Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ry6jwVUp4CJW4lLmnPIEN1tPQ54.roa
File: ry6jwVUp4CJW4lLmnPIEN1tPQ54.roa (raw, json)
Hash identifier: DaYqbum9QFJ/db4gTfknaYsaBsetZEqj8IILZwAXFRY=
Subject key identifier: AF:2E:A3:C1:55:29:E0:22:56:E2:52:E6:9C:F2:04:37:5B:4F:43:9E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD2A908B2BCEBF9D07DFF1998C777
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ry6jwVUp4CJW4lLmnPIEN1tPQ54.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24985
IP address blocks: 217.30.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:a9:08:b2:bc:eb:f9:d0:7d:ff:19:98:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af2ea3c15529e02256e252e69cf204375b4f439e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:a3:67:be:1e:2f:3e:4a:f2:5d:c8:b6:20:
f5:b3:00:7c:29:ae:b6:7e:f6:d2:8d:72:19:57:58:
8a:18:a1:4e:41:29:fd:1e:9d:c2:9a:29:21:fc:fd:
6a:25:90:4d:f9:d6:51:4d:17:41:66:bd:87:56:ae:
59:b1:b7:e8:e7:4e:83:32:d8:8c:10:07:6e:cc:5d:
75:91:e6:7a:b7:4e:6a:34:08:a1:68:5a:e3:47:ff:
42:eb:ca:ca:70:cc:39:dd:1d:ad:68:94:31:8d:5f:
a8:5f:1a:df:31:7a:57:6d:39:60:ab:17:7a:db:2f:
6e:0a:2e:34:4d:59:ba:56:96:46:37:07:78:69:79:
46:a9:f0:8e:64:73:d3:5b:48:dc:04:17:e0:ee:66:
a9:32:3e:aa:7f:e2:7d:f3:d0:7d:ff:48:53:c7:1e:
aa:ce:7c:8a:75:3d:f7:c4:77:55:6f:8a:bf:3c:b8:
25:1d:29:a2:d9:7b:ac:9f:ea:fd:f3:ec:a9:c7:39:
6d:d7:cf:28:ee:d3:32:56:58:e3:7a:f3:7c:79:68:
9e:6d:13:f5:aa:24:0e:8d:76:45:25:fb:c4:3e:58:
c7:d3:69:29:39:61:93:f5:ba:4d:2f:3e:2c:bf:1f:
e1:cb:8e:9e:ef:e8:7d:a2:48:88:f7:70:14:3e:3e:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:A3:C1:55:29:E0:22:56:E2:52:E6:9C:F2:04:37:5B:4F:43:9E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ry6jwVUp4CJW4lLmnPIEN1tPQ54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.30.159.0/24
Signature Algorithm: sha256WithRSAEncryption
77:58:8d:45:c4:59:e2:00:92:7b:7b:c1:be:64:ee:70:66:76:
a1:b5:5b:76:c0:54:f1:6a:03:14:12:9f:bf:23:69:03:bb:30:
20:99:80:5d:7e:78:1b:9c:99:70:c9:a7:4b:be:cc:26:55:2a:
a5:9c:91:3a:e1:9e:ac:2d:d8:a1:ba:77:38:47:42:56:fe:b6:
e2:01:51:7a:41:88:ad:9c:04:40:b5:7a:67:83:bf:6d:a7:98:
06:5f:18:b9:2b:d2:c0:2f:55:11:63:bb:99:4a:36:fb:0d:b4:
4d:c5:e8:5c:2b:97:22:d1:b3:38:5d:71:cc:60:2d:cb:0b:ac:
5d:23:88:17:5b:83:dd:9a:0f:ad:7c:fa:fd:8a:68:8d:f0:8a:
4d:86:5f:dc:4b:dd:b1:66:94:39:b8:57:04:ec:85:85:d1:6d:
7c:f0:96:1f:9f:cc:2e:bd:53:8d:44:bd:a7:66:0e:63:7f:73:
f5:5c:23:30:13:8b:a4:a1:8c:89:ac:8d:4c:d7:c6:60:01:93:
3c:71:0f:3f:aa:75:ca:4c:45:b0:67:3f:67:65:f0:f4:99:b4:
b3:d0:b3:0d:f3:28:ed:98:59:e0:f3:0b:76:31:3c:15:56:ff:
b7:6a:71:b3:91:fb:7e:6d:4e:cd:55:69:0c:5b:d3:98:8d:04:
2e:d2:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:53:31 2025 by rpki-client