Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YmdDnE-Vn1310ZEVyUeueCTQcs4.roa
File: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (raw, json)
Hash identifier: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=
Subject key identifier: 62:67:43:9C:4F:95:9F:5D:F5:D1:91:15:C9:47:AE:78:24:D0:72:CE
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01942747E6871B636C5BD398DB3C692899E9
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YmdDnE-Vn1310ZEVyUeueCTQcs4.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 80.75.218.0/24 maxlen: 24
2a13:7e80::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e6:87:1b:63:6c:5b:d3:98:db:3c:69:28:99:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6267439c4f959f5df5d19115c947ae7824d072ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:d5:03:ea:7e:23:a3:d3:cf:48:4c:fe:c7:
9f:af:3e:e4:08:55:7f:ed:b0:ab:4e:cf:ab:eb:67:
6a:58:11:99:69:a7:d1:6f:22:8d:33:e7:e9:54:df:
60:47:5b:76:39:c4:03:3b:85:cc:27:b5:5c:c6:c1:
38:4b:75:41:ff:68:34:5a:15:18:9c:a0:53:62:26:
3e:fb:a3:29:c0:62:f9:68:5f:79:cf:f9:ae:65:eb:
a1:7f:9d:22:12:a5:03:73:63:47:fd:f0:9f:d2:4b:
fe:35:67:38:ae:34:96:4c:7f:61:e9:b0:94:43:79:
55:28:b5:c7:8f:fb:82:80:8f:1a:03:b5:11:70:ad:
5f:c8:02:d0:82:d1:39:0c:22:61:b9:14:a3:32:d9:
b9:6c:41:46:d5:df:2c:c6:ff:dc:49:56:44:04:b0:
1f:4b:fa:e8:a4:3c:e7:b2:2d:b3:6c:ba:47:d4:84:
2e:4d:ba:0b:6b:8f:12:e1:ea:62:3f:be:49:91:e2:
70:82:f1:fd:90:5b:ee:03:21:af:0f:79:8b:0d:d1:
1f:d2:b2:cf:e2:6f:f8:f6:ed:9e:76:b4:68:af:7a:
27:01:1f:39:27:8b:d6:b6:11:46:b0:34:90:74:45:
ce:48:f2:6d:61:ea:0b:46:8b:fa:e4:da:a9:55:45:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:43:9C:4F:95:9F:5D:F5:D1:91:15:C9:47:AE:78:24:D0:72:CE
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/YmdDnE-Vn1310ZEVyUeueCTQcs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.218.0/24
IPv6:
2a13:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
96:8c:27:c3:f6:48:f5:3c:3c:71:f0:cd:43:7d:75:6e:6f:70:
55:61:ec:0d:83:49:7f:8c:19:b1:4a:d5:dc:c3:ea:10:b1:ec:
f2:51:0a:a1:69:c0:5f:7b:71:31:83:9a:fc:4d:69:10:6c:98:
af:36:6f:45:40:8f:9a:50:1f:63:ee:6c:33:66:15:31:8c:3a:
ce:c8:01:35:9f:59:8f:4f:62:c5:f1:48:bc:bf:e8:32:14:22:
7a:1f:68:4b:2a:57:fc:16:7b:f9:4c:9b:7e:29:f5:d7:59:bf:
2d:54:c4:fe:18:35:1e:19:0d:6d:06:b4:0e:57:ea:06:23:e5:
f8:89:c4:df:bd:19:b8:da:34:fd:d7:8a:a9:05:bc:1f:fb:54:
9e:07:e5:fd:13:e4:92:d2:7f:aa:c8:c1:d6:fa:41:c8:00:e9:
1f:ba:74:21:8a:92:d7:78:a7:25:04:37:04:60:fd:c0:0c:dc:
08:eb:95:8c:9a:ab:44:6e:c0:3a:9f:e8:f0:5b:60:a8:8e:3e:
05:90:a4:b0:76:d7:6b:67:69:89:94:e8:79:03:66:18:63:46:
42:8c:5b:af:84:a2:b4:90:2f:2c:53:e6:18:29:be:30:99:9e:
14:49:d3:23:78:31:43:a0:4b:c4:20:60:82:76:9f:5c:3e:8a:
16:1c:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:05:50 2025 by rpki-client