Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YYj2haoOMMCFA7ow_1zz0V9BbZQ.roa
File: YYj2haoOMMCFA7ow_1zz0V9BbZQ.roa (raw, json)
Hash identifier: kPDV7l1fDEsikkTGOM1tAhzFfjCg1ON+6uEygibhDSo=
Subject key identifier: 61:88:F6:85:AA:0E:30:C0:85:03:BA:30:FF:5C:F3:D1:5F:41:6D:94
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CC032DF44E5AC532E0BE9232B622
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YYj2haoOMMCFA7ow_1zz0V9BbZQ.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61019
IP address blocks: 46.8.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cc:03:2d:f4:4e:5a:c5:32:e0:be:92:32:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6188f685aa0e30c08503ba30ff5cf3d15f416d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:e8:3b:bf:0d:2d:63:a4:45:3e:48:01:f3:
30:be:f4:26:6f:3e:0d:ff:ef:6a:f9:b0:14:23:72:
74:a0:61:26:ab:52:20:da:68:69:76:d2:28:8a:b9:
ba:66:a6:e0:64:69:fd:6a:16:3b:ae:ec:c0:bd:e2:
a4:f2:cd:8c:65:c5:a4:a2:10:02:46:e7:67:7f:0d:
d4:e0:6f:2d:97:1b:91:ab:95:72:1a:43:86:aa:df:
89:a1:2d:41:1c:14:97:19:c5:84:de:99:54:88:25:
03:50:73:7b:90:55:13:56:b9:c5:99:1e:28:b1:80:
96:90:95:5a:7f:11:5c:60:af:af:93:8d:ce:12:14:
a9:2b:5e:7e:81:29:2c:91:ef:6e:2b:1f:7f:4c:0f:
94:91:1b:d2:ed:8a:3c:de:f3:84:df:fd:98:90:ae:
ed:1e:50:77:84:55:f5:3b:2e:42:1b:cb:84:0c:a0:
fc:6a:4d:d4:69:c1:e4:45:7d:76:28:c3:f7:12:d3:
3e:1d:1a:88:6b:3a:5d:b6:fd:78:f5:ae:af:6d:78:
dc:ec:42:a6:e2:69:b9:90:96:16:75:ca:ac:e4:b6:
03:3a:a6:f0:02:f0:2d:e1:bb:06:96:eb:88:6f:2e:
4a:27:f7:26:39:fa:74:85:20:93:78:94:5f:b2:16:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:F6:85:AA:0E:30:C0:85:03:BA:30:FF:5C:F3:D1:5F:41:6D:94
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YYj2haoOMMCFA7ow_1zz0V9BbZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.235.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c8:c9:f7:81:24:86:2e:9f:f2:61:3e:a5:8a:3b:ac:15:00:
f8:df:3b:26:c1:e9:36:25:c7:76:9b:de:a2:f2:47:a0:55:cc:
32:03:32:75:08:c1:b9:88:8d:e2:6e:70:b9:f4:e6:0e:71:64:
18:4a:ca:d9:a5:b6:39:95:50:79:d9:15:23:e2:fa:7b:8e:b9:
5c:33:99:12:3a:28:79:1d:05:10:8a:5d:40:62:28:b8:d3:0c:
ff:d2:65:6d:62:89:c7:2e:d9:34:75:eb:3d:1e:eb:35:39:60:
e9:94:e2:f1:39:80:d6:89:bf:da:38:9b:13:a5:88:5a:15:4d:
65:28:48:78:e4:d1:37:2d:a8:01:f1:15:ad:d9:20:5f:7f:0c:
2b:66:79:7f:53:cf:67:8d:48:bf:55:50:21:5f:8c:fb:8f:48:
30:ed:35:fb:b8:46:fd:46:8c:ba:75:53:59:28:fe:18:10:75:
6c:c3:c4:bd:77:69:30:f0:12:08:66:cc:b8:34:4f:2f:78:86:
75:e4:43:bf:59:2b:1c:6b:2d:02:76:6d:30:ea:e1:72:c9:31:
56:55:7e:5e:d5:28:78:e6:86:b3:b4:50:2c:d5:2a:04:85:a2:
ec:9b:73:10:a3:45:d4:26:a8:7c:8d:cf:ac:84:71:a5:4a:c1:
85:a0:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:21:45 2025 by rpki-client