Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa
File: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (raw, json)
Hash identifier: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=
Subject key identifier: 61:46:09:58:03:E5:0C:0A:98:AF:CF:83:E1:57:CD:F0:B4:0B:78:C0
Certificate issuer: /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial: 01941F8C1240CF9D7B50C61282ACB6138E02
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208839
IP address blocks: 45.13.140.0/22 maxlen: 22
2a0e:ed00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:12:40:cf:9d:7b:50:c6:12:82:ac:b6:13:8e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6146095803e50c0a98afcf83e157cdf0b40b78c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:98:b5:99:3b:65:fd:28:be:d3:46:2e:c7:
e5:9e:db:b6:78:d1:46:37:76:d7:41:09:5e:a6:0f:
97:de:4a:8a:be:84:16:73:82:f2:5c:2f:f3:67:d5:
7f:49:82:3b:a4:dc:53:53:c0:91:6f:57:3c:d4:05:
49:1c:43:b8:05:2e:fd:af:d1:27:e7:74:79:cf:e3:
e0:d3:fb:78:c8:93:e9:26:82:c9:bf:2a:62:38:4b:
28:e7:25:9b:6e:a0:da:59:a8:1b:c2:37:e1:15:fe:
71:e9:2a:0e:21:4c:e7:7a:36:31:e3:a0:f2:a5:8a:
61:d7:7c:c1:f7:f2:59:6d:db:97:d7:86:4c:e3:a2:
62:58:e0:fa:56:a4:68:8b:2a:ff:4e:71:ac:aa:65:
0d:0b:84:47:f2:13:54:de:99:8c:c3:17:ce:23:78:
82:90:9e:1d:e4:f0:28:18:68:bd:95:5a:c0:84:6b:
50:3d:cd:fe:a1:ae:22:49:cf:f5:94:e8:3c:f3:05:
0a:b0:6e:ed:83:37:5b:1e:69:36:c5:c0:1e:65:ef:
19:3b:71:08:6b:44:37:45:07:29:59:fd:bd:af:f6:
97:fd:09:ce:8c:f4:50:ab:8d:08:2f:6a:83:b9:bb:
4d:17:4e:b0:4e:5c:82:c3:f1:31:af:e6:2f:b1:41:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:09:58:03:E5:0C:0A:98:AF:CF:83:E1:57:CD:F0:B4:0B:78:C0
X509v3 Authority Key Identifier:
keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.140.0/22
IPv6:
2a0e:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
89:9a:bd:5b:5f:2b:d1:7c:c7:b6:dc:b3:5a:7c:8a:78:18:ad:
49:d2:6d:03:cd:47:9f:15:78:11:a0:5c:85:d8:d9:4f:42:ca:
84:c0:6c:dd:10:74:f0:5e:d0:8e:50:ff:39:47:9f:4c:ea:af:
a4:ed:60:2a:c0:1b:92:21:3b:61:da:de:fc:60:15:ea:b8:84:
51:66:2f:10:4e:6d:99:87:24:c5:71:2f:41:a4:e3:e5:f2:87:
d2:8f:61:de:83:f6:21:76:05:c6:7d:a2:62:b6:fe:c4:16:d1:
89:53:27:ea:3c:81:64:af:ae:ef:4f:62:38:a1:53:b0:f7:00:
49:b1:20:ec:3a:a3:e1:4c:96:53:ec:d8:ab:06:82:11:f8:bd:
61:1f:c9:79:b5:cd:bb:61:bb:e7:f4:9e:60:43:0b:76:a5:33:
3a:05:ca:6c:1a:a5:7a:42:21:6e:b9:3e:9a:14:e4:3d:17:61:
c6:39:f1:ab:c3:51:ab:09:68:a9:4a:7f:46:63:fa:e9:85:cf:
0a:8a:48:f1:34:01:4d:35:e6:15:b5:45:b8:65:30:64:1c:48:
2d:99:cf:bb:b6:85:a8:ce:a7:00:51:36:b3:05:43:84:01:70:
55:37:1e:e3:63:04:72:fe:4a:7a:27:57:d8:19:0a:ac:98:d7:
e1:50:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:31 2025 by rpki-client