Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Yr_r0cbZ27AZrIkBQF9spAIb7Oc.roa
File: Yr_r0cbZ27AZrIkBQF9spAIb7Oc.roa (raw, json)
Hash identifier: TaLEQO93aCCTwf9FCM12m8oK/XnaVQCsaiE5HaO3GA0=
Subject key identifier: 62:BF:EB:D1:C6:D9:DB:B0:19:AC:89:01:40:5F:6C:A4:02:1B:EC:E7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB134E1B85DF07259FB0A8D14A93B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Yr_r0cbZ27AZrIkBQF9spAIb7Oc.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49098
IP address blocks: 93.171.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b1:34:e1:b8:5d:f0:72:59:fb:0a:8d:14:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62bfebd1c6d9dbb019ac8901405f6ca4021bece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:bf:7b:9c:94:65:2b:fc:2b:21:6e:ea:e4:
91:fd:d4:16:d8:7a:22:1d:db:9d:de:10:18:eb:ee:
eb:83:f8:8a:6c:cc:bd:18:bb:79:4b:26:56:58:4f:
6b:54:3a:98:bd:4c:15:72:ef:7c:5a:fd:f7:45:01:
2d:a9:f6:df:fd:1c:e9:6f:0e:09:f9:5c:69:f9:d9:
c3:1a:98:48:c3:1c:2c:3f:18:70:fc:5a:43:4c:9b:
ce:3f:4c:06:41:40:2e:99:c3:0d:88:9e:63:c2:30:
90:be:71:a1:ec:10:aa:d1:99:06:69:e2:17:cb:2d:
33:e3:19:7c:21:fa:58:cd:88:be:79:ed:c7:99:ad:
35:61:77:d6:18:4a:c4:4e:25:7c:78:c2:5d:95:e2:
0c:bb:a5:a3:b7:79:75:54:21:c2:85:05:46:23:31:
8c:eb:40:07:8a:b0:83:bd:aa:d3:b5:e6:77:06:19:
8f:e9:95:7a:8d:0d:f9:d8:3a:8e:34:4f:09:da:c9:
91:93:41:66:7d:af:c8:d1:a7:a7:c5:ab:6e:50:f9:
aa:af:a1:08:5f:9a:bd:a0:0e:25:03:a9:60:b4:81:
3b:67:f0:b0:ad:07:cf:e3:06:73:6f:20:d2:a5:32:
57:7e:05:16:60:a4:71:eb:f0:85:04:d8:12:2b:80:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:EB:D1:C6:D9:DB:B0:19:AC:89:01:40:5F:6C:A4:02:1B:EC:E7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Yr_r0cbZ27AZrIkBQF9spAIb7Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.168.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:d5:ab:d8:ac:ff:37:34:74:75:fd:e7:b4:10:44:b0:4a:
08:67:9e:f8:be:4a:60:f0:82:6d:6d:cf:d7:e3:37:7a:f3:33:
46:8c:35:c6:97:16:11:ab:ac:6d:e9:48:78:1e:7d:36:4e:24:
8b:dd:c4:df:d6:29:bd:72:dd:82:48:d4:c6:d9:18:9e:38:b4:
20:34:6e:1f:88:ac:79:87:e7:77:59:6f:c1:a6:2b:ae:16:cf:
a2:90:b0:21:fa:c3:0f:25:7f:65:15:bc:22:16:80:e9:52:38:
e7:a1:10:7f:4f:ed:52:af:92:23:7d:99:72:b4:49:58:76:db:
da:31:d0:56:19:51:ad:f0:da:cc:71:3a:91:37:31:e1:52:d4:
88:cf:3b:01:80:a2:8f:21:83:34:70:fd:c4:b4:3b:73:1a:e8:
8b:bf:8e:b6:e1:e8:4a:a2:bc:3d:56:45:4c:b8:05:7e:f5:a0:
f0:cb:0c:a6:7a:a7:a1:ee:8e:7d:3a:d6:37:8c:27:79:68:fe:
22:e2:3c:03:24:99:e5:3a:40:ad:e3:40:08:fa:bf:df:d2:ab:
9b:63:fe:63:ee:3b:30:d9:8b:16:22:36:35:20:5c:5f:69:48:
93:13:db:b1:78:4d:3e:c9:61:61:c2:91:72:74:a6:37:da:88:
28:7a:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:59 2025 by rpki-client