Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YYYjBm1cHK07qbUZvnPjiWS8SJc.roa
File: YYYjBm1cHK07qbUZvnPjiWS8SJc.roa (raw, json)
Hash identifier: MDsHneIlPDU9EFijEVHpgaP4TeikhndTgWyCvxSYX5M=
Subject key identifier: 61:86:23:06:6D:5C:1C:AD:3B:A9:B5:19:BE:73:E3:89:64:BC:48:97
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 019424B3CCCCC262A41896F11617C68D48C2
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YYYjBm1cHK07qbUZvnPjiWS8SJc.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62095
IP address blocks: 188.132.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cc:cc:c2:62:a4:18:96:f1:16:17:c6:8d:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=618623066d5c1cad3ba9b519be73e38964bc4897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:64:49:42:25:08:f7:f2:01:02:9f:cf:30:
7b:20:d8:34:09:d0:66:33:27:be:68:4c:e7:65:6f:
a3:8c:49:63:38:e6:62:da:93:6f:a2:01:48:a0:bb:
da:9a:f8:21:ef:c5:f6:c0:30:c9:ef:7b:68:6b:82:
12:c6:ea:36:3d:75:85:4c:aa:f3:1c:98:e3:f5:50:
19:01:cb:e9:eb:da:e4:43:f2:70:55:9e:32:c8:8c:
9e:8d:1f:56:86:fa:54:ca:c3:97:5f:e9:85:49:67:
3a:ed:12:77:05:72:a0:1b:f3:4e:7d:06:f0:b3:50:
3c:8c:b2:52:92:42:34:6a:ce:ce:8f:e7:ec:45:a1:
d8:9f:e2:2c:fd:52:9f:cf:4f:ff:db:0b:c0:b3:a2:
47:e5:d0:8e:09:02:5f:4b:68:b8:43:d5:28:b6:0c:
8f:a0:84:6f:d8:74:3e:fa:e9:4f:48:30:51:b2:d3:
98:1d:c9:51:a9:7e:a5:db:60:4a:e1:fb:aa:77:74:
c2:ed:b5:c5:2c:72:99:b7:31:73:41:84:d3:bc:2a:
5a:e0:e2:fe:f2:1d:4a:76:31:c5:f8:35:f0:a1:c6:
c2:b0:8e:ef:9c:f8:35:d6:36:75:91:b5:c5:1d:b5:
09:4f:f8:8f:f5:d3:47:27:d0:28:0b:33:f6:04:d7:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:23:06:6D:5C:1C:AD:3B:A9:B5:19:BE:73:E3:89:64:BC:48:97
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/YYYjBm1cHK07qbUZvnPjiWS8SJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.177.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3a:22:f1:5c:fe:12:20:94:f6:80:19:c4:a8:cb:c8:dd:7b:
04:52:5b:97:7f:90:87:9c:2c:38:04:2b:1a:38:6a:62:57:2e:
9e:c6:68:83:c4:85:2c:93:df:bc:48:f8:75:7e:b7:e7:94:2f:
4a:26:94:b7:95:83:e7:b8:96:d2:c8:47:cc:d6:ec:ea:fc:85:
51:4a:cf:ec:ef:d1:f1:5e:a2:ac:1b:7d:44:1a:7b:9f:f9:c4:
14:e4:27:14:fd:8d:2b:84:3d:0b:6b:8c:8e:da:d3:ef:30:5d:
c3:19:d9:86:cd:d5:64:ed:d6:f4:f8:a3:ac:9a:6f:f2:ee:64:
fc:9b:f0:e9:97:05:ab:7d:ca:ef:b7:05:82:52:28:02:42:57:
e6:b8:55:50:ac:da:9b:b5:fe:5d:09:aa:48:e4:cf:28:db:f7:
cf:1a:c4:c7:97:a2:e2:be:79:29:7e:8f:7a:61:57:59:77:7d:
0e:9a:9b:da:2c:5d:ae:e8:cf:6a:75:1b:ac:50:d3:45:91:cc:
92:59:1d:62:c7:28:c8:9f:ce:f2:64:d7:a3:24:30:57:e5:08:
b4:03:57:8b:74:15:7f:6b:85:91:7e:12:6c:d6:69:67:2b:29:
d3:e7:6a:7f:ce:37:7a:0a:de:39:93:1b:08:9c:43:f2:ac:78:
2f:9f:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:16:20 2025 by rpki-client