Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa
File: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (raw, json)
Hash identifier: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=
Subject key identifier: 60:F3:05:7B:90:6E:E6:99:D4:7C:E3:4A:AC:A4:7B:06:2A:9F:74:28
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 0194CB3E03771D816F7D2C44137C4EEFD661
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa
Signing time: Mon 03 Feb 2025 09:57:06 +0000
ROA not before: Mon 03 Feb 2025 09:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214679
IP address blocks: 45.88.57.0/24 maxlen: 24
2a0d:3480::/29 maxlen: 29
2a0d:3480:a::/48 maxlen: 48
2a0d:3480:b::/48 maxlen: 48
2a0d:3480:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:3e:03:77:1d:81:6f:7d:2c:44:13:7c:4e:ef:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Feb 3 09:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f3057b906ee699d47ce34aaca47b062a9f7428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:cc:ff:f2:e3:31:bd:92:3a:18:f3:5e:c5:
9e:eb:6a:66:be:df:f5:c8:e8:e9:92:a7:48:3f:28:
1a:7b:54:9a:a7:90:bb:1f:fc:5b:28:60:e4:e8:0a:
1c:dc:4d:b9:ab:16:7e:3a:f1:f1:4e:98:90:49:03:
0e:26:f1:22:3a:b0:d3:7b:7b:f7:4e:7c:92:f1:ea:
2e:99:12:2b:4f:41:19:3f:31:4e:5e:99:6a:77:ea:
08:06:59:5c:56:3a:84:96:78:e4:c0:9a:84:d1:9d:
2f:2d:6a:5f:5f:57:ca:15:a1:11:21:88:0a:42:87:
40:cf:d3:f4:80:7d:39:5b:ac:a5:fd:78:19:31:e0:
3b:c2:7b:19:96:b6:8c:73:70:1e:13:5a:30:be:0f:
72:c7:89:04:b6:ee:78:2c:49:2f:42:e9:bd:20:64:
41:f7:5b:5e:ca:cd:b9:4d:6f:93:c3:62:52:39:17:
dc:77:fe:ff:9b:9f:3a:57:a6:c9:8c:9a:ab:ec:3f:
8c:09:70:25:78:c5:96:bd:1f:e3:38:20:ad:f0:ce:
d6:17:68:95:f8:98:20:54:74:65:77:e8:bd:32:7e:
c2:07:b6:a7:27:c2:28:f3:98:d9:c5:b4:de:2d:a6:
ee:72:ce:db:a1:ee:b8:10:e5:1d:4a:4b:2d:47:d4:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:05:7B:90:6E:E6:99:D4:7C:E3:4A:AC:A4:7B:06:2A:9F:74:28
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.57.0/24
IPv6:
2a0d:3480::/29
Signature Algorithm: sha256WithRSAEncryption
81:28:9c:76:31:c5:7c:7b:98:e8:60:8b:11:8c:eb:ea:58:20:
dd:e7:2b:4a:3b:ef:5e:21:4d:24:a4:43:31:2c:f6:2d:0f:c5:
04:fc:0d:10:c0:be:5d:af:e9:3b:65:ca:03:d1:4f:c1:ee:87:
ff:d8:f2:a2:9c:cd:91:95:a9:9a:5a:04:9e:76:3e:f3:98:56:
00:a5:66:8c:08:c6:8b:c5:7b:10:5f:cf:81:cc:cb:3b:1d:7a:
2c:43:a7:22:47:e9:4d:9d:a8:84:49:78:05:46:d1:ec:e1:ec:
d9:51:52:41:7f:de:36:1b:93:98:f5:fb:2b:c7:89:0b:96:ba:
b9:6b:f6:d3:c7:c1:8e:c2:9b:9c:3e:18:31:00:29:f3:18:8a:
89:dc:2e:3a:7c:52:43:cc:6a:2b:47:fe:6a:36:16:14:7f:09:
34:73:5e:c5:ed:de:85:cb:3b:f8:9c:70:ef:89:0c:de:a8:65:
eb:b5:e9:69:42:9f:5d:af:9a:af:9f:8e:cf:24:07:d1:e1:9c:
1a:67:1d:ee:0e:80:51:88:71:8f:99:9b:fe:e9:25:e1:e7:44:
dc:e1:3e:93:28:c7:53:4a:67:7f:34:5e:59:4d:e5:4e:82:47:
d9:7c:67:a5:aa:a4:56:09:10:ad:2f:e7:d0:d8:b7:1d:69:34:
69:75:24:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZTLPgN3HYFvfSxEE3xO79ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTU2MzQ3N2NhMmJkZTY5ZWY3OTQzOTkxZjk1MzMzMDU3
YjNlMzYwHhcNMjUwMjAzMDk1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGYzMDU3YjkwNmVlNjk5ZDQ3Y2UzNGFhY2E0N2IwNjJhOWY3NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvObM//LjMb2SOhjzXsWe62pmvt/1
yOjpkqdIPygae1Sap5C7H/xbKGDk6Aoc3E25qxZ+OvHxTpiQSQMOJvEiOrDTe3v3
TnyS8eoumRIrT0EZPzFOXplqd+oIBllcVjqElnjkwJqE0Z0vLWpfX1fKFaERIYgK
QodAz9P0gH05W6yl/XgZMeA7wnsZlraMc3AeE1owvg9yx4kEtu54LEkvQum9IGRB
91teys25TW+Tw2JSORfcd/7/m586V6bJjJqr7D+MCXAleMWWvR/jOCCt8M7WF2iV
+JggVHRld+i9Mn7CB7anJ8Io85jZxbTeLabucs7boe64EOUdSkstR9QCzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGDzBXuQbuaZ1HzjSqykewYqn3QoMB8GA1UdIwQY
MBaAFAPlY0d8or3mnveUOZH5UzMFez42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAt
MWYxZWM0MDBmYTUwLzEvWVBNRmU1QnU1cG5VZk9OS3JLUjdCaXFmZENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAtMWYxZWM0MDBmYTUw
LzEvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVg5MA0E
AgACMAcDBQMqDTSAMA0GCSqGSIb3DQEBCwUAA4IBAQCBKJx2McV8e5joYIsRjOvq
WCDd5ytKO+9eIU0kpEMxLPYtD8UE/A0QwL5dr+k7ZcoD0U/B7of/2PKinM2Rlama
WgSedj7zmFYApWaMCMaLxXsQX8+BzMs7HXosQ6ciR+lNnaiESXgFRtHs4ezZUVJB
f942G5OY9fsrx4kLlrq5a/bTx8GOwpucPhgxACnzGIqJ3C46fFJDzGorR/5qNhYU
fwk0c17F7d6Fyzv4nHDviQzeqGXrtelpQp9dr5qvn47PJAfR4ZwaZx3uDoBRiHGP
mZv+6SXh50Tc4T6TKMdTSmd/NF5ZTeVOgkfZfGelqqRWCRCtL+fQ2LcdaTRpdSRi
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:21 2025 by rpki-client