Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YvujVQAQ0T3fpI9SaasETmg0YBc.roa
File: YvujVQAQ0T3fpI9SaasETmg0YBc.roa (raw, json)
Hash identifier: gGhwHi3gpEGXWlkghwsivHpwm90OIbX/KGoi51POo8w=
Subject key identifier: 62:FB:A3:55:00:10:D1:3D:DF:A4:8F:52:69:AB:04:4E:68:34:60:17
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9F4FD9BBBC136B6FC52FCE5EFBAD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YvujVQAQ0T3fpI9SaasETmg0YBc.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43309
IP address blocks: 146.120.168.0/23 maxlen: 24
146.120.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:4f:d9:bb:bc:13:6b:6f:c5:2f:ce:5e:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62fba3550010d13ddfa48f5269ab044e68346017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:ee:d3:cc:6e:54:2f:a1:51:ea:65:88:0b:
08:a7:b5:5f:d2:53:a7:7c:d7:0d:e7:e3:44:42:9e:
0d:62:5b:9b:86:e7:29:e2:41:7a:da:f6:b7:3f:3c:
b2:3c:b3:c3:71:3a:b9:cd:6c:e5:80:b3:60:86:21:
3c:6e:2d:d9:e0:ba:7a:63:ea:51:10:06:8a:fc:19:
8e:2e:f2:8b:8b:93:fe:a5:01:da:3a:0e:c7:6b:3f:
af:b4:a7:a2:1b:2f:62:07:a6:0b:41:63:e7:fb:9a:
15:71:84:12:c4:16:1b:b3:f2:e5:ad:79:11:c0:5e:
05:e6:a9:e4:d3:20:2f:a0:e0:69:40:c3:ff:b0:3c:
50:85:98:ad:e2:b5:a5:f1:66:96:78:fb:3d:8f:83:
f9:00:11:08:15:84:ff:86:78:0b:6e:f6:d9:54:2c:
18:78:11:0f:e9:f3:3f:75:d9:18:89:e5:44:e4:6c:
be:7c:5e:a1:98:a7:11:7f:05:06:07:78:ae:fa:19:
7b:53:31:f6:f2:d0:0c:18:49:b7:fd:64:bf:e7:c5:
79:2e:47:c0:22:38:50:0e:c3:55:8a:44:e5:24:85:
3a:da:ed:a7:52:51:83:b4:a7:82:3f:b1:1b:c0:e6:
84:b9:e0:c7:a8:a6:ab:ee:65:8a:22:08:c4:03:9a:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FB:A3:55:00:10:D1:3D:DF:A4:8F:52:69:AB:04:4E:68:34:60:17
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YvujVQAQ0T3fpI9SaasETmg0YBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.168.0-146.120.170.255
Signature Algorithm: sha256WithRSAEncryption
09:fc:ed:19:f8:38:22:fa:35:d6:c3:39:53:2e:a1:56:db:ad:
32:62:36:12:2f:a7:2c:86:f3:8d:d4:42:b4:3a:39:c6:3c:9b:
f8:ad:44:64:a0:4f:eb:ac:a4:8d:93:ad:9d:29:d7:67:34:41:
1d:a1:c0:c7:89:25:4f:3d:15:43:0e:60:94:0b:a7:64:b6:7f:
6e:52:42:92:34:38:e0:6f:ae:fb:75:d3:41:cf:5f:64:a0:5e:
59:6f:c1:68:62:06:38:a3:83:61:64:7d:40:95:17:2c:0b:f7:
76:1c:e2:ca:05:0c:65:05:c0:bc:a7:d7:33:f4:41:66:4a:b6:
2e:5e:4d:3e:14:0f:7d:94:9a:2c:87:ba:e1:bd:84:00:a6:43:
dc:81:f6:87:d9:39:08:a7:28:5c:25:a7:50:fa:99:43:ce:72:
36:02:c1:1b:71:0c:7b:40:2c:9d:38:9c:df:41:1e:91:bd:54:
93:fe:bb:2b:5c:ad:e0:06:dc:ff:6b:41:d8:51:e6:ae:7c:05:
b5:7c:61:73:43:fb:8b:c9:b9:7d:62:d2:b8:bd:33:12:af:4a:
51:33:bd:60:27:22:c1:df:ec:d7:be:8f:32:77:c3:46:40:87:
c5:1c:6e:22:95:1a:f7:d2:9a:e4:13:4d:b4:b1:ff:ec:9a:87:
40:02:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:20 2025 by rpki-client