Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/yj2XO7X6nmMUvJxwQor2eoTB-gs.roa
File: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (raw, json)
Hash identifier: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=
Subject key identifier: CA:3D:97:3B:B5:FA:9E:63:14:BC:9C:70:42:8A:F6:7A:84:C1:FA:0B
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 019427481F088A9C8A5F94859DD5D0C4D534
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/yj2XO7X6nmMUvJxwQor2eoTB-gs.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:08:8a:9c:8a:5f:94:85:9d:d5:d0:c4:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3d973bb5fa9e6314bc9c70428af67a84c1fa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:d1:d2:38:5c:91:53:39:59:7c:d9:bc:f5:
63:18:7b:26:7b:04:a3:5f:d3:0e:23:ba:26:4b:5b:
1c:14:34:66:d7:ef:40:33:be:4c:04:0b:13:50:66:
61:29:dc:f5:6a:d8:fe:57:4a:97:81:04:4f:41:f5:
8a:ac:58:f6:c3:60:ff:57:04:fd:43:d6:4f:a7:75:
5f:64:c8:5a:87:39:14:26:81:16:0f:f9:b5:03:de:
24:67:6c:34:1a:5c:70:d9:b6:f1:db:fa:02:09:39:
42:7d:3b:20:6c:25:21:34:10:d9:ad:0c:c1:29:1c:
4c:6c:a2:e2:c1:e0:ad:fd:04:db:9c:1b:3a:f2:9a:
fd:84:2e:bf:8b:b3:12:e0:44:7a:91:70:ad:79:9a:
4a:d4:fc:d2:3b:3f:bd:fc:0c:cd:e5:df:31:e0:31:
8d:2b:27:d8:9c:49:70:fe:12:33:16:b6:87:4b:74:
98:37:73:a3:26:07:86:6d:c7:73:aa:ac:43:ec:d7:
a5:cd:30:75:94:9f:84:43:a4:40:48:1f:56:17:87:
b5:b7:4d:a3:81:ff:b6:67:21:f5:af:87:84:1a:c8:
e3:b1:cb:08:a5:f6:32:fb:84:60:ba:da:1c:f0:49:
76:57:9f:7a:70:b9:c8:ed:ad:8f:39:87:6f:17:7f:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:97:3B:B5:FA:9E:63:14:BC:9C:70:42:8A:F6:7A:84:C1:FA:0B
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/yj2XO7X6nmMUvJxwQor2eoTB-gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:6b:13:c6:9d:1d:b0:ab:a8:ec:a7:b7:84:bb:44:95:dc:33:
18:d5:76:da:02:c8:18:32:93:f4:6a:43:8f:09:f7:79:ab:1c:
b8:67:bf:a8:0f:23:1e:cb:a7:ec:2e:e1:60:56:13:5a:ae:2d:
01:1c:e2:92:77:aa:bc:d3:4e:3c:c7:22:15:71:92:c2:90:19:
de:f8:1b:7e:75:f7:a4:f3:ef:59:ec:a2:c9:47:8a:4e:ab:82:
26:53:48:80:a1:2f:90:77:2c:82:07:59:b5:e6:ad:49:dd:7a:
92:8c:6a:16:5a:83:a7:2e:d8:68:c5:70:32:4b:e0:96:3f:36:
05:1e:7b:7b:b1:f0:48:b9:6f:cb:bd:66:d0:96:95:df:e8:23:
bf:e4:0a:b8:c3:82:5c:86:bd:60:13:49:b4:0e:fe:7e:25:c9:
8c:72:ce:40:0a:16:90:44:b6:20:6a:fb:39:80:76:bc:09:38:
63:52:99:f2:ab:d2:f5:fb:f3:95:5f:b0:7f:e9:6d:91:72:f6:
d5:76:b1:71:1a:d1:51:67:18:5f:82:55:bd:6c:2e:e9:1e:f0:
99:d1:2f:50:9d:70:92:fb:0b:6d:fa:3d:b5:aa:fc:d9:ee:81:
c3:bd:8c:b6:ce:f5:3b:fa:4a:51:f4:86:ea:a0:25:6d:ee:26:
a7:ed:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:22:00 2025 by rpki-client