Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa
File: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (raw, json)
Hash identifier: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=
Subject key identifier: C9:19:AC:8E:EA:BF:17:A0:C3:E9:7F:40:AE:20:13:7C:59:D7:43:96
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0194236A159F792FA2E74EF51CC7A48DE81A
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.223.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:15:9f:79:2f:a2:e7:4e:f5:1c:c7:a4:8d:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c919ac8eeabf17a0c3e97f40ae20137c59d74396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:a3:a6:ba:11:95:23:c7:16:b6:f0:fb:9c:
9b:7e:82:e0:c7:99:d2:99:a6:86:0d:42:01:3b:cb:
44:6c:10:f0:c4:e5:68:34:69:72:82:ca:d6:ce:07:
b5:bd:ab:09:2e:c6:35:02:a4:c4:25:60:6d:6c:7b:
fd:fb:5f:e5:bd:5e:22:9a:a6:aa:64:01:18:e7:fc:
00:e9:8b:bd:e9:cf:e5:7a:db:20:9e:15:f6:29:35:
85:f3:0e:09:9c:9d:b6:4d:43:92:f6:5c:99:38:89:
7a:b0:10:a2:ff:57:df:fc:8c:22:43:6f:c8:24:ef:
b3:5b:d5:a4:e4:0a:c3:f8:fa:e1:2a:ee:8f:e2:72:
05:51:06:47:1b:63:cb:cc:b2:f1:27:e6:e6:fa:67:
0b:a2:eb:f8:3b:f6:cf:61:d9:da:e1:9c:3c:56:21:
ae:1c:8b:86:d2:b8:f2:3c:51:5a:23:c3:51:39:27:
a0:5e:7a:27:e3:7e:1e:2c:44:90:5c:7b:2d:e5:be:
12:96:3c:70:7b:3c:1f:50:55:58:e3:21:45:42:53:
eb:43:ae:fe:57:18:2d:13:ce:86:df:44:5f:21:8a:
33:5d:f0:cf:5b:07:68:b3:66:21:4e:16:f4:cb:03:
50:5f:61:e8:5b:9c:19:d3:c6:bb:4b:23:07:39:c1:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:AC:8E:EA:BF:17:A0:C3:E9:7F:40:AE:20:13:7C:59:D7:43:96
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d7:a0:f6:89:d6:ef:af:1a:0a:37:db:d2:16:90:c3:ba:71:
0c:53:71:7d:fc:74:db:64:23:39:09:98:f0:40:14:1a:dd:b0:
bc:91:b8:2f:3e:5e:fd:c5:0a:2d:c6:b5:88:58:c2:97:6c:46:
b7:a2:69:71:76:0a:04:5c:29:ed:23:3f:fd:1c:98:df:13:25:
30:15:fe:9c:2b:36:9c:49:59:7e:46:ce:8d:fc:d6:63:56:70:
58:e7:af:1a:b0:10:26:d6:0c:2c:e8:cd:f0:1b:0a:86:63:90:
1b:3b:42:4c:6b:db:d7:d1:44:8c:25:c5:68:c8:0a:21:14:cd:
3d:cd:49:ba:97:14:6b:06:de:0a:3c:2c:46:a6:f8:d1:23:78:
8e:5b:d1:10:d2:fb:f8:eb:a7:d0:e0:1b:25:d1:66:d9:71:0b:
90:9a:b8:8c:ec:15:02:1f:79:bb:4b:8c:06:e1:b4:c9:ed:89:
d3:0f:e6:30:fc:77:5d:4b:26:f9:48:9f:ee:43:44:32:a7:79:
2e:d0:42:3d:8c:b5:20:6e:c0:7b:dd:cd:4f:f8:73:cd:35:dd:
91:91:a0:f4:b2:6f:5e:b2:48:7a:f4:93:73:e5:db:03:ac:23:
1a:bc:5a:63:0e:f9:22:d3:05:3f:e5:54:9b:c3:9f:15:61:80:
26:48:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:50 2025 by rpki-client