Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa
File: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (raw, json)
Hash identifier: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=
Subject key identifier: D9:83:06:34:07:EC:24:38:57:BE:90:10:74:38:0C:A1:04:89:D6:54
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0195FF6C6A6D2B62F339CCC3879F13DA3AD4
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa
Signing time: Fri 04 Apr 2025 06:10:49 +0000
ROA not before: Fri 04 Apr 2025 06:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213175
IP address blocks: 93.179.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:6c:6a:6d:2b:62:f3:39:cc:c3:87:9f:13:da:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 4 06:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d983063407ec243857be901074380ca10489d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:f2:7a:43:e4:ba:22:94:9c:38:b6:49:88:
c3:a4:cc:55:9c:9a:58:4a:ab:5c:35:b7:ae:63:b7:
e1:69:57:ea:2b:b2:b8:59:4f:bb:16:1d:18:b7:33:
80:95:7b:33:1d:4e:0b:0d:c6:0c:5c:d2:be:0b:55:
3b:80:5a:dc:53:97:d0:75:c8:9c:bc:b1:70:86:35:
b6:49:36:a8:ed:73:fd:72:14:34:68:df:13:d8:db:
95:ad:60:83:8c:cf:96:2b:83:a7:99:52:50:86:42:
50:da:75:13:09:29:2e:9e:99:47:f2:77:85:90:17:
ac:e7:c6:6d:df:66:db:95:52:03:49:4a:21:4a:7a:
1a:a9:58:b4:25:04:84:98:98:65:0a:29:2a:a9:1f:
23:8f:4a:1e:f1:1c:12:cb:86:fc:66:aa:98:fb:bc:
76:05:ca:5a:d4:35:58:f8:b2:dc:de:1c:09:f5:c3:
ce:d5:f0:a5:7a:ff:b6:64:cd:39:14:26:16:1e:a5:
01:9b:6e:3d:c9:50:51:9a:af:b4:c3:2a:1c:88:a5:
3e:28:ba:04:ff:fb:62:75:f7:2e:40:b7:1a:e1:c1:
21:38:cc:b7:79:bb:b3:79:d7:cb:f8:14:82:a5:79:
f1:d0:a6:cd:d8:8b:48:e7:ec:de:b8:1a:47:f6:ef:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:83:06:34:07:EC:24:38:57:BE:90:10:74:38:0C:A1:04:89:D6:54
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0b:33:2d:4e:85:1d:2e:ba:e5:d8:47:16:f6:99:0c:db:dd:
83:05:78:ef:07:56:3e:c8:55:3a:a3:72:ba:e1:85:4f:98:fe:
c7:38:29:a7:fa:57:cc:20:df:c2:45:d1:8d:a0:21:b9:e7:8f:
1c:c3:34:7b:cd:03:c5:2a:7e:ea:8a:97:0d:69:95:ca:17:4a:
bb:01:9a:5a:5b:d8:ca:ab:84:14:88:cd:35:16:13:fe:f5:9c:
1c:65:c4:25:1a:4e:f5:c2:02:1b:93:e4:22:4a:2c:7b:3c:57:
a8:9e:16:e4:d0:57:a9:be:3e:d5:85:50:95:db:5f:5d:5f:b2:
c2:66:a8:47:88:dc:cc:d2:6f:9a:c3:8b:50:93:01:39:d5:4d:
ae:97:5f:b9:0f:b1:8e:08:53:ff:c2:37:f9:1f:c8:d1:87:b4:
05:7c:ae:19:82:42:81:56:b9:2c:ac:61:3b:c1:4c:25:02:7d:
7e:b0:4f:64:9a:5a:da:14:9b:19:99:68:8b:f8:77:38:ea:e6:
a1:6d:af:09:5d:1b:17:a4:ae:3b:6b:e6:fb:56:d1:c9:a3:78:
15:11:c6:e8:ab:85:e3:40:7b:97:64:7d:53:6a:15:be:ca:6c:
56:55:c7:09:c2:e4:d9:0b:c8:5c:da:c4:84:ab:7b:e7:44:6c:
9e:d0:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:29:55 2025 by rpki-client