Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F-YZB_ANbEIPvokqvrjhOhP3g5o.roa
File: F-YZB_ANbEIPvokqvrjhOhP3g5o.roa (raw, json)
Hash identifier: L/r1RnmjtSkhuTG5IExnrw2pdwgK43hojfwjGdLpnNs=
Subject key identifier: 17:E6:19:07:F0:0D:6C:42:0F:BE:89:2A:BE:B8:E1:3A:13:F7:83:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196388F36A4B5D42BFF5C0FFFA0EA176564
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F-YZB_ANbEIPvokqvrjhOhP3g5o.roa
Signing time: Tue 15 Apr 2025 08:27:11 +0000
ROA not before: Tue 15 Apr 2025 08:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 194.50.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:8f:36:a4:b5:d4:2b:ff:5c:0f:ff:a0:ea:17:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 15 08:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e61907f00d6c420fbe892abeb8e13a13f7839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:6b:09:b2:9c:6b:84:3e:01:ac:00:f2:b7:
30:07:4d:74:7f:64:da:ca:af:f8:1a:c3:dc:94:64:
21:ba:cc:e8:82:93:f8:c0:ce:3f:43:e5:14:68:df:
e7:06:41:a3:78:1a:83:52:ca:ca:b4:96:10:fb:cc:
b0:72:e2:6d:ec:92:67:d6:01:6b:24:50:bd:b8:97:
22:50:b5:cf:27:7a:b9:5c:c1:1f:cd:0e:24:cb:08:
f7:1f:cc:94:a3:ea:1b:20:8a:80:e8:32:30:2e:5a:
33:c9:41:4c:94:23:15:d9:f2:db:40:47:1f:91:a0:
26:3a:d4:a5:5a:bb:31:54:15:0d:20:49:d1:01:69:
04:f9:96:4d:a4:42:83:11:52:e0:5d:e0:79:75:22:
f3:d8:e4:61:de:4b:77:2c:82:74:84:fb:f0:c4:2c:
e0:06:ce:65:56:d5:55:f2:0b:62:e8:8c:e3:35:64:
cf:9d:29:36:99:e1:18:48:5c:dc:21:fb:e5:8a:ae:
3d:04:b9:88:02:bf:ec:b3:3e:c5:3e:26:d8:52:be:
dc:28:33:2b:2d:b0:ea:8a:40:8b:6a:83:98:64:b2:
12:5b:fe:d3:03:86:a0:b5:5f:23:ac:1b:0e:da:29:
ab:eb:7b:10:df:d6:7f:99:fa:aa:f7:dc:d6:99:24:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:19:07:F0:0D:6C:42:0F:BE:89:2A:BE:B8:E1:3A:13:F7:83:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F-YZB_ANbEIPvokqvrjhOhP3g5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
75:19:fd:48:65:68:38:f5:79:6c:de:c8:f6:7b:17:76:d6:b6:
50:a6:d4:d6:38:f7:f2:b6:91:f8:28:2f:25:70:a4:13:42:fc:
d6:c8:e4:03:1a:19:9d:69:64:ba:df:f3:ed:03:22:28:1f:17:
40:84:b2:af:2d:99:c9:1a:e9:5a:48:59:64:ad:39:fb:a8:80:
ab:11:80:a4:78:eb:a6:1d:19:5b:56:60:92:d1:d1:e5:04:a6:
a2:34:e4:5a:79:c2:98:cc:71:98:c3:06:b7:b5:10:d0:31:89:
bd:a7:f9:24:77:55:47:d2:46:61:2c:7f:e7:a6:87:7b:43:19:
6d:61:3a:8b:f4:d6:2b:73:6b:20:63:ad:81:cc:f4:00:df:15:
7b:4a:ae:63:6f:2a:36:e1:5a:5a:ae:0b:ef:52:0f:9a:bb:7d:
58:f7:87:b6:9b:93:fd:db:0e:c6:6d:cc:e7:50:47:54:0e:d2:
7f:70:dc:20:3b:1f:00:2c:4e:dd:60:26:7b:fd:8a:4a:7e:d0:
ed:c3:2c:c6:94:2d:c6:e5:ec:6e:b1:d5:f8:8c:a9:ad:61:f0:
9d:45:04:5b:11:87:1d:2d:fd:8d:14:30:8e:1e:23:af:1f:df:
95:b9:2e:57:21:29:5b:7b:bb:c5:9f:2e:81:db:40:79:4d:a8:
b7:6e:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:30:03 2025 by rpki-client