Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/YggPTsSNi-M37lrKOeIMBOEQEh0.roa
File: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (raw, json)
Hash identifier: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=
Subject key identifier: 62:08:0F:4E:C4:8D:8B:E3:37:EE:5A:CA:39:E2:0C:04:E1:10:12:1D
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019420D64FCC300D5EE01D1A852DE2691FF2
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/YggPTsSNi-M37lrKOeIMBOEQEh0.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 91.220.231.0/24 maxlen: 24
2a0a:ed80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:cc:30:0d:5e:e0:1d:1a:85:2d:e2:69:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62080f4ec48d8be337ee5aca39e20c04e110121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:55:a4:91:b5:4a:0e:90:77:db:3c:6d:20:
82:c6:f5:7b:99:a4:e7:b4:6d:87:89:f2:fd:e5:b3:
d5:86:58:c7:94:50:24:d1:fd:0f:0c:84:f9:03:d3:
ba:8f:e6:a2:14:ac:da:d8:e2:65:57:97:53:7b:36:
89:01:d6:2c:d0:2b:3f:b1:ee:1b:dc:a6:9b:42:1a:
09:80:a2:fc:21:f7:f3:3c:68:87:cf:20:12:47:9d:
da:40:ec:c6:93:b8:81:c6:43:20:b2:ec:cc:91:74:
c5:98:c2:18:42:c1:70:54:17:89:dc:eb:5a:9f:75:
5d:a2:e6:2b:dd:e5:ea:80:53:38:8f:2b:44:c5:32:
c7:01:70:75:8f:cf:78:e4:cd:6f:29:be:f9:68:50:
8d:9e:d4:d6:e3:b5:57:01:28:88:02:34:b9:22:3e:
d2:cf:90:cc:22:d9:31:85:d3:65:97:07:70:06:f6:
19:56:65:55:b2:3f:84:3d:a0:fa:ca:bd:47:3e:35:
39:19:37:08:ae:8d:ad:8b:36:88:f9:80:ae:ab:4f:
9d:a3:9d:db:a4:45:42:dd:12:bd:79:1a:00:e2:2a:
d9:40:b2:78:df:ce:5d:90:64:cb:8a:54:95:aa:63:
d5:bf:9d:c3:6a:cf:20:ca:32:ea:c4:b3:13:fd:69:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:08:0F:4E:C4:8D:8B:E3:37:EE:5A:CA:39:E2:0C:04:E1:10:12:1D
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/YggPTsSNi-M37lrKOeIMBOEQEh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.231.0/24
IPv6:
2a0a:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
87:3f:cc:fe:99:65:de:16:34:31:ed:aa:ca:b2:0b:b9:dc:c1:
35:c1:09:1e:fb:03:5a:77:2d:0e:89:49:80:3e:ef:44:f0:c7:
2c:61:26:f1:01:65:8d:93:a9:38:4a:9a:36:15:6f:8f:d1:25:
c0:e5:64:35:33:34:ae:0d:9b:ae:7f:bf:77:e0:5f:2a:37:3d:
d2:1f:04:49:9c:90:f4:50:54:ce:9d:9c:6c:a1:23:28:87:96:
b2:1c:b8:2f:60:f0:76:8f:af:3f:e8:85:bc:09:02:22:16:6c:
b8:82:7e:90:73:e9:bd:55:83:fc:6e:bd:47:1e:e6:0c:11:65:
00:c4:cb:ae:6d:ae:fa:a8:e6:67:84:b0:e0:12:c5:6b:01:8b:
18:cd:90:61:19:5e:df:72:f5:d0:4c:1a:8c:eb:3e:81:e6:36:
cb:e7:5e:62:14:20:51:ae:ef:5c:22:06:d7:06:5b:82:8e:9e:
c4:e4:c0:29:3f:85:14:b4:a9:02:1d:e7:62:2c:67:ba:79:3b:
21:1a:ed:8d:ed:bd:b2:13:8b:93:a0:ee:68:8e:74:63:7f:a1:
73:be:5e:c4:2a:b5:ea:d3:72:21:74:72:44:a4:db:14:9d:3b:
7a:37:c5:5e:66:81:94:4a:c0:7c:f7:ec:a5:98:29:b7:89:11:
35:0e:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:51 2025 by rpki-client