Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa
File: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (raw, json)
Hash identifier: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=
Subject key identifier: 60:AE:37:C1:49:71:FA:6D:C7:FC:2E:A8:FB:9F:DF:90:86:77:5E:55
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01942824103D7F3D03C14438067E68541923
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa
Signing time: Thu 02 Jan 2025 17:50:39 +0000
ROA not before: Thu 02 Jan 2025 17:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 5.102.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:10:3d:7f:3d:03:c1:44:38:06:7e:68:54:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ae37c14971fa6dc7fc2ea8fb9fdf9086775e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:be:06:50:f6:64:4a:c9:f4:6d:9c:70:4b:
54:13:fc:a6:c3:e6:90:6f:9f:51:72:5b:5b:af:70:
ee:c7:cd:f6:cb:be:5b:16:1d:16:f8:69:f6:69:c3:
ca:86:b5:c6:97:50:39:8b:de:cc:e8:01:f9:0e:02:
0f:4e:82:d5:94:a4:79:5f:de:9f:54:6f:2b:55:5c:
26:51:c7:a4:b1:78:cb:59:fd:06:87:9b:0a:90:04:
3f:de:5a:59:f5:5e:cd:e2:c4:de:28:55:48:d3:6a:
e6:c0:45:a2:b7:7d:b3:09:65:5f:dc:73:58:8b:47:
5c:28:21:ba:9a:47:d3:62:7b:db:8d:20:b4:97:65:
4c:af:9c:42:a4:8c:71:09:ab:8a:5a:99:a0:4b:0a:
fb:60:86:08:eb:8f:ad:ff:2c:58:66:d5:74:7d:ec:
2c:8b:98:01:02:dd:aa:fc:26:87:b2:44:8b:dc:cd:
d0:93:48:68:d8:5b:c5:99:ad:a1:30:b9:16:d2:48:
56:63:68:e6:6f:8c:4a:1f:2b:7d:e4:ff:e2:c8:aa:
b6:c5:0b:e1:e0:60:53:78:ed:c4:21:24:32:e8:c6:
1d:72:d7:fd:58:ae:56:37:52:7f:02:03:01:a3:fe:
99:05:06:8b:90:10:94:af:17:4a:f6:d9:e9:eb:8d:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:37:C1:49:71:FA:6D:C7:FC:2E:A8:FB:9F:DF:90:86:77:5E:55
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:3c:46:d4:16:a4:28:3c:19:16:67:98:4e:ce:06:27:d4:52:
d5:d5:83:94:02:20:fe:d8:c9:53:bb:1c:24:91:a7:af:d3:e5:
bb:af:0b:1a:39:60:30:89:d8:7e:3a:ca:58:6b:89:14:21:26:
86:83:2d:73:ba:50:30:58:5e:6e:d8:b1:fc:94:e9:a9:b6:0d:
25:06:1f:ef:fe:f3:9b:cb:9b:e8:a0:b6:04:72:4a:35:31:63:
e8:fb:67:2e:6d:11:0e:2e:fe:62:f2:5e:d9:38:13:72:a4:90:
fa:e8:86:98:9c:ca:3d:4f:95:47:3e:0b:d3:ee:85:72:ff:e0:
8f:be:89:6c:d4:b5:d1:cc:14:78:2c:84:62:f6:41:af:f0:b7:
e9:a5:ca:13:1b:5f:65:ce:46:a4:9f:ce:3f:a0:f6:74:d3:d2:
df:1a:fd:56:7a:69:ca:1f:55:21:db:69:85:a2:31:3d:b0:ad:
25:98:05:e8:66:b3:5a:bb:3f:a6:97:24:d3:7e:10:ce:ed:be:
1d:c5:3c:77:69:44:7e:b6:e4:2a:4f:85:6e:e3:bd:50:cd:f0:
7c:88:34:76:94:c4:3b:75:e3:42:d2:03:7b:b5:dd:0b:85:27:
a6:69:8a:d3:6d:62:fd:7b:ae:6e:ad:ec:5b:91:1b:f1:cd:0f:
2c:45:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:12 2025 by rpki-client