Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Ylh0fw9kcwnCy2vgTQX9shlegWA.roa
File: Ylh0fw9kcwnCy2vgTQX9shlegWA.roa (raw, json)
Hash identifier: DVyC8PSQe0rTzi2pDjlYi3xWXdCvuv5Lwza7vDtRow0=
Subject key identifier: 62:58:74:7F:0F:64:73:09:C2:CB:6B:E0:4D:05:FD:B2:19:5E:81:60
Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial: 01941FFA6AE445CF8D1C01A6D333AEAE8228
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Ylh0fw9kcwnCy2vgTQX9shlegWA.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25252
IP address blocks: 170.102.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:e4:45:cf:8d:1c:01:a6:d3:33:ae:ae:82:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6258747f0f647309c2cb6be04d05fdb2195e8160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:23:0c:2e:b8:02:5e:9c:f1:ef:9e:15:71:
26:9b:b6:d2:b1:d6:be:7b:48:00:29:c4:c6:04:94:
a3:49:68:55:b8:e0:80:11:ca:1c:ee:2b:9f:dc:b3:
0a:66:f4:fa:e3:aa:a3:48:0d:bf:0b:17:29:93:a2:
13:d5:a4:41:40:13:9f:d7:8f:dd:3f:18:e3:5d:5b:
e1:f6:0c:d0:cb:5d:a3:a3:74:29:4a:71:8d:9e:a6:
14:4e:a8:65:1a:51:9e:2f:e0:a7:5b:30:59:f4:e6:
87:de:12:9a:ee:5b:ef:8d:f3:77:ba:f7:84:2f:f5:
4f:c8:c2:e1:40:31:e2:5d:0b:39:47:2d:d0:be:ec:
09:af:60:06:f5:52:73:8a:74:1c:3c:61:8c:5d:c4:
8d:cd:d0:0b:da:88:6e:f6:6b:ec:ed:66:61:ac:13:
bf:a2:f8:c6:6a:fe:95:92:8c:c9:63:ee:51:c6:18:
cb:7d:1e:68:11:2e:7b:a3:78:1f:dd:fb:37:fe:71:
4f:eb:7b:fc:07:49:0f:cb:b1:23:3b:56:00:d5:f2:
78:55:73:5a:9e:cb:fc:59:a7:b1:51:bf:78:cd:d4:
ed:a6:1d:95:7f:c7:0b:60:c0:f5:f2:9d:e8:14:e4:
1a:22:b3:ce:e9:a2:3f:ca:e0:b1:76:93:12:8e:17:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:74:7F:0F:64:73:09:C2:CB:6B:E0:4D:05:FD:B2:19:5E:81:60
X509v3 Authority Key Identifier:
keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Ylh0fw9kcwnCy2vgTQX9shlegWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.102.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a5:c9:ef:d4:0d:08:6d:ab:dc:16:45:ff:7a:05:b6:b1:38:
bb:09:c5:5a:65:35:46:7b:af:e7:b9:df:ab:4f:ee:6b:d3:99:
61:f3:85:1c:90:ba:76:74:98:5c:d4:ac:ef:35:ea:3e:0e:4a:
7d:48:da:4e:94:9c:5a:be:20:81:1b:c5:e5:22:5e:55:28:34:
ae:17:3e:39:f0:9a:e8:77:9a:1c:8a:08:b4:de:59:97:99:a8:
5a:45:5f:b4:cb:d9:55:27:cd:22:40:b4:cd:15:93:52:0d:bf:
c9:9a:d3:7f:64:fb:99:94:25:75:17:c3:98:ba:76:2c:74:1b:
44:1d:50:2d:bb:c3:0c:57:e5:e1:34:13:b1:91:d5:6a:4d:60:
d3:2c:cd:4d:ca:a6:c7:7f:d4:d0:94:92:0f:af:77:53:61:71:
46:91:0e:44:b5:17:7a:9e:e8:62:47:40:1d:9b:94:91:69:b2:
22:0e:db:a3:61:9e:93:95:bd:8d:73:77:a4:f5:b8:c6:ca:b8:
88:85:27:36:4a:cb:16:ac:5d:71:6e:85:bc:a5:1a:e4:37:5f:
b6:a8:50:74:2c:44:1e:10:cf:0c:5f:b8:d8:4b:a5:d6:ad:0d:
f3:a5:c4:87:9b:39:a4:05:a4:8d:37:79:bc:b8:8e:30:e8:98:
da:81:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:25:40 2025 by rpki-client