Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yB1U4T5fmpdtNry2qKZ6Eu6uIrA.roa
File: yB1U4T5fmpdtNry2qKZ6Eu6uIrA.roa (raw, json)
Hash identifier: 5oy0QUw7CwkpqTWNf0k0r8HO1zYo7N6JS6SJwrtX3/k=
Subject key identifier: C8:1D:54:E1:3E:5F:9A:97:6D:36:BC:B6:A8:A6:7A:12:EE:AE:22:B0
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C85AD93BFB9C971CBFAAAC56AA424
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yB1U4T5fmpdtNry2qKZ6Eu6uIrA.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48359
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:85:ad:93:bf:b9:c9:71:cb:fa:aa:c5:6a:a4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c81d54e13e5f9a976d36bcb6a8a67a12eeae22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:f6:80:84:5a:d4:ec:e3:8a:c5:73:94:4f:
73:54:3f:65:3e:0e:e5:25:f3:10:bc:ca:89:ea:29:
11:18:f3:1b:4b:73:39:d2:9a:0e:28:8b:53:39:b8:
b8:6f:d7:c9:5d:66:2c:a4:9e:26:91:62:92:a4:0a:
b6:fd:7a:f1:6c:ec:5e:cc:7f:5e:ee:b6:d5:0b:49:
27:10:b2:be:d5:cf:75:76:92:a6:51:52:6d:e8:1f:
02:fe:b1:9e:d7:42:4a:eb:a5:50:c2:43:08:2b:26:
55:76:c1:9e:a0:fb:da:fa:7e:e7:1d:c1:dc:48:6c:
68:f2:fe:19:17:4e:5b:9f:9c:1a:93:31:ce:22:be:
96:e2:e5:2e:a6:e0:78:53:b9:4e:05:30:2d:45:13:
86:5a:2a:db:be:4f:18:a3:01:bc:5a:dc:c7:4f:05:
90:c7:1b:46:76:8a:70:21:ea:44:a7:52:c7:6d:53:
29:da:55:7f:36:90:eb:2a:98:75:3f:e5:1f:dc:e9:
23:bd:86:d7:d7:75:c6:1e:37:d7:d6:9c:c3:4c:f7:
2c:58:1c:75:d3:96:36:16:c3:61:89:f2:b2:fe:29:
44:0c:87:69:31:da:fb:a9:2a:16:58:19:52:98:b6:
7c:ee:b2:aa:4f:9e:2f:60:39:06:c5:8c:9c:e4:56:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:54:E1:3E:5F:9A:97:6D:36:BC:B6:A8:A6:7A:12:EE:AE:22:B0
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yB1U4T5fmpdtNry2qKZ6Eu6uIrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/23
Signature Algorithm: sha256WithRSAEncryption
66:e0:93:0f:a1:67:e4:b6:b6:6d:4d:75:55:85:f0:74:83:73:
4e:5d:ff:18:5c:6d:af:cf:d8:d2:7d:81:92:76:d8:c8:d6:1c:
d5:86:ff:fb:88:1f:7d:5c:48:58:d2:e3:e6:04:10:b1:47:6d:
88:2a:bf:67:b2:b1:c9:f7:f0:de:c0:ac:24:73:da:ba:f5:95:
ac:74:0a:0c:80:b9:a6:f6:ad:f9:52:92:12:61:e8:fa:9b:bf:
17:d5:c4:f0:d8:5b:07:48:87:2c:93:61:6d:eb:7d:0a:5a:0d:
71:55:95:53:a1:a3:11:b5:f0:f7:ab:ea:e7:29:df:95:87:1b:
92:21:4a:95:0c:c7:66:84:e1:01:1c:63:9c:cd:dc:3c:5e:28:
3d:49:48:44:21:64:42:fd:96:df:89:0d:84:6b:fb:76:9c:9b:
61:5c:31:68:59:43:52:02:df:e3:49:00:e1:50:8e:7c:84:74:
72:45:ba:40:16:c6:ea:53:17:17:c7:0c:f7:dc:45:e2:ad:0d:
da:3a:ea:a6:37:ec:37:f9:d4:17:61:d6:d2:c9:a6:52:ca:28:
d8:ee:2f:45:7a:ea:83:b4:d2:25:3f:80:a1:a1:91:cb:aa:89:
d5:08:fb:fd:09:4e:11:80:ca:30:ec:26:2e:90:39:74:ca:17:
39:fd:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:49 2025 by rpki-client