Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/YHSxqiNEFwuFpuDI4drCA2zup4I.roa
File: YHSxqiNEFwuFpuDI4drCA2zup4I.roa (raw, json)
Hash identifier: yv4ghEr4spN3t8KOmDLuvdlQYs+qOLtn2bpKJylJTxA=
Subject key identifier: 60:74:B1:AA:23:44:17:0B:85:A6:E0:C8:E1:DA:C2:03:6C:EE:A7:82
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827AAF3D14F53A97399B0ABC594D2C0
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/YHSxqiNEFwuFpuDI4drCA2zup4I.roa
Signing time: Thu 02 Jan 2025 17:54:35 +0000
ROA not before: Thu 02 Jan 2025 17:54:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 195.216.182.0/23 maxlen: 32
195.216.182.0/24 maxlen: 32
195.216.183.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:aa:f3:d1:4f:53:a9:73:99:b0:ab:c5:94:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6074b1aa2344170b85a6e0c8e1dac2036ceea782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:5e:3d:fa:41:51:23:41:f0:75:7d:1d:3b:
7a:35:ea:d4:e0:42:6a:fa:20:a3:fa:dc:d1:37:0c:
dd:7d:e3:33:c8:14:17:5a:43:c0:d4:16:41:58:76:
34:ff:10:56:1f:ba:5c:e5:48:ab:59:9d:2f:ab:8d:
75:06:eb:82:31:81:a8:0d:51:fd:2e:f6:35:70:15:
3d:01:8e:c3:42:98:32:c2:27:6a:a3:05:b8:1b:94:
9c:32:8c:a4:82:ba:9b:95:88:b8:33:14:91:c1:b0:
5f:12:45:92:8a:8b:2c:6a:ca:0b:f0:20:ad:1c:9e:
b5:c5:31:68:7b:75:e8:47:5b:cc:72:f1:12:43:83:
ec:1c:3a:32:d7:29:52:1f:e9:00:5d:0d:4b:ff:d5:
3a:5d:bb:56:24:f7:d4:c2:6f:b1:2c:17:60:87:d7:
eb:04:8f:98:96:6a:46:fd:e0:13:b6:04:42:78:9e:
88:91:02:80:76:98:e9:89:20:8c:2a:10:00:a8:86:
5e:36:81:6c:f8:f1:9b:c5:69:d5:b8:ea:c9:39:90:
dc:ad:b8:1b:17:c7:fd:0e:04:48:9a:4d:46:00:10:
6b:3a:96:2d:f5:2b:cf:e9:f0:f1:5a:5b:e3:96:91:
b3:54:e8:62:c3:81:ac:7a:21:94:95:db:eb:cf:76:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:B1:AA:23:44:17:0B:85:A6:E0:C8:E1:DA:C2:03:6C:EE:A7:82
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/YHSxqiNEFwuFpuDI4drCA2zup4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
68:69:00:72:49:bf:96:33:e8:77:bb:1b:e0:d5:84:1f:a4:93:
52:1b:ea:07:55:7b:1d:af:6f:b0:ce:0f:25:bc:56:91:4a:f4:
47:7d:e8:e3:36:51:6a:47:34:bd:52:78:aa:be:14:4f:91:2b:
00:6e:ab:a6:88:b7:79:34:9d:b1:5b:bb:4e:14:49:d8:73:d4:
b3:26:fd:50:1b:e1:5a:4a:20:b3:72:f2:78:b2:1b:e5:63:f9:
75:64:75:87:1e:b7:3c:52:1a:46:cb:54:64:ba:a2:50:7a:b2:
03:e0:7a:aa:a9:39:0b:bf:12:08:13:bc:ad:4e:5e:fa:70:46:
3e:da:ae:38:e1:52:6c:f2:ac:c0:dc:4f:dd:ab:d9:98:6c:d5:
d1:08:82:89:68:a3:ae:f4:f3:83:c3:88:ba:f1:40:72:da:2b:
79:77:f3:3c:9e:df:d1:15:0b:60:46:4f:28:e7:c8:4e:52:66:
6a:38:3a:f9:61:90:31:b6:06:eb:ec:b5:d0:6a:7f:8d:3f:58:
f6:46:69:59:67:13:19:20:09:5b:63:4a:f5:0d:75:30:f5:31:
22:be:5b:e8:8c:89:41:10:3f:e6:1d:66:2f:56:25:4f:e5:e0:
5f:e9:c6:7a:c0:31:23:a2:7c:f4:0f:9f:58:81:fd:22:e8:d6:
ef:c1:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:40 2025 by rpki-client