Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/y7a_bUOU494snE7qs9jZFYoXSM8.roa
File: y7a_bUOU494snE7qs9jZFYoXSM8.roa (raw, json)
Hash identifier: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=
Subject key identifier: CB:B6:BF:6D:43:94:E3:DE:2C:9C:4E:EA:B3:D8:D9:15:8A:17:48:CF
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 01942143CB59E3380B4B4B45403DF74EE645
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/y7a_bUOU494snE7qs9jZFYoXSM8.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210222
IP address blocks: 193.176.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:59:e3:38:0b:4b:4b:45:40:3d:f7:4e:e6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb6bf6d4394e3de2c9c4eeab3d8d9158a1748cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:f4:46:37:ea:78:6f:1d:0a:6d:15:82:8d:
8f:14:66:14:4a:48:06:75:96:60:cf:28:07:66:43:
8f:97:64:bf:e3:4b:1b:39:cf:7f:41:26:12:71:ea:
18:b3:88:a2:51:ae:03:83:37:87:e5:fe:83:8a:67:
53:b4:29:bf:a2:e3:5e:59:cb:2d:84:d7:69:4f:49:
05:02:69:98:2d:e1:21:fa:0e:a6:80:58:cc:40:bf:
f9:fd:e8:4d:a4:7e:7e:2e:9a:59:6e:96:87:99:80:
03:25:b1:b4:70:49:77:69:9e:4c:fb:9c:f4:75:70:
2e:05:f0:e7:77:96:07:f3:26:83:8c:98:2a:c1:7a:
35:d1:5f:82:13:f1:1c:e1:39:a5:15:00:75:a4:90:
2a:03:ba:87:86:7b:57:07:a4:a4:36:53:96:5b:1f:
b1:a8:af:1e:0f:61:2e:62:f2:01:cd:10:dd:cb:e0:
02:7c:07:ab:5d:d6:c4:1d:5a:b2:ac:50:79:83:6f:
3b:7f:54:64:2a:cc:6d:67:3c:b7:e9:36:23:e9:f8:
1b:c0:3a:7a:b8:8e:82:26:c2:1e:3f:e7:5f:ec:3c:
25:5f:e5:5c:44:da:1a:1f:90:2f:41:9a:a7:2b:47:
d5:78:d0:d8:72:dc:69:f2:05:cb:a7:86:5f:cd:eb:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:BF:6D:43:94:E3:DE:2C:9C:4E:EA:B3:D8:D9:15:8A:17:48:CF
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/y7a_bUOU494snE7qs9jZFYoXSM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:aa:99:fc:f9:e3:d3:27:c2:c1:5f:0e:1a:67:78:72:51:61:
b0:54:f3:a8:ce:1c:30:b4:50:26:ca:d7:48:71:a2:57:b1:b3:
86:0d:ee:75:64:b4:41:2d:c4:75:18:44:c0:b2:c5:7e:28:81:
ef:8b:35:19:4a:4a:5a:6d:d5:18:6f:37:b6:c3:35:53:25:16:
46:89:67:b2:be:58:93:5d:9b:de:d9:bc:4a:c4:96:1e:5c:2a:
b7:59:70:e9:a9:e7:12:05:c6:ec:11:1b:7c:a7:eb:24:a3:c7:
66:0d:1e:6f:9e:ce:cb:64:0a:3a:8c:dd:4f:2a:ae:21:4b:2b:
98:39:97:36:73:d4:03:ea:f7:be:42:4a:d5:2c:a4:98:58:8c:
b0:53:8c:d1:5a:1b:d5:5e:36:17:4d:8b:83:4a:ed:10:0b:5d:
05:97:1c:82:e0:6c:ba:a3:0a:85:7c:60:53:20:2a:1c:b4:b9:
b1:d0:ca:e1:e4:0f:85:99:ca:84:e1:d7:bb:65:c9:45:a5:b9:
6f:1f:83:1c:d6:db:18:2e:05:e7:98:f7:4c:92:bc:56:72:c7:
ad:4f:47:c9:2a:e9:cb:69:d2:dd:ec:ab:f9:d4:9a:c5:2f:f4:
9b:53:5a:62:da:86:ba:7c:29:52:cf:bd:7a:1f:19:20:e1:5f:
fc:52:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:55 2025 by rpki-client