Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Y-hduokYyBizMZ1aIw3u9MNvOIM.roa
File: Y-hduokYyBizMZ1aIw3u9MNvOIM.roa (raw, json)
Hash identifier: Miwe2NCZBRprn9PF00vl5CBRdxZLcTyIRzuNgn9LKoI=
Subject key identifier: 63:E8:5D:BA:89:18:C8:18:B3:31:9D:5A:23:0D:EE:F4:C3:6F:38:83
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B93E0E32065B7043BF6EA917AB966
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Y-hduokYyBizMZ1aIw3u9MNvOIM.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198192
IP address blocks: 84.232.124.0/24 maxlen: 24
88.148.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:93:e0:e3:20:65:b7:04:3b:f6:ea:91:7a:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63e85dba8918c818b3319d5a230deef4c36f3883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:58:d1:b2:0c:3c:86:a6:66:64:ee:4d:cf:
40:9c:af:77:b1:2b:2a:7f:0a:3f:a2:3c:ef:45:2d:
de:a5:ba:8d:25:fc:48:8a:27:9d:2f:fc:a1:e5:a1:
b7:95:fc:c3:70:e1:6b:07:06:a6:15:c5:ac:89:f1:
d9:4c:8e:41:24:97:65:68:de:13:4c:44:37:e4:6f:
45:68:43:d1:9a:7e:67:3d:38:9e:33:8a:41:ce:19:
66:05:ca:72:0e:4f:99:d8:db:3b:b3:ac:85:b1:19:
f7:59:0b:64:48:47:9e:e9:0d:83:e7:30:d8:bd:d9:
39:9a:bf:3a:13:f7:bd:75:62:7b:41:6a:fc:60:4f:
8b:39:51:27:a4:74:d3:49:0c:88:dd:40:17:98:7e:
f5:0f:57:07:2c:8c:02:e8:dd:8e:04:3b:8b:3c:a0:
72:8c:6e:e6:98:ea:f7:be:78:91:56:9a:ef:2e:96:
17:a4:c2:0d:5f:12:38:83:c6:db:c6:00:32:27:63:
33:84:58:06:11:93:e8:34:bf:17:c2:3c:44:cd:59:
80:5d:8b:49:55:cf:45:51:be:96:fd:8b:99:28:3c:
7d:19:27:79:96:03:a2:6e:c7:0a:c6:48:71:d6:98:
a4:3a:34:9a:00:d0:d5:e1:4f:8f:c1:14:87:76:c0:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:5D:BA:89:18:C8:18:B3:31:9D:5A:23:0D:EE:F4:C3:6F:38:83
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Y-hduokYyBizMZ1aIw3u9MNvOIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.124.0/24
88.148.74.0/24
Signature Algorithm: sha256WithRSAEncryption
73:eb:dc:06:66:22:30:81:a0:5b:29:2e:bd:e3:e9:9b:50:82:
27:8b:2e:70:e4:c6:80:01:ac:b5:95:8d:68:ad:a0:49:7c:5a:
6f:7c:eb:35:01:fa:52:8e:a2:61:1e:c7:5b:d9:09:8f:76:42:
09:d7:d1:93:7a:a6:a5:ad:35:33:41:b6:1b:fc:9c:a7:b0:1b:
f3:2d:b1:bb:c0:32:31:e3:a6:cc:40:12:3f:20:72:c8:59:48:
91:d9:2c:64:0b:ba:80:7f:50:5e:b6:d5:48:4a:e7:f2:66:31:
3b:c0:1e:42:37:c3:39:f5:01:6d:92:f3:fd:f0:08:eb:c6:99:
64:22:8a:f3:cb:9d:43:65:70:30:65:e5:f0:9b:26:fb:8d:2a:
f9:1b:55:8c:ac:b1:85:1f:bd:dd:b7:f4:82:22:0d:c1:76:1d:
0d:8e:f0:15:48:2c:c3:b9:65:1b:a4:98:20:5a:ad:d8:24:a0:
e5:dd:b1:1e:3e:40:11:c2:01:38:dc:62:98:95:1d:e3:d7:4a:
27:5b:1a:69:66:20:45:61:72:97:4a:93:92:91:4a:af:e0:ce:
a6:d3:a3:04:f6:79:1e:24:33:b6:c6:88:da:60:3f:c6:93:47:
d0:62:a9:bf:47:12:96:ed:60:75:22:06:4e:15:95:a6:1f:06:
5b:c0:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:58:37 2025 by rpki-client