Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa
File: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (raw, json)
Hash identifier: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=
Subject key identifier: 60:EF:AD:1B:06:DD:A8:8E:18:61:8E:C8:D4:AA:A7:11:A1:25:06:84
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019421B252C235E1DD1160DC34879CAB791F
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 45.146.136.0/22 maxlen: 24
2a0f:3000::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:c2:35:e1:dd:11:60:dc:34:87:9c:ab:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60efad1b06dda88e18618ec8d4aaa711a1250684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:70:a0:0e:bc:6b:a2:9b:dd:99:37:04:e5:
75:ad:69:28:cb:b8:a3:f3:25:f1:a4:81:9e:90:85:
fe:7c:00:98:13:e3:56:ee:fb:65:55:52:47:18:be:
a2:fa:66:ab:31:f3:6d:00:bc:ae:f2:a0:0c:9d:ab:
3d:29:2b:08:b0:85:dd:1b:71:dc:2a:22:da:9b:04:
55:4c:fc:48:dd:98:26:42:00:bc:ea:51:62:b6:82:
a9:72:95:11:d5:f7:a5:c2:6b:01:64:06:41:07:b8:
b8:07:57:c5:7b:24:d3:42:fe:d3:96:9c:a3:2a:bd:
6b:ec:01:26:73:ce:e3:1f:1d:f1:ea:1d:d6:c9:9a:
a3:86:23:c9:bc:6f:50:d0:c7:60:30:05:1b:1e:38:
b9:40:ea:6d:a3:d5:ea:26:cf:0f:31:18:e6:56:be:
17:5d:25:76:48:b7:be:d1:a9:1c:b9:a1:2d:b5:bc:
76:ac:2a:49:6e:e6:a4:05:67:a7:9f:3d:6c:cd:16:
00:a3:0d:45:a6:5b:28:d0:5c:0f:53:f6:c2:07:e8:
e9:66:c9:da:d6:b2:de:9e:e2:27:60:d5:a7:5d:14:
bc:a4:9b:c6:c9:87:76:ef:60:49:6f:4f:a4:ba:3b:
17:2d:5b:0f:3f:e7:f1:3e:a1:74:5f:7f:6a:19:23:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:AD:1B:06:DD:A8:8E:18:61:8E:C8:D4:AA:A7:11:A1:25:06:84
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.136.0/22
IPv6:
2a0f:3000::/29
Signature Algorithm: sha256WithRSAEncryption
70:37:bc:4c:c6:d9:4e:ce:6c:af:b4:22:c0:f8:5e:b3:25:d6:
c3:f1:94:41:78:87:12:dd:8c:58:60:09:ad:d6:50:90:3e:ac:
c7:25:5d:1b:8a:8a:22:95:49:ee:95:d9:91:76:7d:6e:01:43:
88:9b:12:23:08:4c:58:e8:dd:f4:60:85:97:cd:c5:bb:7a:d5:
72:4c:b9:23:00:03:d8:bc:97:93:4d:76:f2:38:13:7a:82:1f:
c5:7e:fe:95:5e:ca:cf:d6:9c:f8:28:4f:e2:30:57:8c:ea:8e:
c9:3b:9b:49:88:de:d2:83:16:12:87:3f:d1:fc:9f:d1:c3:4a:
aa:14:29:19:fe:53:7a:b8:ca:78:72:6a:ec:85:5f:c7:58:36:
c9:a3:c6:16:0a:75:e7:12:3a:48:29:54:e6:6d:af:c2:b9:49:
a3:9a:cc:9e:e9:41:e6:54:86:84:58:82:7f:c4:bb:74:0f:94:
69:32:94:e1:a1:dd:1e:29:ed:b2:04:23:c9:d9:10:36:aa:7c:
39:42:e1:e6:b2:3b:c7:de:8b:57:e9:a4:e9:96:ef:f1:d5:19:
dc:c9:1c:57:e2:16:60:5a:8e:33:30:55:a6:22:51:3f:fd:64:
53:df:10:06:13:5c:50:59:bc:cd:cd:9d:fd:a0:61:66:96:69:
fa:1a:c5:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhslLCNeHdEWDcNIecq3kfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjUwMTAxMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGVmYWQxYjA2ZGRhODhlMTg2MThlYzhkNGFhYTcxMWExMjUwNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopJwoA68a6Kb3Zk3BOV1rWkoy7ij
8yXxpIGekIX+fACYE+NW7vtlVVJHGL6i+marMfNtALyu8qAMnas9KSsIsIXdG3Hc
KiLamwRVTPxI3ZgmQgC86lFitoKpcpUR1felwmsBZAZBB7i4B1fFeyTTQv7Tlpyj
Kr1r7AEmc87jHx3x6h3WyZqjhiPJvG9Q0MdgMAUbHji5QOpto9XqJs8PMRjmVr4X
XSV2SLe+0akcuaEttbx2rCpJbuakBWennz1szRYAow1Fplso0FwPU/bCB+jpZsna
1rLenuInYNWnXRS8pJvGyYd272BJb0+kujsXLVsPP+fxPqF0X39qGSPuhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGDvrRsG3aiOGGGOyNSqpxGhJQaEMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvWU8tdEd3YmRxSTRZWVk3STFLcW5FYUVsQm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZKIMA0E
AgACMAcDBQMqDzAAMA0GCSqGSIb3DQEBCwUAA4IBAQBwN7xMxtlOzmyvtCLA+F6z
JdbD8ZRBeIcS3YxYYAmt1lCQPqzHJV0biooilUnuldmRdn1uAUOImxIjCExY6N30
YIWXzcW7etVyTLkjAAPYvJeTTXbyOBN6gh/Ffv6VXsrP1pz4KE/iMFeM6o7JO5tJ
iN7SgxYShz/R/J/Rw0qqFCkZ/lN6uMp4cmrshV/HWDbJo8YWCnXnEjpIKVTmba/C
uUmjmsye6UHmVIaEWIJ/xLt0D5RpMpThod0eKe2yBCPJ2RA2qnw5QuHmsjvH3otX
6aTplu/x1RncyRxX4hZgWo4zMFWmIlE//WRT3xAGE1xQWbzNzZ39oGFmlmn6GsUs
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:45 2025 by rpki-client