Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yugfCm59zW-OCysnWXdRGYmiLPI.roa
File: yugfCm59zW-OCysnWXdRGYmiLPI.roa (raw, json)
Hash identifier: dyiopA0j5b5DW/jiTg8DD9JZwVemiDlrthtnV32cs90=
Subject key identifier: CA:E8:1F:0A:6E:7D:CD:6F:8E:0B:2B:27:59:77:51:19:89:A2:2C:F2
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D39D686A22D3C44C619C3E782761
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yugfCm59zW-OCysnWXdRGYmiLPI.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30723
IP address blocks: 194.149.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d3:9d:68:6a:22:d3:c4:4c:61:9c:3e:78:27:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae81f0a6e7dcd6f8e0b2b275977511989a22cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:ec:a3:f7:e5:a7:99:27:ae:bf:77:b4:24:
b8:0a:70:46:81:09:87:f8:6d:10:c3:e0:74:59:92:
e9:59:fc:87:56:2e:5e:34:96:ec:93:1e:99:84:17:
a9:07:20:1c:ea:3b:26:e8:f3:65:b6:24:b7:cf:f0:
b4:26:c4:fe:77:32:6b:ca:38:75:6a:c5:75:87:78:
2e:77:a6:4a:2c:8e:55:76:6d:a2:e5:69:ac:28:a8:
e2:d7:10:ea:41:9c:26:df:ef:4a:01:fb:94:45:73:
4d:56:34:97:81:b2:ac:11:91:34:4c:b1:e6:5b:1f:
24:06:0f:c8:0c:8f:23:08:fe:98:74:6d:e8:18:05:
88:4f:f5:c3:83:8a:7d:50:4b:8a:58:f3:a2:64:80:
34:a0:2a:cd:e9:87:4c:10:cb:13:9b:85:c7:b6:48:
7c:1f:4c:11:31:47:3a:d4:63:c5:5a:a5:cf:96:9a:
a3:92:c8:6d:d9:6b:06:1a:3f:a7:2e:d8:d8:b1:84:
f5:07:61:19:e6:36:36:1a:84:d4:34:9a:3d:ea:b0:
35:c5:c7:6c:f0:8a:32:23:7e:ee:e7:68:20:e0:e1:
e0:54:53:11:81:d9:7f:29:d8:52:a8:20:e1:20:9a:
02:49:e7:49:c8:71:61:a1:bf:2a:21:50:be:78:9a:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:1F:0A:6E:7D:CD:6F:8E:0B:2B:27:59:77:51:19:89:A2:2C:F2
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yugfCm59zW-OCysnWXdRGYmiLPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.38.0/23
Signature Algorithm: sha256WithRSAEncryption
00:de:a5:86:4d:3a:81:47:84:68:aa:6d:66:8f:55:d5:77:65:
35:b2:07:07:e0:ee:98:ce:ae:cd:09:0d:83:1c:aa:1c:cd:fb:
88:cd:5f:99:c7:7c:7a:6a:30:22:19:39:70:1a:37:23:84:b5:
26:c7:e7:67:4d:a4:40:06:b0:81:b4:a9:3b:bf:00:59:f2:c3:
25:2b:cf:58:f6:5b:6f:3e:4a:b3:32:0a:f9:59:79:fd:5c:f6:
28:dc:67:3e:07:0c:9e:7a:3b:ba:f9:af:75:af:4e:72:30:32:
af:66:56:c5:a1:12:06:cb:92:1c:87:0d:3d:1c:c7:44:4a:02:
6b:c5:52:6a:1c:85:75:70:46:11:17:b5:7b:2f:fe:fd:37:a9:
df:53:c2:1d:85:aa:fa:9b:ec:fe:b9:cf:5c:8a:f5:d1:17:d4:
53:42:8f:e0:2c:e9:bc:7f:77:ce:84:58:dc:26:de:0b:42:69:
79:6c:f4:22:73:53:3a:9c:6a:e7:32:f9:24:b7:d1:51:86:67:
9c:b3:9d:d2:72:29:d1:e1:f3:62:8f:0d:3f:92:33:2d:2f:cf:
12:95:c4:7f:b6:8d:2f:83:e3:2b:e0:5e:a5:90:e5:a9:31:86:
0b:d6:f9:aa:4f:ab:d0:bc:48:68:20:92:b5:d2:cc:90:08:e7:
97:5a:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:57 2025 by rpki-client