Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CYuEd_SemurZo77X10hs47Ql1VA.roa
File: CYuEd_SemurZo77X10hs47Ql1VA.roa (raw, json)
Hash identifier: URftarulXLz1IjDfubYPrU8KDLEjDGzZ3syVG+NsutU=
Subject key identifier: 09:8B:84:77:F4:9E:9A:EA:D9:A3:BE:D7:D7:48:6C:E3:B4:25:D5:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019897811D3737D1818CA63B500197675E49
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CYuEd_SemurZo77X10hs47Ql1VA.roa
Signing time: Mon 11 Aug 2025 05:01:17 +0000
ROA not before: Mon 11 Aug 2025 05:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213990
IP address blocks: 94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:1d:37:37:d1:81:8c:a6:3b:50:01:97:67:5e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 11 05:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098b8477f49e9aead9a3bed7d7486ce3b425d550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:ef:55:5c:5e:ce:e6:cc:e7:9d:96:57:09:
54:ab:1b:5a:d7:f9:c8:85:8d:7d:c1:94:b6:54:5d:
58:3c:d0:9c:d3:a8:b0:ef:cb:d6:aa:0f:6f:e2:fe:
0c:af:3d:73:64:a1:b9:f1:67:4a:c5:45:6a:59:4a:
10:b5:8a:00:e5:60:46:5b:0b:ff:16:e7:d1:1f:89:
3c:ac:8f:04:80:65:24:a0:cf:c1:76:7d:f0:9c:da:
8e:e4:22:7a:27:db:29:d1:9e:ad:71:5e:67:e3:57:
eb:b3:8a:72:ef:4e:d5:15:b1:80:73:51:da:86:1c:
3c:1b:03:60:44:68:c9:0f:4e:6b:0a:b6:b4:c5:f5:
3b:50:c4:93:5d:92:00:08:48:72:f2:05:a8:b2:33:
0b:52:8f:4b:07:1a:dd:92:8d:4e:37:e7:6d:c2:7b:
d3:b5:0a:50:03:f2:6d:82:96:65:4c:d1:d5:17:c9:
45:99:12:43:9e:d9:d8:80:e4:c3:89:51:1f:d1:00:
3b:78:91:e2:7f:51:88:60:fa:db:b7:93:ff:06:55:
3a:c0:02:54:c3:41:93:fe:ba:25:ff:7f:aa:0d:bc:
af:bc:50:d5:14:f5:9d:71:19:49:85:96:e0:09:2d:
7a:8a:7c:22:6e:0d:ac:87:0d:d4:c8:22:91:32:a9:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:84:77:F4:9E:9A:EA:D9:A3:BE:D7:D7:48:6C:E3:B4:25:D5:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CYuEd_SemurZo77X10hs47Ql1VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.122.0/24
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:42:e1:dc:e5:2c:7b:d2:f7:44:72:31:86:b8:ee:64:af:76:
26:75:af:6b:ef:d6:4e:1c:81:1f:dd:4a:58:08:1e:e9:1b:ea:
35:d3:a0:e1:b3:ab:b1:2c:99:54:48:a8:c4:ad:47:65:fb:db:
d5:ea:e3:8d:c2:d3:81:3c:cf:58:12:df:7a:7e:48:70:df:81:
25:a8:6c:24:75:b3:7f:be:a3:ea:af:c4:53:e1:78:d9:a1:42:
38:5e:a0:74:ea:27:cb:ec:be:af:88:8d:2a:c5:56:1c:01:34:
aa:c2:e8:cf:64:5a:83:cb:98:d7:e5:6a:ab:c4:ae:0b:c0:ab:
2e:2f:b7:2f:55:dd:cb:5e:3c:a2:db:17:7f:22:a4:ff:11:41:
07:52:e0:a7:1a:f3:f3:cd:0b:77:b0:ad:c8:fe:39:74:d1:de:
25:5f:a3:53:56:e9:ea:63:94:bf:19:dc:4a:63:32:6f:8a:a1:
30:c7:11:f9:2c:0a:0c:00:f2:ec:60:b7:38:1f:79:57:e6:e4:
bf:f8:16:39:4a:2e:4d:0f:28:93:39:49:04:9b:56:f1:59:77:
51:47:34:17:99:6c:23:4d:11:af:08:ff:51:87:e5:7c:64:fc:
8c:18:ea:33:f1:4f:7c:82:4a:d0:66:00:52:a9:9c:34:9c:a5:
5f:3c:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:19:35 2025 by rpki-client