocks: 193.31.16.0/23 maxlen: 23
193.31.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:29:df:17:2b:86:58:c2:41:f6:b4:87:72:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jan 2 17:52:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c86131bfa693db3c30ab813ae11e0f43b6576e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:b3:d5:4e:90:6f:01:04:35:66:92:98:bc:
e9:5b:05:41:95:88:fe:4b:a7:56:79:4b:94:4b:65:
9a:b5:d5:66:5c:a2:e5:fb:ab:7e:bb:8a:fc:f2:70:
8f:f7:0b:96:e0:a7:1f:06:a4:1c:cf:e4:92:f7:7a:
3f:4a:f2:d6:33:06:1f:b3:f0:00:67:9c:87:88:1d:
bb:80:18:c9:ad:69:ef:77:04:ff:38:7c:ce:47:ab:
35:3b:72:b0:1d:a8:e1:1c:8b:90:18:1c:ea:94:16:
c7:10:b5:0d:97:b3:70:b7:a1:76:cf:9d:b1:f4:b8:
d0:9b:77:ce:cf:0e:31:eb:88:0b:5e:36:0b:5d:bf:
c7:98:90:5e:cd:02:5b:5f:3c:b7:3d:f3:d0:4a:d9:
1c:77:08:82:1a:45:5a:42:f5:92:c9:f2:33:9d:66:
18:5c:3a:bb:cb:ce:67:06:cb:32:05:38:c4:8f:51:
07:b1:90:15:7b:79:93:f6:fd:a3:ec:13:b5:6f:4b:
20:f3:6f:79:3f:73:c0:bb:01:82:df:7b:33:40:46:
08:6a:cf:69:0f:4d:91:b1:9e:1d:c2:fe:64:f8:73:
d1:e7:15:9c:1e:33:51:a3:1a:9d:91:b1:95:9f:dd:
ae:bb:08:f9:8c:78:c8:73:1b:e1:f0:66:14:f5:58:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:31:BF:A6:93:DB:3C:30:AB:81:3A:E1:1E:0F:43:B6:57:6E:35
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.16.0/23
193.31.254.0/23
Signature Algorithm: sha256WithRSAEncryption
74:dd:c0:8e:e8:68:dd:7b:3a:ac:4a:69:78:c6:c8:66:ff:6b:
46:10:a7:43:f8:15:6d:e6:89:e9:40:c6:4e:a1:dd:d2:36:b0:
88:fb:59:74:fa:31:6d:22:39:09:87:d3:21:2e:49:02:89:34:
f2:9b:46:9f:c2:30:77:b7:c7:47:7e:8b:c5:fe:65:d8:24:e9:
b4:c2:35:12:3d:26:a6:23:f9:47:37:e4:17:15:6c:40:22:00:
29:87:8a:f2:58:a9:b2:e7:f9:1b:44:60:1e:57:2b:3f:1e:b3:
fa:23:c7:70:f9:09:13:d8:fc:a6:1f:f0:87:a5:d4:10:a6:02:
56:b0:49:4b:a3:6d:c9:52:82:c4:1e:d3:59:ea:36:11:7f:da:
9d:6e:32:62:c3:a3:be:1f:19:4e:3b:54:75:61:b7:e6:b9:2a:
cb:8d:73:af:f9:04:7b:17:dd:b7:1c:99:2c:83:84:9f:fd:aa:
49:ef:c6:4f:d2:a8:36:67:18:fc:c5:25:57:a0:95:da:76:1b:
26:ff:47:59:b8:2f:af:07:de:77:83:aa:1e:f8:5b:31:42:27:
aa:9b:5b:0c:d1:3d:0b:69:8d:5f:4b:ea:35:69:6d:40:c2:45:
7c:0e:9f:0a:42:2d:64:28:40:77:62:d6:fd:34:97:67:1f:13:
b3:9a:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:01:48 2025 by rpki-client