Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ycYE11LlQ1a-t4T_yP1coVz5lU0.roa
File: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (raw, json)
Hash identifier: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=
Subject key identifier: C9:C6:04:D7:52:E5:43:56:BE:B7:84:FF:C8:FD:5C:A1:5C:F9:95:4D
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 01941FFA9675583E810D95B4E5F896E1C9EF
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ycYE11LlQ1a-t4T_yP1coVz5lU0.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48956
IP address blocks: 37.46.13.0/24 maxlen: 24
37.46.14.0/24 maxlen: 24
37.46.15.0/24 maxlen: 24
45.90.0.0/23 maxlen: 23
91.207.52.0/23 maxlen: 23
91.230.42.0/23 maxlen: 23
91.246.104.0/21 maxlen: 21
195.88.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:96:75:58:3e:81:0d:95:b4:e5:f8:96:e1:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c604d752e54356beb784ffc8fd5ca15cf9954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:c3:bb:9b:39:cf:95:c2:76:d3:4f:00:4d:
2b:40:20:12:93:43:d2:65:6a:3f:3e:7d:51:a4:18:
29:30:e0:5a:23:dd:ef:c5:2f:63:77:58:80:55:4a:
d8:86:72:29:e2:c5:88:c1:61:90:ab:22:01:48:6e:
9f:10:9c:83:49:32:a0:0d:89:c8:e8:88:9d:6d:b4:
9c:3f:88:03:87:be:09:48:b2:7d:ed:2f:19:77:1b:
b3:a5:8f:f7:91:49:33:53:29:4a:76:a3:ff:fb:39:
a3:0d:3c:c2:0b:b7:68:e5:eb:4c:6c:3e:6b:55:01:
4b:2d:23:b0:c9:cd:7b:7c:20:8a:14:ed:59:43:b3:
50:10:85:60:c4:80:8a:e3:1c:ba:84:99:1f:69:b9:
89:f8:63:0e:da:bd:72:89:b2:99:5f:a8:fb:81:75:
c6:d2:cd:45:27:e4:46:9d:82:51:9f:1e:5f:a3:88:
19:c0:a5:3c:67:c9:e3:20:c1:ba:13:d1:a6:a1:d7:
aa:ab:1d:b8:bd:87:72:de:6e:31:b1:8c:f1:80:5e:
3e:5c:fb:2a:4c:13:93:4b:bd:9b:0e:1c:6c:21:8c:
ab:ea:87:43:49:64:4b:28:3d:2a:cb:60:7f:a9:a7:
33:fe:23:a5:29:a2:c1:f0:1d:01:24:2e:e7:cd:17:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:04:D7:52:E5:43:56:BE:B7:84:FF:C8:FD:5C:A1:5C:F9:95:4D
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ycYE11LlQ1a-t4T_yP1coVz5lU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.13.0-37.46.15.255
45.90.0.0/23
91.207.52.0/23
91.230.42.0/23
91.246.104.0/21
195.88.114.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3a:1e:6f:ef:b2:ff:94:24:05:f2:95:71:74:35:c6:ef:ea:
44:15:2b:fc:8a:0a:3b:77:a8:24:60:bd:a1:2d:1f:dc:b1:67:
ea:a1:19:74:0a:02:e3:df:34:76:e6:21:87:f6:fa:d8:70:20:
fc:ad:47:44:b5:c1:51:36:a9:f2:b8:4b:a4:c6:95:d6:70:91:
66:75:d1:a1:ab:45:a2:d6:49:61:9e:a6:c0:f2:e4:57:54:ba:
5d:91:1d:37:09:8c:8a:54:1f:46:0d:59:e2:d8:59:82:af:a7:
68:b6:f7:b4:ff:e8:6e:90:95:89:9b:b9:67:00:9c:cf:51:f2:
43:e5:95:c1:c5:5a:4d:f5:dc:cf:29:88:97:95:8e:7f:64:97:
25:9b:1b:88:75:79:af:0b:af:be:db:ac:3c:ed:39:1c:97:a6:
ff:c3:15:0e:50:86:c3:d7:c2:d0:46:b9:2f:b8:03:5f:72:4e:
ad:45:f7:b5:9b:ca:dd:13:e2:c2:ca:60:8a:8f:08:a1:f4:21:
9c:e3:20:bd:d5:50:b3:ea:ed:1a:24:9e:10:01:69:f3:64:cd:
83:e2:37:e5:25:af:93:ba:cb:1a:8f:46:d0:6c:85:a5:a8:98:
d4:be:d4:e4:c3:11:7c:63:47:c0:4c:9b:74:05:90:0c:7e:a9:
c3:32:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:44 2025 by rpki-client