Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9-D_A452NQE_kaUipcbJQS7_E.roa
File: yc9-D_A452NQE_kaUipcbJQS7_E.roa (raw, json)
Hash identifier: XDjW2VL5YROyfMMSsJQlleRdi934m8+rGvAdjN4BtWw=
Subject key identifier: C9:CF:7E:0F:F0:38:E7:63:50:13:F9:1A:52:2A:5C:6C:94:12:EF:F1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282774A10C9C1F09D453959933FEDC75
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9-D_A452NQE_kaUipcbJQS7_E.roa
Signing time: Thu 02 Jan 2025 17:54:21 +0000
ROA not before: Thu 02 Jan 2025 17:54:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 91.132.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:74:a1:0c:9c:1f:09:d4:53:95:99:33:fe:dc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9cf7e0ff038e7635013f91a522a5c6c9412eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:09:bf:97:b2:1c:51:64:17:1b:69:56:c8:
b9:cf:0c:ae:77:9f:28:92:a8:37:a2:0c:dc:f4:d8:
32:8a:0a:8e:c0:85:ce:5b:30:39:46:39:01:80:a2:
c2:75:27:5c:b8:d0:7e:92:cd:d2:f8:f4:1d:83:99:
85:ad:e9:f2:7c:db:88:3d:41:b1:20:c1:af:b1:06:
01:31:12:1e:b7:bf:8f:a7:45:9d:2f:a6:fe:a2:4f:
df:63:e2:20:4b:97:a9:24:20:96:08:f1:07:af:78:
06:71:56:bb:eb:1c:08:00:71:a2:db:97:ed:41:1a:
4b:5e:a6:d2:55:dd:7c:04:a6:99:fa:4f:c6:f1:5e:
b1:77:13:b4:49:4d:de:a3:a8:40:eb:ac:92:49:bf:
71:2b:f2:72:b3:bf:0c:38:b6:bd:ad:97:da:31:87:
19:80:cc:ca:4e:8e:4d:d7:8e:11:03:cd:97:45:5d:
66:ed:ab:4f:16:90:eb:ab:6a:46:c0:6a:56:35:ba:
a7:01:ef:4a:e3:c0:1e:15:d7:27:0e:e4:f1:37:69:
68:79:b2:f7:ab:03:05:71:17:f2:4b:2b:e0:9b:60:
79:07:1b:d3:03:ee:c4:fc:36:c3:1f:1d:30:f8:b8:
4b:6a:81:31:cd:31:84:1a:36:31:66:4b:81:99:b1:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:7E:0F:F0:38:E7:63:50:13:F9:1A:52:2A:5C:6C:94:12:EF:F1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9-D_A452NQE_kaUipcbJQS7_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bb:a0:5c:ef:7e:27:4b:c5:b3:ab:78:fc:80:20:b4:ad:ad:
33:4f:be:61:df:7a:30:23:10:bc:ab:84:80:78:66:f6:1b:a2:
50:b0:4f:6a:fe:6f:b4:53:f2:02:36:82:51:7f:3f:ac:73:c8:
51:0a:da:70:94:d2:d7:ec:aa:00:e6:d1:d5:6e:ed:e8:99:0c:
4b:89:e4:0a:a1:40:d1:d1:a1:9e:b2:f7:6f:e7:5f:ed:7d:07:
6f:be:e5:d3:a1:7e:66:31:c3:9e:48:cd:31:d3:b6:d4:01:dc:
7e:45:e2:9d:46:1a:66:57:71:d9:0d:21:67:28:3f:38:78:da:
94:a3:c8:ed:24:fa:37:1f:8e:2d:0d:52:0d:24:e3:4f:e0:f2:
8e:58:04:2b:6c:04:50:bc:0a:b7:d6:af:d3:d3:a9:18:8e:16:
0f:8c:71:4c:84:48:e0:58:c2:54:b0:9d:89:bd:0e:c1:2a:31:
67:4f:ad:53:e0:37:e6:07:44:9b:70:2c:db:6e:9f:a5:4a:8a:
7d:5b:9d:a7:a5:54:07:63:ec:1d:77:ad:a1:26:13:13:ed:9d:
37:69:11:77:d8:d8:7a:5b:b5:f5:95:06:49:0b:ea:b4:41:10:
f2:aa:f7:1f:a7:bc:e2:cd:c6:dc:a8:cb:24:83:5d:59:34:c1:
03:94:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:48:38 2025 by rpki-client