Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ycgrzepkmaW2fEOZsGknvUBTg-U.roa
File: ycgrzepkmaW2fEOZsGknvUBTg-U.roa (raw, json)
Hash identifier: 6+Sa/Pn0CyU8CBMrghyuzz7q1eTq808+kCsxsHWyDbo=
Subject key identifier: C9:C8:2B:CD:EA:64:99:A5:B6:7C:43:99:B0:69:27:BD:40:53:83:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259004D0E52F037FC6F6C657DE6388BA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ycgrzepkmaW2fEOZsGknvUBTg-U.roa
Signing time: Thu 02 Jan 2025 05:49:42 +0000
ROA not before: Thu 02 Jan 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209918
IP address blocks: 95.47.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:04:d0:e5:2f:03:7f:c6:f6:c6:57:de:63:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c82bcdea6499a5b67c4399b06927bd405383e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:87:27:f9:ac:20:b6:6e:d7:5c:67:30:89:
6c:f7:92:91:af:35:2a:41:4e:d2:40:e5:89:4d:57:
a2:9c:41:58:84:c2:1c:b0:e6:d8:ba:a1:81:53:ea:
f1:cd:16:25:a8:e8:e7:78:28:84:09:17:e2:59:57:
0a:b6:46:34:39:e8:d6:06:0b:3e:a4:f2:a6:3f:47:
31:4d:c0:49:73:73:57:17:5e:c3:ea:73:7d:3b:14:
50:24:b3:da:92:a7:c9:ae:e8:1b:87:46:ea:62:a4:
78:be:1e:40:eb:6a:4d:3e:66:e5:90:3e:d1:c4:05:
4d:54:8a:ff:b6:c9:89:43:56:17:67:f5:68:08:e2:
6e:a1:81:32:41:ad:25:1d:e9:33:9f:bf:8b:80:de:
34:cc:5a:dd:ba:a8:06:87:b4:f4:b2:43:06:9c:33:
58:68:7e:66:23:ce:46:b7:8a:c4:94:5f:0a:c9:b7:
f3:76:50:17:36:82:fa:b4:2f:b9:e1:34:15:f4:de:
7d:2b:91:4c:ab:57:a4:4c:3f:0b:e3:31:73:4d:49:
87:54:45:93:80:5a:04:9b:3f:de:7e:56:d1:74:57:
77:91:95:8a:a4:09:0a:04:ac:9d:ee:49:39:c5:d4:
1d:fa:2c:f0:70:22:20:26:1e:1a:f9:74:10:d9:24:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:2B:CD:EA:64:99:A5:B6:7C:43:99:B0:69:27:BD:40:53:83:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ycgrzepkmaW2fEOZsGknvUBTg-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.232.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b3:23:49:3f:62:84:1f:b8:26:69:1b:93:4c:9c:f9:06:9a:
4f:1b:e6:13:e6:ea:a3:7c:be:28:16:2f:5f:0b:a2:e0:7f:ac:
51:b6:ac:7e:ac:87:67:33:17:b9:f0:1a:d1:cb:ba:31:e4:bb:
39:e2:83:5c:bb:a4:00:1a:48:bf:f0:32:23:8c:dd:e6:38:03:
c7:26:d6:43:a8:b8:ef:37:14:5d:8d:68:c9:90:01:62:be:fe:
f0:aa:65:52:77:56:e4:2e:45:00:01:86:1f:1c:95:da:49:27:
6b:48:0f:5e:e0:4c:59:ca:b2:29:d9:66:a1:cc:0d:c0:39:b7:
e3:aa:af:1e:5f:27:a0:d8:42:0a:4e:c9:3c:b2:b8:27:cc:be:
ae:2c:fc:f6:bf:e5:84:47:e3:8c:18:8a:09:bb:9f:2a:89:44:
60:da:dc:c8:d2:57:f4:e8:97:13:4a:5b:e9:23:fa:54:cf:72:
5a:61:5f:db:8a:b7:07:6f:44:b8:81:cc:9f:1a:88:fc:d4:db:
f8:40:98:98:c3:e0:be:50:b5:6f:10:7b:35:be:9a:41:60:81:
d1:41:74:c3:86:b5:52:ff:ec:aa:f4:09:bf:37:26:4a:49:3f:
22:b2:be:7c:47:65:80:d8:de:95:4f:2e:69:0a:7b:81:8c:71:
be:50:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:13 2025 by rpki-client