Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YRPVX6Jw6L2gvnJdAl32ppm_oIk.roa
File: YRPVX6Jw6L2gvnJdAl32ppm_oIk.roa (raw, json)
Hash identifier: Y0fkPI/UQODyImEkuEXUI5LvjSCPPIeQTUeJ2kjB0m0=
Subject key identifier: 61:13:D5:5F:A2:70:E8:BD:A0:BE:72:5D:02:5D:F6:A6:99:BF:A0:89
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B4FAAECD5E1E22377624FCBFF769
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YRPVX6Jw6L2gvnJdAl32ppm_oIk.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62074
IP address blocks: 188.212.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b4:fa:ae:cd:5e:1e:22:37:76:24:fc:bf:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6113d55fa270e8bda0be725d025df6a699bfa089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:b1:10:81:d9:6b:72:88:a7:36:f8:99:d8:
c4:a0:bb:da:f0:a4:8e:83:f6:ec:65:e6:8b:e0:d4:
10:c7:e8:bb:9f:c2:d5:41:25:c2:2e:3e:3b:71:f5:
d4:12:20:c6:c6:22:9e:ac:45:eb:63:6d:de:c0:14:
ce:b2:4a:af:ae:49:dc:20:4b:88:c5:c2:5c:51:ef:
e1:93:4b:ad:de:7b:09:9c:d8:25:83:7c:62:7c:78:
06:e4:84:b8:41:36:34:15:77:91:e3:f1:97:af:be:
6e:62:d9:69:e8:ce:f1:49:ea:76:3d:ea:5c:60:da:
d3:5b:dc:3f:cc:71:23:41:11:09:b1:84:ef:5b:85:
22:b2:34:3f:ab:0a:ca:78:ac:f0:1c:31:f5:6c:1c:
79:3f:39:27:bd:ea:75:0d:97:36:b7:b5:8c:0e:40:
1e:90:23:0f:02:a0:9f:f5:06:68:d9:46:0d:54:5d:
c1:ba:b2:a7:d0:ef:88:b6:7c:84:66:0e:fb:87:bf:
cb:55:42:13:1a:5d:b6:73:01:86:ab:7e:c0:f4:5e:
0f:3a:a4:a3:f3:5c:94:8c:2c:32:9f:11:1f:5a:f3:
4b:1f:46:16:ed:db:04:b5:c1:07:15:43:49:4a:51:
22:92:2e:58:2c:07:cd:d8:fd:81:5e:80:4d:5d:41:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:D5:5F:A2:70:E8:BD:A0:BE:72:5D:02:5D:F6:A6:99:BF:A0:89
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YRPVX6Jw6L2gvnJdAl32ppm_oIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.248.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:71:d4:fd:42:56:e3:af:9e:e0:bc:88:12:85:d0:87:70:0a:
d1:7e:ce:b4:d5:61:5e:d5:4d:ea:03:79:1d:de:4f:94:3d:cd:
f6:37:ec:f2:f0:18:37:93:66:1e:50:ab:b7:e2:47:48:ab:b2:
fe:ed:f5:03:83:20:c6:5a:f9:ab:44:59:e3:0d:df:d7:cf:64:
b9:86:70:32:33:cd:90:3a:76:e4:76:48:e1:86:06:e8:ce:e5:
fb:da:7f:63:77:7c:e4:eb:48:59:87:f3:a1:55:30:60:0f:9d:
4f:ae:ba:17:8f:7e:2a:91:ad:1a:7a:3c:4f:20:57:cb:57:e3:
03:b7:60:b8:8b:8e:ed:b0:0c:c7:bb:8e:c5:d5:c6:c7:d8:36:
c1:4d:0c:10:2b:30:a1:18:19:81:48:47:9a:4e:1f:57:bc:c4:
85:e5:15:55:74:4b:ee:b3:b9:cc:bd:b5:ca:c3:4f:97:c9:ed:
cf:a4:88:db:d0:b2:cf:ab:b0:ab:3f:a1:5d:9c:b8:41:79:06:
3d:cb:71:a0:42:cc:cd:39:fe:55:b2:b0:aa:ba:ac:10:9d:3c:
97:2f:ff:25:09:4b:87:b4:95:3a:d3:78:80:b6:0c:2e:a4:1f:
f1:c3:00:e1:02:52:b8:11:d8:1a:5f:1b:cc:92:c1:ba:25:8c:
f0:92:29:9b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjabT6rs1eHiI3diT8v/dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTEzZDU1ZmEyNzBlOGJkYTBiZTcyNWQwMjVkZjZhNjk5YmZhMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CGxEIHZa3KIpzb4mdjEoLva8KSO
g/bsZeaL4NQQx+i7n8LVQSXCLj47cfXUEiDGxiKerEXrY23ewBTOskqvrkncIEuI
xcJcUe/hk0ut3nsJnNglg3xifHgG5IS4QTY0FXeR4/GXr75uYtlp6M7xSep2Pepc
YNrTW9w/zHEjQREJsYTvW4UisjQ/qwrKeKzwHDH1bBx5Pzknvep1DZc2t7WMDkAe
kCMPAqCf9QZo2UYNVF3BurKn0O+ItnyEZg77h7/LVUITGl22cwGGq37A9F4POqSj
81yUjCwynxEfWvNLH0YW7dsEtcEHFUNJSlEiki5YLAfN2P2BXoBNXUE6rQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGET1V+icOi9oL5yXQJd9qaZv6CJMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1lSUFZYNkp3NkwyZ3ZuSmRBbDMycHBtX29Jay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81Pgw
DQYJKoZIhvcNAQELBQADggEBAL1x1P1CVuOvnuC8iBKF0IdwCtF+zrTVYV7VTeoD
eR3eT5Q9zfY37PLwGDeTZh5Qq7fiR0irsv7t9QODIMZa+atEWeMN39fPZLmGcDIz
zZA6duR2SOGGBujO5fvaf2N3fOTrSFmH86FVMGAPnU+uuhePfiqRrRp6PE8gV8tX
4wO3YLiLju2wDMe7jsXVxsfYNsFNDBArMKEYGYFIR5pOH1e8xIXlFVV0S+6zucy9
tcrDT5fJ7c+kiNvQss+rsKs/oV2cuEF5Bj3LcaBCzM05/lWysKq6rBCdPJcv/yUJ
S4e0lTrTeIC2DC6kH/HDAOECUrgR2BpfG8ySwboljPCSKZs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:28 2025 by rpki-client