Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/1y00I_lr4dZnPswtulIObxWKqNI.roa
File: 1y00I_lr4dZnPswtulIObxWKqNI.roa (raw, json)
Hash identifier: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=
Subject key identifier: D7:2D:34:23:F9:6B:E1:D6:67:3E:CC:2D:BA:52:0E:6F:15:8A:A8:D2
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019420684833D5AA1574F6A955B05A7D3B85
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/1y00I_lr4dZnPswtulIObxWKqNI.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59586
IP address blocks: 91.240.252.0/23 maxlen: 23
185.148.140.0/22 maxlen: 22
2001:67c:1ba4::/48 maxlen: 48
2a07:6000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:48:33:d5:aa:15:74:f6:a9:55:b0:5a:7d:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d72d3423f96be1d6673ecc2dba520e6f158aa8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:35:e8:a6:b7:1b:43:a9:61:0e:26:8e:a2:
05:a0:24:79:b8:15:0e:34:d5:f6:38:d8:21:c2:fc:
ab:6c:41:09:1f:29:70:7b:2a:c9:33:44:19:88:ae:
bd:d2:51:4d:61:41:c4:f6:53:21:dd:79:04:bc:86:
c2:d1:3a:e1:8a:a5:56:19:13:2c:ca:c7:56:90:13:
f2:9e:c5:86:f9:72:d7:39:cc:13:87:a3:83:1f:0b:
e9:b5:6f:30:1f:a9:49:9a:ea:72:c1:7a:4c:3d:e5:
7b:c9:8c:19:35:49:9f:a7:d2:74:90:a0:f7:60:bd:
42:6c:bc:3f:70:3b:44:9a:ec:aa:5f:24:c9:6c:9b:
74:cd:d9:68:35:91:d2:55:08:67:b8:5d:05:4a:4b:
0a:fd:e3:a1:22:cf:0f:42:b9:85:fe:ae:97:c6:72:
88:a3:4c:c4:65:da:1c:87:89:60:12:e5:26:23:ef:
bf:46:3c:0a:80:1e:5b:1c:79:ff:95:16:e3:dc:4b:
b5:76:12:d6:8b:c0:17:6d:01:22:da:f0:c6:68:4b:
7b:22:35:db:ac:44:c8:fb:81:78:c6:76:27:e9:7c:
cc:8f:dc:44:9a:c8:b9:f9:e4:1f:1a:1a:dd:4c:91:
04:1e:77:82:68:2a:2a:8d:75:33:e9:e2:16:83:d0:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:34:23:F9:6B:E1:D6:67:3E:CC:2D:BA:52:0E:6F:15:8A:A8:D2
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/1y00I_lr4dZnPswtulIObxWKqNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.252.0/23
185.148.140.0/22
IPv6:
2001:67c:1ba4::/48
2a07:6000::/29
Signature Algorithm: sha256WithRSAEncryption
01:ed:d4:33:c2:1d:8f:4d:e2:79:34:c5:64:fd:67:09:76:f6:
37:68:0e:e9:77:51:9b:1d:99:ef:bc:42:38:29:26:e1:14:3c:
3a:70:13:ac:dc:8c:8a:ea:af:3f:23:5b:cf:6e:b3:a1:0c:1e:
8c:d4:bd:af:b0:e2:f0:7d:43:cb:ff:25:06:bd:b1:eb:4f:ba:
d0:8a:18:c8:60:32:b3:82:7d:ba:e2:96:e0:40:c4:46:d6:51:
50:a6:80:85:03:82:d5:b2:29:2e:14:33:57:d5:9d:ad:bf:ef:
b3:fb:48:64:c7:6b:77:b5:f3:50:64:8e:a2:f5:91:cb:af:78:
31:e3:ac:b3:d3:3c:14:a7:c8:06:1d:ce:84:72:27:5e:d9:af:
2b:b2:ed:1d:34:c8:d4:26:3a:41:3a:9f:b8:b0:4d:81:a0:af:
dc:12:2d:b6:a5:7c:d4:9c:fe:b7:56:22:8e:b7:6e:72:ca:7f:
c3:bd:21:a0:7f:6c:f5:93:1d:a9:57:5c:6b:60:d9:02:21:6a:
bd:a7:2a:43:6d:56:ae:85:dd:b7:09:ff:bf:24:6a:e8:ab:79:
f6:00:62:98:36:7e:4a:c6:96:e7:59:aa:82:31:b0:85:21:e8:
81:a9:ab:4e:18:36:b5:01:71:68:65:b9:a4:9f:8f:e9:0a:e8:
c1:d3:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:08:40 2025 by rpki-client