Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HyY-aEZc0gA1Yers9OqfVGwfJRM.roa
File: HyY-aEZc0gA1Yers9OqfVGwfJRM.roa (raw, json)
Hash identifier: +1hxHpJoYNpmQEMEoFMBrkMHPU0fJZa9of5sD5wL6P8=
Subject key identifier: 1F:26:3E:68:46:5C:D2:00:35:61:EA:EC:F4:EA:9F:54:6C:1F:25:13
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0195717D6D0A9DABCFB4923AF4E1B09A74A7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HyY-aEZc0gA1Yers9OqfVGwfJRM.roa
Signing time: Fri 07 Mar 2025 16:43:19 +0000
ROA not before: Fri 07 Mar 2025 16:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35278
IP address blocks: 213.109.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:7d:6d:0a:9d:ab:cf:b4:92:3a:f4:e1:b0:9a:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 7 16:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f263e68465cd2003561eaecf4ea9f546c1f2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:c9:8a:70:b8:c8:39:51:60:15:50:46:ff:
cf:e2:44:1d:71:3b:5f:dd:1e:70:03:33:98:84:a8:
bd:37:0f:dc:41:fd:99:35:72:bd:5b:f3:b1:2d:fa:
8f:0a:e5:97:8d:ca:59:8d:96:a6:4d:a6:93:69:2c:
17:dc:c4:85:92:ef:82:05:93:54:4f:f7:0a:de:64:
89:b6:ee:31:4d:aa:36:ee:07:8a:09:60:f6:df:91:
15:3b:25:74:b2:52:c2:5d:37:8b:72:2a:b9:dc:39:
09:31:77:0c:85:e0:c8:59:d1:c8:81:de:3b:f3:c0:
c0:14:49:8a:6f:98:27:86:be:6f:17:1d:51:8d:e7:
91:ce:b4:ec:cd:f9:7c:12:88:52:36:79:aa:f7:f1:
ae:24:87:3d:97:aa:d2:a6:6c:e7:d8:fa:66:c8:fd:
0e:f4:dd:db:eb:7a:01:5a:0c:04:a1:6a:d3:38:d3:
64:b1:d2:a3:69:5e:ed:31:7c:61:6f:a6:09:72:85:
da:f8:84:bb:86:0e:54:a5:fd:b4:b7:81:34:d8:3c:
81:42:e8:4b:ea:4a:10:f7:4c:85:23:cd:61:c1:49:
7d:97:22:b8:f5:90:62:36:a5:0b:e3:9f:cc:9b:3f:
0c:43:be:96:5c:33:b7:4d:63:d5:f4:d1:a2:fe:d1:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:3E:68:46:5C:D2:00:35:61:EA:EC:F4:EA:9F:54:6C:1F:25:13
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HyY-aEZc0gA1Yers9OqfVGwfJRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.202.0/24
Signature Algorithm: sha256WithRSAEncryption
63:06:40:18:92:b3:fa:7d:b1:57:ba:c4:31:80:c9:ab:a2:76:
b9:bb:57:e4:9f:ab:f2:93:4e:fb:3d:b7:bd:db:29:18:d2:ef:
03:8c:46:fe:de:97:73:57:7e:76:04:de:7d:fc:65:47:bd:4b:
e1:01:33:8b:28:04:97:78:0f:6c:09:0f:c9:fb:f8:c5:3f:78:
56:1b:04:ca:fd:79:ac:8d:c1:59:0f:f7:29:00:39:18:d5:3a:
8b:a5:29:f3:b8:be:d1:ee:ec:a8:57:60:6c:a1:9a:db:55:62:
47:56:06:3b:55:ae:9e:b0:36:fc:8e:6f:84:de:7e:54:b1:cd:
10:ad:a3:37:82:c7:c4:f5:3e:98:14:c3:f9:35:78:9b:ff:a9:
ca:34:73:15:6b:cc:e4:69:0a:7b:1d:57:ab:b4:db:91:39:99:
99:e1:af:5b:f5:4d:0a:a9:ad:88:57:e9:36:98:d6:7b:79:50:
79:aa:de:48:05:2e:c1:17:1f:9e:f7:14:76:a3:db:71:97:a9:
02:93:ef:f5:8c:6b:4c:5b:3f:d8:5c:58:b4:91:e8:bc:97:3e:
ec:b8:fb:dd:4e:0c:dc:57:3d:e5:39:a2:88:6c:0a:fa:85:9e:
b8:f6:f7:f4:8e:1c:2b:72:08:7b:c7:37:dc:d8:6b:4f:1f:89:
51:77:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:56 2025 by rpki-client