Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/YRiImFoNZVxU37wmm_1wL-_QqNY.roa
File: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (raw, json)
Hash identifier: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=
Subject key identifier: 61:18:88:98:5A:0D:65:5C:54:DF:BC:26:9B:FD:70:2F:EF:D0:A8:D6
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 019423D71300D010E7DA7E89BE06230E056F
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/YRiImFoNZVxU37wmm_1wL-_QqNY.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35753
IP address blocks: 194.11.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:13:00:d0:10:e7:da:7e:89:be:06:23:0e:05:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=611888985a0d655c54dfbc269bfd702fefd0a8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:cf:90:19:af:72:9b:d3:58:01:d7:64:06:
23:fb:65:1f:44:f9:fe:77:13:90:4c:d7:84:6c:70:
1b:89:bb:59:cf:2b:48:c2:cb:68:b3:f6:78:d9:01:
a3:6e:f3:4d:88:ce:80:07:09:ad:b9:74:ce:e0:ab:
81:69:8d:f0:0c:29:00:0b:21:1a:0e:19:61:e4:22:
78:e1:0c:e6:ca:54:67:0f:28:8f:4f:77:99:87:85:
76:00:b0:b4:18:ff:43:3c:e7:79:60:e9:ca:4b:b1:
7e:00:ae:40:32:30:a5:2a:55:12:91:c9:e4:6f:21:
b0:b2:f5:3d:de:b0:28:2c:2d:13:be:ea:78:2e:16:
11:1f:c5:0b:2a:ed:fd:bb:b6:4c:c1:a9:9f:17:db:
76:0a:78:24:d1:26:d6:ee:16:8e:43:94:ba:a5:83:
f2:ea:28:96:c4:4d:44:1b:8a:70:51:1a:b8:e8:e2:
ea:9f:45:16:25:35:36:0e:fd:5d:85:d9:be:e8:d9:
ae:2c:91:37:91:71:14:1c:45:ad:7a:50:0c:f1:ee:
83:c0:8e:25:93:9f:6e:57:4a:e6:7b:00:0c:05:42:
e1:24:b6:ba:d1:39:f5:96:ef:d1:91:bc:86:9a:b8:
9a:00:29:2f:86:76:bc:0b:b0:f0:c6:a0:2a:07:39:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:88:98:5A:0D:65:5C:54:DF:BC:26:9B:FD:70:2F:EF:D0:A8:D6
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/YRiImFoNZVxU37wmm_1wL-_QqNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
73:61:55:f6:52:bf:fd:63:b5:1b:6f:92:f5:75:7c:9b:8c:d6:
8a:71:a0:89:cb:5e:c2:f6:8d:c2:91:5f:fe:ce:08:7c:82:33:
45:2c:ea:44:ec:cb:9c:f5:a9:bb:5a:7f:cc:88:16:97:5b:57:
fd:18:bd:cf:6b:f7:c1:88:35:75:ba:9f:31:d2:d6:3f:47:7c:
54:37:3c:6f:08:a3:51:74:8c:59:f9:17:a8:67:d8:20:da:03:
0a:e3:45:11:a8:d4:3b:bd:08:5b:46:72:23:e9:59:72:6e:fa:
99:ad:8e:7e:80:53:fc:b2:45:88:60:8f:40:42:bc:28:c5:be:
2b:52:7d:85:ec:f1:01:ba:4c:a1:6e:f5:fc:35:05:1d:cf:a6:
de:a5:a2:18:3a:60:e5:a2:e1:d8:b1:c2:c2:ae:c0:f4:da:0d:
e2:83:f0:1b:c5:a6:11:e6:7b:69:37:09:74:85:c9:ca:2b:25:
3d:38:04:bd:0e:db:05:18:50:e9:9b:4a:74:37:70:e0:cf:d4:
31:a0:0d:a8:ee:6e:fc:c7:4b:c9:8d:5d:b3:6a:15:b4:c9:07:
bb:c4:82:9c:eb:72:02:c0:c1:9c:c0:65:87:d2:a6:44:6c:43:
49:ef:e8:30:94:f9:37:6e:d5:eb:3f:db:64:fa:b4:fc:87:dc:
57:ab:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:52:35 2025 by rpki-client