Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/YSlfWP3DY80Smx0TIqkuPzTOoec.roa
File: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (raw, json)
Hash identifier: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=
Subject key identifier: 61:29:5F:58:FD:C3:63:CD:12:9B:1D:13:22:A9:2E:3F:34:CE:A1:E7
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019425FC4BB173BE8D3D8F8423999A97A302
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/YSlfWP3DY80Smx0TIqkuPzTOoec.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 185.171.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4b:b1:73:be:8d:3d:8f:84:23:99:9a:97:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61295f58fdc363cd129b1d1322a92e3f34cea1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:09:bd:ed:5f:8e:76:56:04:59:25:a3:f1:
b1:a7:0b:e5:03:47:bd:ed:92:f7:4b:8b:c4:fd:ac:
53:c1:ca:8e:d3:f9:19:e1:53:11:75:b3:6b:b6:87:
d6:6e:47:06:eb:95:70:3d:6c:7e:ee:55:29:69:b5:
d5:75:86:fd:f9:c6:8f:88:b0:51:15:58:cd:0b:4a:
79:2f:5c:0c:6d:08:fc:af:03:ee:0f:ac:60:c4:ef:
5f:a1:f8:bb:1c:a4:fa:62:f4:5d:6b:85:28:ec:9e:
f1:fd:d5:8e:0b:81:4b:77:a3:70:16:5a:22:72:43:
6d:71:94:4d:ca:3f:d5:03:df:a0:8c:4d:24:6b:c1:
65:fd:1a:60:53:bd:5e:a6:54:be:f4:0b:dd:8b:31:
cd:89:68:57:ca:d8:8a:19:12:ee:69:d5:46:d4:11:
39:13:fd:71:6f:33:0f:9b:45:0f:2e:4c:22:9d:c3:
4b:8c:f7:9b:4d:b3:31:40:ef:89:13:0c:c1:61:bd:
e5:8e:69:3a:a1:00:c8:37:78:82:a0:21:13:f7:30:
06:3f:bb:df:59:93:26:48:50:6a:3a:6c:d9:f4:2e:
8c:3d:2f:37:30:bf:74:29:cd:af:16:d8:d0:27:d7:
df:e6:aa:f5:ab:1e:74:22:48:a5:04:72:40:f4:50:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:5F:58:FD:C3:63:CD:12:9B:1D:13:22:A9:2E:3F:34:CE:A1:E7
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/YSlfWP3DY80Smx0TIqkuPzTOoec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:37:03:64:f9:55:10:83:4a:9b:1b:26:1a:69:51:34:79:fa:
af:5a:25:55:63:aa:e3:18:6a:06:15:11:f7:9e:6e:16:51:d0:
d6:00:98:25:7d:bd:11:ac:1e:ba:e4:6d:d1:47:7d:a5:5a:da:
a1:cf:e1:a4:db:65:0c:8a:d5:46:ec:65:62:70:3b:b6:7d:12:
05:a8:d3:37:48:51:1b:94:d9:98:70:dd:63:c0:d5:a7:cb:e7:
c5:43:b5:0e:95:84:15:cf:bc:40:20:0b:19:2d:1c:fe:fa:e9:
dd:08:93:34:30:59:fd:66:fc:9c:ec:73:96:1f:4d:c0:87:eb:
e7:d4:3b:1f:99:eb:62:5a:04:df:82:d5:e8:00:24:c7:c9:f4:
11:c9:d2:2e:f2:f9:2e:c5:6c:59:b7:8b:9e:74:30:17:01:7a:
31:f3:16:96:34:18:51:c2:fd:dc:fb:b9:a8:6b:c0:7e:73:9a:
16:79:9e:3e:56:b3:be:19:85:8a:79:19:cc:18:99:c0:f0:2b:
4d:c9:2c:5f:f4:36:88:54:ce:6b:68:46:54:4a:49:8f:39:d4:
3d:7b:ca:5f:e0:23:b9:d8:1e:b6:85:c7:04:3c:08:a7:7d:9f:
9a:3f:45:f2:cc:47:2b:6a:53:d8:a2:ef:00:9d:bc:2e:e7:12:
62:14:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:32 2025 by rpki-client