Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa
File: yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa (raw, json)
Hash identifier: oTSjwH5eKf8we68+dtERfn9uiSN2W5Nb5pDWgRrwsxA=
Subject key identifier: CA:A7:62:D8:8E:26:BF:2A:A6:07:8F:B6:07:33:E4:32:42:77:84:86
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 01942823A1A536D717531207067E9D8DFB27
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa
Signing time: Thu 02 Jan 2025 17:50:11 +0000
ROA not before: Thu 02 Jan 2025 17:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35434
IP address blocks: 91.222.212.0/22 maxlen: 22
195.242.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a1:a5:36:d7:17:53:12:07:06:7e:9d:8d:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jan 2 17:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa762d88e26bf2aa6078fb60733e43242778486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:8c:dd:e4:13:7a:08:4d:ad:54:b0:94:2b:
88:d9:ad:e4:ff:00:35:a5:8b:32:fa:21:a9:60:54:
0b:4d:55:40:7a:b5:e6:94:92:ca:88:32:f6:d4:b1:
c7:e7:80:ff:6e:5f:27:b8:77:c3:2d:e4:9b:3c:3a:
99:d5:5a:5f:6a:f3:16:05:2f:32:15:a3:6c:ea:28:
42:a1:bb:00:9b:de:4a:eb:c7:f6:f4:ba:67:ac:c6:
80:f0:66:75:da:65:81:72:e4:52:21:b8:3b:87:af:
40:2d:84:40:76:a4:91:b3:fb:d8:fe:52:6e:ea:8f:
57:51:e9:6a:6d:0a:12:61:de:85:a9:13:b9:5b:93:
bd:11:f1:db:32:28:69:8e:3f:a6:57:d7:91:77:d6:
54:00:a0:14:6a:9d:cf:31:52:8d:37:bc:67:fa:58:
cd:aa:53:49:b8:59:7e:ba:5f:4d:0f:23:2b:b5:7d:
20:f8:46:67:a4:82:0c:15:10:2a:6f:b5:31:8e:26:
d8:40:fb:81:88:4a:93:83:f3:cc:40:36:ee:b3:70:
22:20:0d:18:f8:0b:75:24:35:d4:8d:e5:eb:f7:3e:
a0:2f:1e:fa:59:9e:9d:70:9e:66:94:09:27:d4:77:
0f:09:14:ae:02:60:4b:3f:08:c7:a7:65:a5:9e:ef:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:62:D8:8E:26:BF:2A:A6:07:8F:B6:07:33:E4:32:42:77:84:86
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.212.0/22
195.242.128.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:2e:d0:40:be:62:c3:f2:98:e6:ec:f7:b0:06:3c:81:bc:5c:
68:d1:73:e9:2a:b7:73:11:3b:da:99:9d:8f:d5:a6:bd:ee:c5:
02:c9:55:de:c5:46:05:f2:9e:af:74:9c:41:37:29:22:66:89:
cf:b0:8e:fc:cd:e2:ae:f7:e2:7c:ca:c1:15:47:75:e5:d7:4e:
6e:96:ca:c0:bd:45:d6:b4:47:98:20:5a:b7:a9:61:ed:de:58:
58:2c:a1:a6:14:73:29:1b:b0:0d:15:61:b8:60:0d:53:c4:fc:
b1:ed:03:fb:46:28:7b:3f:2d:fa:ce:e2:a1:9d:04:b3:79:68:
52:b3:54:40:fd:d9:16:88:c6:42:3b:a2:a5:22:6f:9b:97:ac:
b6:d2:41:b3:fc:17:9d:56:c6:9f:d9:2b:a6:39:e3:7e:cc:57:
bb:e1:f5:a6:43:1d:7b:58:a4:84:11:07:c1:8f:8c:60:8f:fa:
b5:da:4b:6c:fb:ff:cc:d5:5d:2a:f0:cf:06:86:af:c1:e8:71:
e8:53:77:93:dd:29:3b:44:b6:cf:2a:b1:c6:35:de:72:92:a6:
6c:a1:17:c6:e1:8c:7b:b6:62:fe:1f:23:25:16:4c:b2:82:51:
10:08:2f:f6:b7:db:21:fd:8b:bd:d5:7f:cf:74:00:05:58:74:
bd:7e:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:43 2025 by rpki-client