Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/YPpoO-eihLVjR6QWGuwlFSalldc.roa
File: YPpoO-eihLVjR6QWGuwlFSalldc.roa (raw, json)
Hash identifier: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=
Subject key identifier: 60:FA:68:3B:E7:A2:84:B5:63:47:A4:16:1A:EC:25:15:26:A5:95:D7
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 01941FFA2202BA1CE95B2D67A319EF4848DA
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/YPpoO-eihLVjR6QWGuwlFSalldc.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201187
IP address blocks: 185.49.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:22:02:ba:1c:e9:5b:2d:67:a3:19:ef:48:48:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60fa683be7a284b56347a4161aec251526a595d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:39:7d:e6:a2:99:5d:b6:a5:80:7f:28:e4:
15:da:f6:8b:03:69:96:56:f1:21:64:e7:87:e3:63:
c5:25:41:bb:c1:1a:76:78:38:ae:2c:3d:0d:35:16:
b0:d5:8b:d3:9e:c7:40:3c:34:af:57:46:56:62:59:
d8:6a:70:d8:8c:35:0a:34:8e:ea:1c:18:a4:4f:a1:
19:3a:fb:fd:68:3a:3c:92:73:b3:3a:87:d5:74:79:
09:f3:be:81:87:c0:fb:4b:98:bf:ae:a9:b5:76:7f:
2e:fb:09:39:4d:37:6b:6e:d5:2e:cc:f3:47:7e:e6:
ec:60:7c:9b:e3:30:63:c9:ef:01:64:79:16:cd:0a:
30:03:97:c3:16:c7:1a:84:7d:40:b7:3c:6e:ae:8b:
b4:fa:60:fa:97:74:3d:2c:9d:d4:25:3b:f1:90:cd:
4b:f5:e5:dd:07:b2:ad:e5:ed:ab:4d:87:6f:0a:8d:
30:1d:5c:86:b3:84:6e:e4:12:0a:b5:fd:64:f0:19:
3e:c9:b5:23:30:49:86:9b:82:3e:a7:65:72:f5:80:
cf:cf:a1:f5:e6:94:b3:68:21:bc:78:d1:05:d7:be:
f8:72:82:73:6a:8e:e1:1b:bb:7b:f0:1e:6e:94:fb:
a6:b9:8f:17:cb:17:5a:bd:29:ff:aa:40:a1:a0:25:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:68:3B:E7:A2:84:B5:63:47:A4:16:1A:EC:25:15:26:A5:95:D7
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/YPpoO-eihLVjR6QWGuwlFSalldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.244.0/22
Signature Algorithm: sha256WithRSAEncryption
75:6b:19:c8:9f:87:08:fb:fb:c7:17:09:b3:5d:fd:d7:b9:c1:
2c:5f:8f:cc:30:5a:5e:40:59:d1:5e:e5:ab:bb:d2:8b:d7:fe:
d4:bd:2f:6a:cf:10:02:01:75:a3:f1:11:5c:7b:fe:2a:29:c1:
4d:4e:21:ee:25:07:f9:b1:70:cf:69:f9:6a:bb:b7:eb:51:1d:
ab:07:b2:16:e4:77:47:02:9a:06:ce:e6:ce:4d:67:02:a7:bc:
e9:c3:d6:a4:3e:3b:eb:09:bb:48:11:7a:c8:84:06:ab:b2:f5:
a8:07:c0:f1:8b:c8:6b:36:da:8f:a9:06:dc:b8:2f:2b:73:d3:
73:a7:6b:20:71:91:8d:4a:70:09:95:f1:ae:6d:d2:d1:aa:30:
f4:48:e9:03:16:cf:83:52:7e:9d:5a:31:29:e4:a8:f0:64:fa:
81:ba:5a:88:d1:08:e8:b8:f2:a5:e3:41:99:10:83:63:6a:61:
03:43:04:a8:63:77:b1:eb:34:16:c3:fc:ea:29:81:79:1e:94:
82:d8:dd:bb:31:88:95:f3:63:85:70:8b:f4:77:79:ca:d1:e9:
7c:4d:b6:37:24:94:a0:37:90:a9:b1:14:63:99:63:d4:ca:78:
be:fe:e6:ff:d5:b7:c2:b7:80:b1:77:08:96:c6:b6:ee:80:0f:
f2:e9:c4:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+iICuhzpWy1noxnvSEjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw
ZTBmNWYwHhcNMjUwMTAxMDM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGZhNjgzYmU3YTI4NGI1NjM0N2E0MTYxYWVjMjUxNTI2YTU5NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+45feaimV22pYB/KOQV2vaLA2mW
VvEhZOeH42PFJUG7wRp2eDiuLD0NNRaw1YvTnsdAPDSvV0ZWYlnYanDYjDUKNI7q
HBikT6EZOvv9aDo8knOzOofVdHkJ876Bh8D7S5i/rqm1dn8u+wk5TTdrbtUuzPNH
fubsYHyb4zBjye8BZHkWzQowA5fDFscahH1Atzxurou0+mD6l3Q9LJ3UJTvxkM1L
9eXdB7Kt5e2rTYdvCo0wHVyGs4Ru5BIKtf1k8Bk+ybUjMEmGm4I+p2Vy9YDPz6H1
5pSzaCG8eNEF1774coJzao7hG7t78B5ulPumuY8XyxdavSn/qkChoCVclQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGD6aDvnooS1Y0ekFhrsJRUmpZXXMB8GA1UdIwQY
MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt
ODJkOWE5ZWI0MzBjLzEvWVBwb08tZWloTFZqUjZRV0d1d2xGU2FsbGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj
LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTH0MA0G
CSqGSIb3DQEBCwUAA4IBAQB1axnIn4cI+/vHFwmzXf3XucEsX4/MMFpeQFnRXuWr
u9KL1/7UvS9qzxACAXWj8RFce/4qKcFNTiHuJQf5sXDPaflqu7frUR2rB7IW5HdH
ApoGzubOTWcCp7zpw9akPjvrCbtIEXrIhAarsvWoB8Dxi8hrNtqPqQbcuC8rc9Nz
p2sgcZGNSnAJlfGubdLRqjD0SOkDFs+DUn6dWjEp5KjwZPqBulqI0QjouPKl40GZ
EINjamEDQwSoY3ex6zQWw/zqKYF5HpSC2N27MYiV82OFcIv0d3nK0el8TbY3JJSg
N5CpsRRjmWPUyni+/ub/1bfCt4CxdwiWxrbugA/y6cTf
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:53 2025 by rpki-client