Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/yueP6aik06BPwcnmsnEIlj3ek5g.roa
File: yueP6aik06BPwcnmsnEIlj3ek5g.roa (raw, json)
Hash identifier: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=
Subject key identifier: CA:E7:8F:E9:A8:A4:D3:A0:4F:C1:C9:E6:B2:71:08:96:3D:DE:93:98
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01941FFA6E84F13FD350F4CF8F9EA1D8B032
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/yueP6aik06BPwcnmsnEIlj3ek5g.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31396
IP address blocks: 193.30.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:84:f1:3f:d3:50:f4:cf:8f:9e:a1:d8:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae78fe9a8a4d3a04fc1c9e6b27108963dde9398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:e2:48:af:be:75:7b:64:e3:2e:4c:7e:74:
96:12:9c:19:ae:d9:8d:3d:b9:10:51:b3:08:8a:87:
83:5f:21:df:94:ec:22:42:25:d9:63:5d:be:27:17:
f7:8d:83:b5:78:cb:91:60:74:43:cb:d0:3d:02:0a:
30:59:ac:b3:f8:b2:28:3b:b4:03:16:79:b4:fb:27:
81:ab:8c:2b:af:ee:c5:33:04:32:90:79:55:5b:c9:
d3:ff:49:71:07:53:e1:f3:f3:55:00:b4:de:0d:fb:
af:e2:2e:47:ee:59:f5:63:3d:fb:c8:5b:11:b8:e1:
f8:1e:ee:d9:d8:dc:6f:1e:cf:d5:28:4b:b8:7f:ad:
38:49:11:14:d2:33:f7:93:6a:a4:74:90:04:25:07:
93:c3:a6:86:7e:ab:bc:c9:9b:1e:76:22:45:6c:9d:
f4:de:96:ac:7d:76:c2:22:24:49:e3:84:53:70:2d:
d5:3e:c6:4e:9c:8d:1e:3e:19:20:44:f7:e7:0f:2e:
d7:a9:74:d5:a0:33:83:22:fe:aa:87:73:5b:c8:3b:
22:cc:48:b1:87:5f:6e:f6:ea:c8:15:55:56:43:d6:
72:9a:7c:94:19:91:34:80:8c:6a:37:28:f3:79:5a:
b4:a4:95:1d:2e:9f:ac:57:2e:8a:6e:d2:4f:97:4c:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:8F:E9:A8:A4:D3:A0:4F:C1:C9:E6:B2:71:08:96:3D:DE:93:98
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/yueP6aik06BPwcnmsnEIlj3ek5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f1:09:3d:90:80:c3:7e:67:ff:b7:73:11:72:80:38:a9:74:
06:43:bb:11:d1:f3:3f:5b:ca:9f:b7:34:0e:61:e3:84:e8:ee:
04:1e:83:90:bb:e8:17:1b:d0:e4:1e:f4:b8:74:23:9c:a1:e8:
cb:49:b3:50:28:20:09:2c:29:22:7c:f5:e6:15:e9:8e:72:43:
2c:5f:eb:5b:75:c9:2d:f2:c7:dc:78:bb:11:45:97:17:1f:28:
56:17:aa:8a:5c:8a:6b:fd:7c:8b:6c:49:c8:f5:f4:a7:89:03:
6c:3a:45:b9:b0:53:5a:b3:09:9f:f6:52:37:92:46:c1:fa:42:
e1:91:7d:43:54:79:e8:c4:b4:b9:a9:f7:63:96:69:e1:c7:17:
5a:8d:8d:65:fc:73:96:c3:90:cb:19:ed:d4:fa:e9:3b:2b:97:
a4:1f:ff:4c:0b:bc:22:36:c3:2e:28:22:ca:a1:4b:15:5b:f5:
39:d4:d7:70:0d:26:17:01:52:fb:d4:8a:03:c1:57:b7:cb:1a:
85:ea:26:0a:87:65:c3:01:24:ac:fc:69:2d:fc:d9:f7:0f:4a:
c5:e3:af:63:36:0e:d7:a6:54:f0:7b:33:07:5d:98:09:24:af:
a5:80:21:15:34:d9:db:e3:fc:0c:e8:47:76:96:e9:92:e2:89:
10:c7:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:30:55 2025 by rpki-client