Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/yp0LdC7U734nh5SQEMIi7N8uoHI.roa
File: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (raw, json)
Hash identifier: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=
Subject key identifier: CA:9D:0B:74:2E:D4:EF:7E:27:87:94:90:10:C2:22:EC:DF:2E:A0:72
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 01942067F7B601556267C2BE2C0C6271AB35
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/yp0LdC7U734nh5SQEMIi7N8uoHI.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 194.8.48.0/24 maxlen: 24
194.8.59.0/24 maxlen: 24
194.9.174.0/24 maxlen: 24
194.9.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:b6:01:55:62:67:c2:be:2c:0c:62:71:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9d0b742ed4ef7e2787949010c222ecdf2ea072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:39:e2:26:df:31:7c:ec:56:38:cb:33:20:
b6:14:70:31:53:78:80:95:2c:c5:33:6f:ef:70:00:
26:6c:81:5f:49:2a:e0:51:bf:89:7f:97:3f:28:33:
42:0e:46:e9:07:d9:14:f4:e5:33:4c:b9:a8:f6:2e:
fd:b6:07:af:54:3e:06:66:68:9a:61:3d:79:03:31:
54:93:0e:10:b4:31:2a:cd:6d:3f:e6:06:e9:4c:4b:
d4:b6:3c:a1:6c:2c:33:3e:79:2c:a3:86:53:35:19:
f4:6a:7c:fa:8e:78:49:1d:b1:6e:bb:94:d0:1e:4d:
b7:48:26:35:70:5a:ae:fb:b8:c4:cf:2f:25:2d:71:
e9:79:e3:35:96:0c:dd:59:59:26:ab:e9:85:58:15:
49:49:be:a8:01:f8:fb:b0:19:26:b1:d5:37:9e:7f:
7d:1f:f6:94:28:59:86:af:e5:2d:64:21:fb:18:36:
2a:d3:7b:2e:78:28:88:65:e9:40:4e:03:fa:d0:90:
8c:97:cd:38:c5:d6:48:ca:d6:6e:c8:a8:75:ec:07:
2f:91:fb:3d:3a:58:de:4b:e5:6d:8f:5e:08:1d:db:
ff:99:9e:38:45:0b:37:84:c2:03:74:cd:8e:bb:f4:
02:1d:0b:c0:88:c3:57:26:79:62:f9:11:cb:66:54:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:0B:74:2E:D4:EF:7E:27:87:94:90:10:C2:22:EC:DF:2E:A0:72
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/yp0LdC7U734nh5SQEMIi7N8uoHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.48.0/24
194.8.59.0/24
194.9.174.0/24
194.9.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:17:4c:24:d6:60:ca:b8:85:ad:c5:03:ea:7c:4e:98:98:e8:
c1:36:88:ef:a6:6e:1b:fd:e2:c5:22:55:85:f8:ba:43:88:c5:
b3:c2:d7:08:a5:90:68:6a:f2:8b:cc:7b:f1:83:4e:f8:c5:6c:
30:bf:48:d8:53:c5:c4:6f:b2:b4:7d:60:ac:b6:82:01:d5:47:
a2:36:5c:37:60:e4:97:b4:f9:01:34:88:c5:41:8f:11:de:ef:
3c:e3:5a:00:f1:94:5f:19:f8:87:1d:f1:ac:17:e3:43:15:32:
e9:29:0f:3d:4b:7a:b2:71:98:3f:43:fa:b8:0b:8c:c2:a1:2a:
a4:9e:d2:28:01:8c:ad:f8:cc:c6:03:8f:48:77:f5:0f:7d:c6:
52:d9:be:54:2f:53:9f:b3:86:e2:28:f5:74:45:86:e9:c1:44:
2b:88:88:b5:79:f8:3a:f6:e2:e3:60:e3:85:da:02:78:b2:fa:
9c:e9:ee:c9:d9:57:8a:9a:72:6a:49:d7:2b:b0:37:93:bb:3b:
26:8e:cd:94:db:f9:ed:4d:bd:e0:a2:59:95:c7:21:c8:74:c8:
98:77:04:4d:0b:fc:c6:4d:20:d9:65:bc:0d:1c:f6:f5:06:92:
cb:9b:b6:15:b7:22:33:8f:2b:fd:c8:b5:77:3b:ab:25:35:de:
53:88:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:47:11 2025 by rpki-client