Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yfic31IfSlMBZ9EuKO3Zs4XjK9o.roa
File: yfic31IfSlMBZ9EuKO3Zs4XjK9o.roa (raw, json)
Hash identifier: xyV7ZTrj57me7K3qD0wV7doV2GJX+54MVIbxP0u1JWM=
Subject key identifier: C9:F8:9C:DF:52:1F:4A:53:01:67:D1:2E:28:ED:D9:B3:85:E3:2B:DA
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD889429F254A4B3CA675A3C8B758
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yfic31IfSlMBZ9EuKO3Zs4XjK9o.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41809
IP address blocks: 83.142.112.0/21 maxlen: 21
83.142.116.0/23 maxlen: 23
91.193.196.0/22 maxlen: 22
185.18.176.0/22 maxlen: 22
185.18.176.0/23 maxlen: 23
185.18.178.0/23 maxlen: 23
188.127.0.0/19 maxlen: 19
188.127.0.0/24 maxlen: 24
188.127.4.0/22 maxlen: 22
188.127.8.0/21 maxlen: 21
188.127.16.0/20 maxlen: 20
2a01:6800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d8:89:42:9f:25:4a:4b:3c:a6:75:a3:c8:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9f89cdf521f4a530167d12e28edd9b385e32bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:1e:0f:2c:43:99:7d:fb:83:16:0a:b8:d0:
b0:9a:2f:73:2d:47:eb:a3:37:17:b6:be:0f:08:09:
1c:d0:1c:84:aa:de:0e:ae:ad:df:cb:32:19:dd:ec:
1c:7c:4e:7b:a9:ca:5c:4a:86:5e:54:e4:da:9a:18:
e9:c0:d0:a8:fa:02:93:76:8c:29:f4:47:d3:86:14:
3f:2c:fa:12:43:b2:b0:c0:76:93:bd:7d:83:a7:93:
5a:a1:4d:77:72:db:9b:03:db:d7:cc:f4:9b:9c:12:
01:df:92:e7:cd:94:09:b9:47:a3:c6:88:06:90:db:
53:20:e8:62:65:55:22:e0:17:2b:97:3d:4c:15:f1:
83:90:02:ac:24:50:69:b6:c6:9d:c6:49:eb:94:6d:
93:fc:43:54:40:a5:e4:09:c8:fd:58:71:2f:4f:0f:
bf:ce:1a:da:75:de:ea:4e:75:27:f2:fe:90:d8:e7:
d3:46:b8:d5:f7:58:53:3e:3e:9b:90:0d:25:a1:b8:
17:0e:79:57:cc:43:62:a7:e3:12:c9:9c:8f:dd:0a:
f8:bf:47:93:41:06:5e:62:c3:b1:79:b9:48:0f:66:
10:c9:cf:a1:49:6d:0d:25:b7:9c:07:c0:87:5b:26:
d1:cb:83:c2:8c:46:50:2e:73:8c:f2:48:2d:e6:90:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:9C:DF:52:1F:4A:53:01:67:D1:2E:28:ED:D9:B3:85:E3:2B:DA
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/yfic31IfSlMBZ9EuKO3Zs4XjK9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.112.0/21
91.193.196.0/22
185.18.176.0/22
188.127.0.0/19
IPv6:
2a01:6800::/32
Signature Algorithm: sha256WithRSAEncryption
41:78:7a:44:a5:7b:0f:8a:44:a8:e8:a0:88:94:de:13:5e:84:
0f:f1:5d:53:be:7f:b1:49:9e:7d:f0:55:53:ed:c1:53:7a:f8:
f7:56:2a:92:f5:74:66:18:a9:af:30:56:83:26:33:45:83:dd:
a4:99:4e:52:9c:07:75:49:65:50:85:61:e8:4c:e4:ad:db:05:
e0:5b:f2:6c:3b:83:9e:0d:b9:d0:15:7b:32:5c:e1:ff:7a:1e:
23:70:0e:73:09:02:90:68:2d:4e:bf:2e:d8:4d:94:6d:fc:79:
5b:f1:0f:19:8a:13:c2:64:c4:8c:2d:a2:79:ef:0c:04:b3:3e:
8e:7e:e6:eb:8d:2e:c2:50:aa:53:94:0b:82:17:b9:9d:bd:28:
7b:60:a3:00:5b:74:26:74:db:f4:33:d1:37:f4:5a:2d:17:81:
43:f4:95:d6:1a:cf:17:ee:89:37:92:be:cf:dd:c0:77:e3:cb:
a3:d7:a9:f1:88:1c:86:e2:e9:91:f7:b0:4b:ad:77:6a:22:0f:
84:bc:3f:fc:87:f1:62:b1:a7:70:f4:ca:6a:6b:65:93:c2:27:
ea:fc:79:dc:9e:bd:1e:67:39:ce:8d:02:2c:ec:8c:0a:9e:b0:
cd:0d:f5:71:67:09:a7:48:fb:d7:0e:f2:32:c4:3d:1f:52:de:
58:96:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:18:00 2025 by rpki-client