Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ymUe46neJOfer2FlXL4hqTjLW_Y.roa
File: ymUe46neJOfer2FlXL4hqTjLW_Y.roa (raw, json)
Hash identifier: PNuOBURszYGzhUo70moFMTcp42pJmNPBoyQQ14cZ1J0=
Subject key identifier: CA:65:1E:E3:A9:DE:24:E7:DE:AF:61:65:5C:BE:21:A9:38:CB:5B:F6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AFA4CAB12A06791D8DFC111926C4
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ymUe46neJOfer2FlXL4hqTjLW_Y.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61050
IP address blocks: 89.44.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:af:a4:ca:b1:2a:06:79:1d:8d:fc:11:19:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca651ee3a9de24e7deaf61655cbe21a938cb5bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:1f:80:2a:39:56:7c:9b:b0:98:a1:b8:1e:
68:f7:8f:08:7f:e5:73:2c:cc:bb:1b:87:1d:ac:4f:
32:e9:dd:4c:c3:a0:fd:54:be:f1:a7:1f:e8:1e:c9:
f7:65:c2:9f:96:52:e9:46:72:07:0b:7c:fb:04:29:
55:33:f1:b5:32:77:32:56:02:64:14:91:7c:88:c7:
cc:90:6b:df:59:c4:06:c1:9b:b3:61:6f:cd:71:db:
eb:e1:de:26:97:15:00:f6:16:3a:39:24:48:ef:a6:
c9:60:f6:43:33:36:fd:20:e4:0f:e4:b6:e5:5d:8e:
ac:12:e4:9e:a4:ed:31:ce:6b:7d:71:a8:8b:cf:a7:
7b:53:92:1c:bb:4e:ac:e2:8b:5f:d0:f1:6e:7e:c4:
c3:cd:ee:68:11:e5:28:37:ba:98:cd:85:70:d3:6c:
35:d3:17:51:12:88:42:14:ea:94:8a:92:a1:76:e9:
8d:49:b7:4d:4f:13:4c:62:d3:cf:c4:56:0a:cf:89:
8e:fc:cf:51:6a:2d:a9:00:c3:c9:65:cd:4f:16:2c:
70:96:7e:aa:e4:ba:ab:84:40:27:f0:1b:00:66:f4:
b3:58:f9:bd:68:fa:cf:83:63:9b:91:20:f0:0a:9c:
07:4c:d0:d6:3d:b8:26:54:d5:bd:0a:f6:b3:1b:c0:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:1E:E3:A9:DE:24:E7:DE:AF:61:65:5C:BE:21:A9:38:CB:5B:F6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ymUe46neJOfer2FlXL4hqTjLW_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.122.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3e:56:80:22:2d:91:65:e6:c4:cf:38:83:77:99:91:d0:d2:
a7:c1:77:b2:97:d7:cd:70:a3:e9:cf:6a:8f:c6:fa:1a:fb:2d:
d1:5e:7e:82:ae:f7:de:52:27:9b:72:c2:bd:22:ac:dd:b3:70:
4a:58:54:86:00:d0:3f:7a:21:d7:23:06:df:f0:71:ac:04:75:
7b:61:39:cb:8e:29:b4:5b:64:d7:41:37:02:b4:95:a3:c6:ce:
68:dc:0f:9a:72:0c:54:e0:e4:90:a6:9c:ef:b6:a7:68:cd:36:
9c:40:70:04:56:77:7d:61:45:de:78:3e:5c:e3:ff:19:aa:6b:
65:c2:20:81:be:18:3f:b8:61:25:35:38:0e:f3:2e:9c:57:e3:
7a:a0:92:9d:c3:0a:31:8c:04:87:05:bc:8b:b7:ff:d4:26:ea:
80:f4:6b:d6:df:17:8a:0b:c1:96:b1:82:9b:61:ed:47:c2:9b:
ca:91:14:e8:9f:9e:e2:c2:f0:fc:fa:d5:df:ef:a0:e4:c8:61:
b5:d9:10:3a:c0:e6:90:f3:16:bd:00:62:dc:06:98:32:a4:ae:
ab:5c:75:5d:ae:13:23:1e:99:bb:af:5d:d1:86:7a:ad:98:7a:
6d:c3:ba:d4:59:25:35:76:44:b1:8f:ac:db:84:fa:81:d7:92:
4b:8c:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:02 2025 by rpki-client