Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/YwSn1lGGwl7KLAZTYR2zvBndC9g.roa
File: YwSn1lGGwl7KLAZTYR2zvBndC9g.roa (raw, json)
Hash identifier: 8r7UZf1B94Wo3xzBwCz0diJ6mM+rBducaQI/NNaX0EM=
Subject key identifier: 63:04:A7:D6:51:86:C2:5E:CA:2C:06:53:61:1D:B3:BC:19:DD:0B:D8
Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial: 01970CB31EC8122640BF7A96856FE3867D30
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/YwSn1lGGwl7KLAZTYR2zvBndC9g.roa
Signing time: Mon 26 May 2025 13:05:54 +0000
ROA not before: Mon 26 May 2025 13:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44019
IP address blocks: 31.128.176.0/22 maxlen: 22
146.19.241.0/24 maxlen: 24
193.238.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:b3:1e:c8:12:26:40:bf:7a:96:85:6f:e3:86:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Validity
Not Before: May 26 13:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6304a7d65186c25eca2c0653611db3bc19dd0bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:a9:ae:3f:6a:2c:c7:22:9e:12:98:37:33:
8c:5b:3a:11:41:33:d9:83:78:c3:56:b4:c0:76:87:
ce:ed:8a:07:d3:7a:a7:aa:fc:9f:20:c0:7b:d9:66:
87:6b:dd:e9:99:48:a7:47:c2:89:6a:8f:fc:47:bd:
00:ab:c2:07:37:c5:2d:56:d3:ad:6c:e3:aa:c8:fc:
ee:31:86:ea:2b:84:01:d7:93:23:c3:f9:30:1e:40:
d8:fb:00:40:b7:06:9e:f7:21:7b:9e:57:13:d8:aa:
6a:6d:1d:f5:82:42:96:31:58:99:60:30:9a:ff:09:
cd:04:4b:e3:62:44:a0:f5:8b:e0:40:b1:b5:ed:c3:
f3:69:aa:0d:5b:99:8f:49:8a:d4:ea:84:a4:43:b3:
3b:42:61:d1:9d:35:9e:5f:79:43:b9:dc:2b:4f:7f:
8b:47:80:c8:eb:a6:ab:65:53:40:5d:48:e6:de:50:
a1:8a:ab:4c:7d:57:e4:a7:d3:e3:ee:c6:b4:18:26:
85:85:e2:9c:d0:20:24:e9:77:bb:29:fa:15:db:9a:
8b:03:3e:a8:d7:39:bc:54:19:10:ea:48:db:64:67:
3f:97:cf:1b:da:ce:3d:0e:36:b9:6b:ad:a6:d4:04:
cc:54:1f:d5:08:59:5f:66:9e:f2:52:c1:a1:02:45:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:A7:D6:51:86:C2:5E:CA:2C:06:53:61:1D:B3:BC:19:DD:0B:D8
X509v3 Authority Key Identifier:
keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/YwSn1lGGwl7KLAZTYR2zvBndC9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.176.0/22
146.19.241.0/24
193.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4f:2f:30:b3:5b:23:f0:a6:c2:3f:69:f3:69:a7:d4:8a:c6:
77:57:a9:95:ab:d4:c9:3e:7a:ca:dc:12:b2:ae:10:d6:52:3f:
b9:53:9a:24:1b:18:6e:33:77:00:c7:d0:a9:2c:ab:60:74:73:
5a:35:38:4d:24:b2:72:8f:d6:91:89:6b:01:a7:bb:ba:0a:ac:
b9:a0:15:68:ef:1b:99:5b:ea:cf:39:5d:63:66:5f:9f:81:71:
b6:c6:aa:99:52:b9:21:01:50:87:d8:0b:64:16:7d:0e:d9:e5:
44:49:11:09:83:78:0c:f0:c4:7d:25:dc:f0:ae:07:4d:ff:9b:
d1:e9:1b:f1:a8:f0:0e:3d:5d:3a:80:79:e4:a2:89:58:31:d5:
bd:05:a6:46:b5:22:56:ea:50:6e:cf:47:60:4a:9c:94:f7:17:
69:10:6a:f2:1b:1f:b2:03:ae:cd:c9:25:13:b2:d4:78:e2:81:
f4:d6:b4:c4:c9:cb:a0:53:fb:c3:01:9b:c1:31:4a:04:bc:0a:
5f:76:62:ce:af:be:84:e7:bf:96:ec:5d:59:31:0b:1e:6f:a3:
78:c1:6d:3e:7b:5a:71:2e:bb:fc:13:18:12:1c:1f:72:b7:f9:
77:00:0b:67:50:c1:e8:03:1e:12:19:3c:5d:a0:44:b2:c3:e7:
6f:6e:5e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:53 2025 by rpki-client