Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YwyROsLXS46Sx4a7dO7BvxlhzcM.roa
File: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (raw, json)
Hash identifier: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=
Subject key identifier: 63:0C:91:3A:C2:D7:4B:8E:92:C7:86:BB:74:EE:C1:BF:19:61:CD:C3
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CC4FEA08B7D5A5A419319EDD17C4
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YwyROsLXS46Sx4a7dO7BvxlhzcM.roa
Signing time: Thu 02 Jan 2025 17:50:22 +0000
ROA not before: Thu 02 Jan 2025 17:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20776
IP address blocks: 89.3.240.0/21 maxlen: 21
89.3.248.0/21 maxlen: 21
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
212.198.242.0/23 maxlen: 24
212.198.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:cc:4f:ea:08:b7:d5:a5:a4:19:31:9e:dd:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=630c913ac2d74b8e92c786bb74eec1bf1961cdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:0e:75:94:6e:8f:79:9d:92:44:aa:d1:34:
f1:95:94:31:eb:f6:54:25:48:81:ba:e0:06:ac:5d:
48:4a:a8:0d:6d:3e:63:e5:70:84:a7:62:ff:fb:55:
18:23:c9:34:48:08:e0:d6:61:f9:c9:e0:af:b6:7d:
d4:81:02:0d:60:26:b9:bb:7f:fd:4c:32:34:f5:68:
59:38:af:43:f6:d9:10:47:a1:18:c2:18:58:6e:fa:
63:8c:b4:f9:2b:12:2c:62:8c:41:e9:3d:b6:16:22:
e0:3c:67:5c:3e:d7:10:c1:f4:df:02:f0:3e:f2:c9:
b0:ad:ca:5f:fd:77:bd:fe:65:93:68:bf:88:fb:ec:
43:37:c4:d4:61:f3:a0:6d:07:7d:62:92:a6:d4:0b:
54:66:11:81:62:70:7c:00:0e:14:fe:f3:b8:a5:d6:
cf:a0:fa:34:2c:9f:e9:94:53:76:23:b0:df:7c:73:
fc:55:d8:e5:57:c3:81:7a:20:96:b2:f2:89:9a:05:
4d:0d:dc:10:16:b1:d9:59:99:b7:1b:40:b7:03:3c:
00:f8:7e:9b:99:42:ba:4e:06:3d:f3:bf:a6:88:bf:
55:51:3b:04:d0:ba:46:a7:f9:ce:9b:a6:f0:0b:2e:
49:a5:ab:e2:6d:ed:8e:b6:d2:0d:e9:9d:1b:7f:90:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:91:3A:C2:D7:4B:8E:92:C7:86:BB:74:EE:C1:BF:19:61:CD:C3
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YwyROsLXS46Sx4a7dO7BvxlhzcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
89.157.88.0-89.157.127.255
212.198.242.0/23
212.198.254.0/23
Signature Algorithm: sha256WithRSAEncryption
67:6c:9d:5f:e6:f1:1d:2c:ed:cc:83:d5:bf:c9:18:13:e5:90:
e7:13:79:0d:d5:45:9a:0d:cd:9c:0a:bb:89:22:b9:ba:6e:1b:
04:ba:b2:18:fe:50:68:13:d4:f5:66:05:32:b8:97:3c:08:82:
d2:8d:1e:ff:a4:1c:84:59:b7:d5:85:10:f3:10:5f:25:fa:79:
85:9d:4a:81:96:04:86:ac:f7:29:eb:6f:df:67:7c:6f:a3:f0:
78:2d:8a:b6:41:a1:1b:36:5f:e5:ff:83:28:fb:94:bd:0a:6e:
36:b0:7b:dc:fe:75:91:1e:79:4e:92:38:89:14:b6:5b:36:26:
27:4e:b7:c4:fd:16:5b:eb:94:b0:43:cf:3b:71:47:fc:49:7f:
cc:4b:ad:e3:29:da:2a:22:6e:d0:92:7f:8c:3d:ff:5b:28:0a:
88:44:97:05:83:97:99:49:54:4f:2e:07:23:45:59:84:34:9a:
d1:4f:77:0d:1a:e9:4a:d1:b6:9c:3e:31:2d:37:0e:96:0d:0f:
86:5a:5f:20:79:61:36:32:58:5e:0c:65:36:ca:25:37:4b:b9:
ca:53:b2:02:ce:ee:8f:c7:d4:9e:fe:e9:08:61:6c:bf:1b:9a:
b7:f4:9e:e6:56:2e:86:9a:77:6d:2f:d8:e0:c1:ba:21:27:da:
17:27:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:40 2025 by rpki-client