Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YRuBMhFMdDAgDmUrmflneguRVhA.roa
File: YRuBMhFMdDAgDmUrmflneguRVhA.roa (raw, json)
Hash identifier: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=
Subject key identifier: 61:1B:81:32:11:4C:74:30:20:0E:65:2B:99:F9:67:7A:0B:91:56:10
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CCD22E672F63FC345A34F5987111
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YRuBMhFMdDAgDmUrmflneguRVhA.roa
Signing time: Thu 02 Jan 2025 17:52:33 +0000
ROA not before: Thu 02 Jan 2025 17:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214887
IP address blocks: 80.73.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cc:d2:2e:67:2f:63:fc:34:5a:34:f5:98:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=611b8132114c7430200e652b99f9677a0b915610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:94:57:69:1c:6b:bc:be:63:d1:5f:34:d6:
4c:05:5d:6f:f7:28:8f:1a:2f:4b:e5:12:df:7b:74:
51:c2:46:b9:22:f8:97:4a:7b:e7:3d:95:fd:b6:4f:
65:1a:16:a2:6f:5c:d1:e8:81:f0:b5:c0:d7:e5:d5:
de:d1:1c:f7:ff:b6:07:d2:91:22:82:ba:5a:0e:f9:
96:c5:52:a5:d1:96:9a:ca:f9:95:af:cf:3e:1f:75:
bd:18:7d:36:94:30:db:a3:dc:8c:2a:47:6a:cd:37:
c9:df:e1:b9:af:71:d3:6a:d9:4d:82:d9:43:0f:b9:
14:a2:db:e6:e4:32:e2:1f:8e:7e:98:e7:c9:80:3a:
f6:3f:f3:78:e9:cd:71:d0:09:f4:7e:b2:8a:61:c7:
b6:14:c6:23:76:25:03:8b:30:f6:af:b6:74:01:57:
a5:9f:e0:68:61:e8:91:d0:51:8c:ac:f3:c1:49:7f:
68:0c:24:f1:ae:23:1b:56:d6:10:0d:e7:86:af:d6:
85:88:95:94:6f:e1:70:ef:06:5e:9d:d4:75:1f:43:
e4:b9:5e:6b:85:48:44:df:c1:f5:6f:7a:dd:36:c8:
45:64:1b:2a:80:29:d7:89:d2:a7:3a:0f:e0:75:0a:
27:88:fc:ba:44:54:63:54:c4:96:06:72:4f:7c:73:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:81:32:11:4C:74:30:20:0E:65:2B:99:F9:67:7A:0B:91:56:10
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YRuBMhFMdDAgDmUrmflneguRVhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.193.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ae:12:23:e5:d6:05:66:af:04:98:1f:e6:9a:fe:34:0e:f9:
ac:9f:11:96:1d:f2:7e:12:a8:fe:01:a6:4b:37:68:82:fa:3a:
aa:4f:e5:f7:e7:d1:d7:2a:84:8b:0a:99:79:81:f9:47:86:c2:
70:04:73:46:16:ab:9a:ed:cb:76:15:ae:bf:eb:42:f1:bd:d3:
5d:14:e3:a0:7e:d2:6e:65:b0:ec:6c:79:a2:17:40:33:63:8b:
97:ed:33:d3:12:13:ea:ae:2e:f1:e9:8a:d1:68:0f:c4:49:52:
3c:6f:b5:af:f9:eb:f8:69:fc:a2:de:52:9d:82:ea:53:66:7a:
65:37:ca:60:70:8f:c4:d5:0e:77:a9:9c:5e:59:dc:9f:b9:c9:
a3:f0:ae:f1:15:52:55:ac:cb:b8:51:5d:a4:62:41:e4:24:a0:
66:8b:a7:4a:50:57:47:c5:d2:83:dc:27:9c:6c:47:30:3c:9a:
ed:e7:9b:93:61:c4:4f:51:24:b3:65:98:b0:65:d6:5c:00:a2:
d2:67:f0:4c:76:83:39:6d:f9:40:ab:fc:bd:d6:b7:3e:dd:ff:
f9:52:28:f8:a1:74:c8:ea:57:bb:e1:52:ea:8e:6d:54:04:34:
7b:71:a3:3e:f9:fd:60:29:7b:27:a4:51:45:2c:28:24:6c:e2:
a1:f6:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:30 2025 by rpki-client