Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yKTEP0-0x3y1RZL1FsDDJAftAXg.roa
File: yKTEP0-0x3y1RZL1FsDDJAftAXg.roa (raw, json)
Hash identifier: aTMfT6XtBa6SBGS6NBF4Te21PkgIv7uLky7MvOU2dCI=
Subject key identifier: C8:A4:C4:3F:4F:B4:C7:7C:B5:45:92:F5:16:C0:C3:24:07:ED:01:78
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196432D65B908A073B1AE7CBB2FD0E780D4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yKTEP0-0x3y1RZL1FsDDJAftAXg.roa
Signing time: Thu 17 Apr 2025 09:56:10 +0000
ROA not before: Thu 17 Apr 2025 09:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 94.177.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:2d:65:b9:08:a0:73:b1:ae:7c:bb:2f:d0:e7:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 17 09:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a4c43f4fb4c77cb54592f516c0c32407ed0178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:81:d4:3c:28:6b:ec:88:7e:ec:e9:1e:10:
d6:dd:39:88:e3:41:46:17:3b:3c:a4:b5:3b:54:a5:
b3:9d:10:f6:bc:41:46:b7:60:dd:d4:7a:5c:0a:3a:
e8:d5:e4:43:c5:ea:60:ef:b3:62:83:6b:7d:24:4b:
77:af:21:f4:0c:3d:0b:5c:0c:33:b4:f8:e6:45:77:
49:a3:c2:7d:ac:e0:26:b0:e9:0f:b8:ee:a1:3a:86:
5a:9f:7c:a6:cb:8c:b3:cb:31:c0:af:80:e7:59:02:
0f:63:af:13:54:2c:0a:02:c7:4f:66:d9:f8:69:6d:
4e:81:b2:4d:fd:bf:49:d4:08:5e:97:bf:9c:2a:ad:
10:b4:de:51:49:1e:15:d5:36:a4:df:d8:31:54:49:
42:33:15:11:fd:06:4e:8a:01:c9:9a:d2:0b:32:2a:
c6:c4:3f:2d:76:3d:a5:8f:57:20:1c:e1:e0:92:51:
89:78:8d:1d:31:ba:89:54:c9:cc:d2:cc:7d:80:ac:
76:78:f2:7c:df:40:c3:89:b5:3c:e3:94:b5:98:7b:
a0:97:53:57:60:95:33:ce:08:fa:f1:e8:fe:1e:81:
6d:5d:85:46:24:92:34:44:9e:a4:46:21:10:ce:00:
1f:8f:6a:3a:b0:e6:c9:58:13:4b:e4:c7:07:97:05:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:C4:3F:4F:B4:C7:7C:B5:45:92:F5:16:C0:C3:24:07:ED:01:78
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yKTEP0-0x3y1RZL1FsDDJAftAXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:79:dc:3f:bc:63:06:4a:98:4f:89:06:63:16:e5:85:ac:4e:
ff:5c:e5:88:fb:04:af:9d:45:57:cc:21:e1:14:3a:2d:5d:82:
81:d3:40:6c:0f:6e:48:eb:d1:0a:2e:21:e6:8a:7a:7f:38:64:
e3:8f:8a:00:d2:86:80:a1:ac:c7:d8:42:6d:97:df:9f:68:b4:
05:60:6e:14:63:73:95:1d:1d:d1:e0:1d:2e:15:15:6f:67:f7:
f9:6f:30:de:3f:a8:9e:ad:10:c0:82:dd:d6:dd:94:cb:a0:df:
1f:7e:74:57:4c:e0:97:ec:c9:0a:a1:06:8d:76:f3:2e:13:4a:
94:52:0d:2d:97:1d:25:28:5b:76:87:5a:aa:12:41:2a:4d:e1:
0b:02:fb:6e:f2:f1:36:5c:2d:d8:a5:6d:74:34:17:5b:3a:78:
81:84:87:24:42:2b:ec:da:a2:dc:79:9a:32:f5:7d:90:3d:c2:
77:60:72:6e:34:47:18:e5:79:58:83:70:39:10:65:0e:15:c5:
59:56:f3:2e:38:5f:99:fe:79:f7:ee:2f:54:a4:57:84:0e:f1:
c4:19:29:82:4a:c1:87:21:20:08:f6:4f:79:48:0d:29:87:fc:
6d:26:ea:35:44:2f:6a:e2:ff:47:2e:b5:63:1f:8d:4a:4e:87:
60:a2:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:44:29 2025 by rpki-client