Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa
File: yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa (raw, json)
Hash identifier: /9zJEvjaN9ESiBxyrI/Lintckz9va2+vfCnzkJq6r6k=
Subject key identifier: C9:7D:C4:17:9C:17:F5:E5:E7:AF:32:0F:F6:BF:C1:73:3E:D6:F4:9C
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 0194274820EFE7EDB1B2D40C3F327DBC75D1
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200154
IP address blocks: 37.32.77.0/24 maxlen: 24
37.32.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:20:ef:e7:ed:b1:b2:d4:0c:3f:32:7d:bc:75:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97dc4179c17f5e5e7af320ff6bfc1733ed6f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:a2:e8:9e:ad:65:d0:5e:3c:ea:bd:5b:31:
50:dd:82:bb:d7:51:77:bf:f3:65:a1:3c:5b:9c:84:
bc:0c:5f:39:6d:37:99:2d:62:a6:db:c1:53:d9:18:
87:f5:bc:01:99:36:68:45:0b:e0:63:bf:90:1f:82:
bb:f1:a1:34:b2:73:bb:1f:95:96:e9:e6:11:55:ae:
e1:55:6b:ad:64:07:53:9d:f5:f5:d1:25:4a:6a:99:
a8:76:be:f0:01:c7:55:f0:c2:48:4a:e1:0d:db:1b:
ed:a9:5c:86:41:bb:a6:5a:af:6e:ba:19:a4:23:07:
be:f8:b4:1c:df:e0:dd:68:16:61:33:30:c0:c9:4f:
0c:6c:7c:68:01:80:dc:c0:39:fe:51:a5:e9:16:3b:
03:ea:64:53:73:a7:a7:99:bb:81:a9:0b:ff:95:61:
39:6e:08:d0:72:6f:49:f8:4d:e7:33:ff:3c:99:1b:
40:35:1c:be:f3:e2:0d:0b:2f:a2:d8:b7:f8:1a:f9:
be:7b:18:ad:81:8b:ab:9d:89:bd:16:a5:87:b6:a9:
5f:22:e1:a9:9e:52:e2:fe:bd:99:66:79:12:52:d7:
5f:af:a3:76:a9:a4:56:db:38:d3:a1:f0:e4:4e:3d:
b3:76:71:0d:bf:79:80:8f:0e:a6:0e:17:55:a1:3f:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:C4:17:9C:17:F5:E5:E7:AF:32:0F:F6:BF:C1:73:3E:D6:F4:9C
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.77.0/24
37.32.79.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1c:3a:a7:cf:9c:9f:72:07:90:c8:93:1e:8f:51:c2:dc:67:
70:d6:24:68:43:8e:00:50:3d:39:62:55:d1:64:23:3a:76:c7:
50:55:4b:2c:57:02:1b:c7:a3:56:76:dd:2e:8f:70:a2:68:8b:
28:2b:05:d0:09:cf:12:b3:95:6d:df:45:f1:63:7b:b1:50:55:
9d:f3:1c:a3:51:77:3b:9f:a5:32:8a:ff:f8:88:a3:44:4c:c5:
ec:86:4d:0a:d5:2d:f1:87:2d:56:6f:2c:5b:0a:b0:12:99:e3:
ca:8c:c6:ec:36:d6:19:e7:a3:9e:5e:8c:cb:4f:44:b5:3c:e1:
19:ef:6f:39:ec:85:ad:93:73:c8:c1:0e:51:1e:c8:9a:43:8c:
f5:ad:1a:b4:5e:83:db:5d:ad:14:04:b7:e8:74:30:18:ec:ef:
28:00:48:84:c6:12:f2:83:99:ea:0c:ed:61:25:c0:d1:26:99:
45:ae:ea:bc:ea:76:c2:ec:1e:be:51:07:94:f8:39:1b:7e:72:
2d:38:99:9e:56:1b:d5:bf:76:1b:11:25:67:f6:c3:73:10:a0:
02:2b:03:bf:c7:21:9a:1e:91:dc:7a:6f:f3:48:05:c8:01:ce:
25:76:c0:e2:42:5c:79:53:d4:86:32:ed:ef:19:93:60:be:ca:
0b:f3:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:14:53 2025 by rpki-client