Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa
File: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (raw, json)
Hash identifier: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=
Subject key identifier: 63:42:87:F6:35:2D:39:D4:DD:57:3C:D5:C2:F7:C6:B4:38:D9:C4:85
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01941FFA2CF2527F308B377D03D74934E713
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:f2:52:7f:30:8b:37:7d:03:d7:49:34:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=634287f6352d39d4dd573cd5c2f7c6b438d9c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:6c:aa:70:4b:62:02:60:bc:19:66:75:93:
80:1d:4d:39:73:29:dc:1b:c5:32:82:61:84:83:0d:
8b:50:d9:a3:2b:a5:f0:7a:a8:21:fc:de:fc:5b:99:
d1:a9:ae:da:63:29:82:f4:be:1d:48:18:46:2b:c1:
be:38:75:61:88:d7:0c:df:76:23:64:b7:c5:4e:da:
cc:7e:80:21:41:1b:65:b4:08:c1:ed:f3:79:82:a2:
0d:5f:e0:ec:75:40:15:d8:17:fd:49:4d:df:60:80:
82:6f:69:a9:75:ce:96:72:08:a0:f8:3a:18:da:15:
72:d2:98:8b:b6:69:d4:6f:f3:37:c7:88:d1:09:cd:
f8:a0:bd:9b:19:35:3b:ef:af:b1:47:9b:95:32:f3:
c0:85:c4:32:e9:05:bb:02:50:ab:68:90:f4:7e:0c:
56:8e:42:24:54:44:5f:57:3d:04:a0:b5:e9:6d:22:
f4:9b:f3:51:b6:03:3e:75:91:96:56:5f:27:95:f2:
9e:79:7b:5e:b2:d6:b5:0f:b4:41:c3:b2:6d:02:5e:
ab:32:ba:6f:df:94:21:69:d1:96:1e:10:a4:1a:04:
46:55:a4:c7:3b:51:09:70:92:ac:f4:ca:ff:e8:ab:
92:92:bb:d9:f4:a6:a1:b0:db:ef:3c:a8:1a:7d:ce:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:87:F6:35:2D:39:D4:DD:57:3C:D5:C2:F7:C6:B4:38:D9:C4:85
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:74:80:c1:c7:81:2a:b6:6a:9f:d0:82:50:d9:5c:a7:1f:9d:
ad:75:20:c7:d2:ea:9b:14:f7:4a:7e:6a:98:53:d0:2e:cd:91:
af:da:55:1f:ca:6a:b9:24:6c:e8:46:5c:d8:c6:89:d0:85:11:
40:85:0a:d1:cb:18:9d:67:03:fd:f2:fc:bc:07:fc:eb:33:39:
2a:8d:b8:3c:4c:d5:a3:d4:29:69:82:3c:66:b9:e2:6b:f8:73:
72:89:37:89:83:8c:48:4a:50:e5:61:a2:5e:5d:4f:a2:98:8f:
25:cf:2d:a0:24:69:25:de:d6:b5:c2:39:7a:2d:94:ee:47:1d:
2a:96:dc:9a:1e:e3:45:ab:45:09:28:82:70:93:46:69:d3:ba:
b3:5d:c8:f9:4d:e5:c6:b4:57:92:a2:e4:c3:1d:c8:aa:4d:8e:
98:56:51:28:ce:25:35:22:3d:b7:1a:b2:75:04:0c:23:51:ff:
eb:15:ed:03:15:4a:e2:b7:6a:59:05:12:8a:d0:cb:d9:7d:9f:
06:60:a6:2b:5e:14:57:7e:bd:27:79:40:e5:a6:d9:62:e4:a8:
97:2e:fe:ae:c6:c6:41:59:45:2e:8c:de:92:cc:fe:4b:1c:d5:
07:bc:f0:ee:29:c6:a6:ff:83:71:1f:df:95:99:c3:53:08:51:
24:f8:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:49 2025 by rpki-client