Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yoVmOU2bA21pS3iddhRZMhuldKY.roa
File: yoVmOU2bA21pS3iddhRZMhuldKY.roa (raw, json)
Hash identifier: 2qAYjh4Ehjw44N1h8EiRaCR5fesEhLKzm3N7GtPKXvU=
Subject key identifier: CA:85:66:39:4D:9B:03:6D:69:4B:78:9D:76:14:59:32:1B:A5:74:A6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194265F7B82082666DC70E6EC3DAEF8CC90
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yoVmOU2bA21pS3iddhRZMhuldKY.roa
Signing time: Thu 02 Jan 2025 09:36:19 +0000
ROA not before: Thu 02 Jan 2025 09:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 79.99.76.0/24 maxlen: 24
82.152.110.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
109.176.165.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:5f:7b:82:08:26:66:dc:70:e6:ec:3d:ae:f8:cc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 09:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8566394d9b036d694b789d761459321ba574a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:60:41:57:13:ad:11:cd:90:f3:7c:e9:8a:
6a:b2:67:8f:02:0d:7c:3c:97:c3:8b:45:48:b9:6d:
af:77:a0:cf:bc:d3:86:80:96:f8:bb:69:ed:32:9f:
58:fa:e0:45:50:fd:db:f4:29:3d:f9:70:de:d3:d2:
ac:cd:68:cd:16:9b:0e:3d:2c:06:ad:8b:5c:ad:c3:
63:79:c4:03:47:1a:b8:0c:f3:d0:6d:58:2d:3e:d5:
d3:56:13:b4:7e:b9:05:a9:b4:05:c4:0d:23:4e:8d:
02:ce:62:52:fa:ba:1e:a8:03:39:d6:1c:1e:7d:89:
92:0c:23:cd:20:49:4c:63:c5:5f:9d:8e:cb:31:f3:
ae:25:6b:c2:10:f6:93:d4:72:4f:43:b0:40:d8:f1:
19:c8:ac:da:90:79:5d:0d:24:3c:0c:60:a5:75:7c:
7d:b5:e0:ee:98:fd:d6:65:18:70:91:5c:e1:b0:7c:
a7:c6:cb:31:f7:62:79:74:cc:5d:a3:db:24:64:12:
7d:27:2e:b1:52:18:07:8d:35:86:c8:ee:bf:22:96:
e3:16:f1:db:ab:61:d0:c9:36:43:4d:de:95:f9:cb:
ba:df:1b:2a:fb:ee:7f:f1:82:93:f6:0b:bd:70:30:
e3:18:09:78:73:80:9f:d9:25:4d:41:bf:15:96:17:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:66:39:4D:9B:03:6D:69:4B:78:9D:76:14:59:32:1B:A5:74:A6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yoVmOU2bA21pS3iddhRZMhuldKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.76.0/24
82.152.110.0/24
82.153.66.0/24
109.176.165.0/24
213.218.213.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ce:ab:ca:38:38:6e:5c:d5:65:05:62:f7:d5:08:85:d0:3d:
66:a1:4f:c0:9e:ed:a8:0d:19:3a:45:2d:03:db:08:3f:42:3f:
24:a4:56:13:9a:c2:9f:1d:a6:eb:ca:35:fc:37:48:3f:8e:4f:
a9:95:4e:48:4e:65:00:f3:c8:fa:42:93:e0:2f:c8:cc:6d:de:
4e:2a:6a:36:9c:f9:8a:0b:b1:50:47:31:ce:c4:20:81:14:a5:
a8:31:c9:19:14:41:6f:d8:e5:aa:f6:b8:ec:19:21:77:ca:61:
a4:42:6e:88:5b:c3:0b:c7:9d:87:21:56:e7:16:13:84:3c:57:
f9:79:c3:18:d1:b5:e7:19:4a:a9:4f:fc:86:f9:0c:54:bc:96:
3e:37:d6:9f:23:d6:a3:e3:fa:cd:84:03:c2:fd:a1:27:e4:68:
9d:55:0c:96:75:a6:d6:eb:94:83:f1:b8:29:4d:1a:45:68:b5:
a9:94:05:b9:6c:65:a4:ce:24:d7:1e:83:20:de:65:75:1d:90:
63:0e:f8:a7:dc:35:12:a5:bf:cc:7f:aa:19:58:4d:b8:8d:61:
f2:a6:49:4f:56:7c:94:93:d0:7c:20:6e:b1:e9:da:26:5e:fe:
53:72:39:48:93:42:5f:28:f1:cf:70:2e:63:bf:d5:49:75:08:
f3:ba:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:45:55 2025 by rpki-client