Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa
File: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (raw, json)
Hash identifier: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=
Subject key identifier: 62:7D:DC:4E:65:C8:6E:F3:4E:E6:B0:D9:50:C9:14:DB:4B:C4:72:EE
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019422FBCFB3EB2BD261FD4B88B46DC3A83F
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206941
IP address blocks: 193.164.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cf:b3:eb:2b:d2:61:fd:4b:88:b4:6d:c3:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627ddc4e65c86ef34ee6b0d950c914db4bc472ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:9c:aa:5b:56:6a:d9:02:bc:83:ae:e1:bc:
45:55:0c:34:34:bf:f2:6f:2e:4c:dd:19:37:84:21:
5d:79:bf:79:12:9e:8e:d3:84:83:4c:9c:21:bb:ae:
51:15:eb:8f:3d:93:9f:c7:bf:86:b8:ee:5b:f5:de:
df:0f:1e:30:65:f2:45:2b:ad:09:f5:23:b5:99:b7:
a1:e8:8e:e6:86:71:fa:2d:34:51:86:a5:de:c8:d0:
33:ed:ce:69:9b:4e:35:c6:7b:73:37:d6:8b:e1:d2:
ad:ae:58:0b:ff:48:d2:56:df:3d:d5:60:34:38:25:
f9:89:90:1a:71:27:3a:b4:83:38:bd:21:c0:82:cc:
7a:82:44:76:b9:25:f7:f2:0a:7b:86:4b:d8:db:84:
9d:cd:c3:c0:46:6e:1d:1d:28:8c:3c:50:0d:ea:5b:
97:2c:b0:14:6f:64:80:ff:3a:18:41:25:e3:19:68:
d2:a5:0c:bd:15:c6:0f:ca:82:4b:d8:07:d3:16:81:
f7:32:ab:2d:65:4a:b3:90:f2:ae:dc:51:74:0c:b5:
e2:55:ce:1e:c9:d6:59:48:a8:f0:9b:88:52:db:0e:
97:a2:5a:f8:ee:f1:95:7b:3c:d2:a6:1c:eb:96:96:
93:6a:df:66:6b:5e:17:b8:d3:d6:2f:83:9f:81:c7:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:DC:4E:65:C8:6E:F3:4E:E6:B0:D9:50:C9:14:DB:4B:C4:72:EE
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.90.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d8:ee:c2:80:76:f5:e7:01:fa:6c:b4:ec:36:4b:db:dd:94:
e3:89:f2:26:6e:11:5d:07:bc:27:75:d9:e4:e8:07:7e:dd:da:
02:84:63:1f:58:f4:94:6f:3e:ca:f1:28:bb:50:bb:60:32:6a:
9b:f3:a7:c0:87:4d:a0:0f:44:cc:9e:f3:72:02:b9:a3:7e:58:
2b:54:ea:42:3a:ee:2d:31:15:0c:e7:42:28:43:63:08:95:d6:
32:e8:62:a0:63:26:a3:04:b9:38:40:ea:d8:84:b0:de:73:02:
eb:47:c5:a4:36:32:d8:93:de:2d:9f:8a:cb:4b:27:a8:1c:c5:
37:8f:08:17:a1:64:67:29:f7:dc:39:9d:8c:42:40:ea:b8:78:
dc:58:86:7c:a1:9c:84:27:6f:f2:a2:8b:4d:c4:a4:9c:67:a9:
78:76:b3:bb:da:0b:3b:a6:92:b0:c5:a1:a1:75:47:d6:46:f1:
f5:99:a0:1b:fa:86:e0:98:ba:a3:fa:d1:3d:49:76:12:f1:41:
f4:68:e2:12:7c:f4:51:0c:2b:ae:89:2d:e8:0d:ee:d6:8e:11:
44:69:a0:95:83:df:67:22:1c:4d:f4:4d:91:a2:42:99:db:7c:
4e:2d:67:f2:7f:15:89:91:2f:c2:13:92:95:2c:56:71:e2:da:
8c:32:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:50:24 2025 by rpki-client