Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa
File: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (raw, json)
Hash identifier: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=
Subject key identifier: C9:8D:62:34:55:52:3C:6A:55:04:2B:FA:7B:94:38:54:3D:7D:34:1F
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 0194266C2EF7517E378F5A5145250CA2D028
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43757
IP address blocks: 78.31.24.0/21 maxlen: 21
192.108.126.0/24 maxlen: 24
2001:67c:1578::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2e:f7:51:7e:37:8f:5a:51:45:25:0c:a2:d0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c98d623455523c6a55042bfa7b9438543d7d341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:36:3c:52:97:cf:bb:20:dc:c7:4d:2c:40:
af:b6:12:1c:7a:58:18:e6:d4:84:b1:34:45:fd:92:
56:51:8d:85:01:6a:3f:ab:54:d1:85:90:25:58:40:
7c:c7:02:a6:01:e8:a8:87:74:40:98:65:94:fa:eb:
81:73:58:ea:af:e8:c2:82:b7:c7:18:b4:9d:98:cc:
b0:aa:24:4c:ce:85:f7:e4:a7:b8:00:1c:a9:04:9e:
f0:9a:e4:6f:3b:62:04:53:11:d2:13:db:ce:28:96:
a8:0f:b6:d3:4c:35:60:fe:9e:df:c9:63:ce:9c:79:
f6:58:51:f0:95:cd:b5:77:de:91:b5:f1:2c:7f:0f:
d6:20:9a:c8:5b:57:15:dd:5d:c1:89:b7:34:9d:42:
9c:f2:5d:29:c4:eb:b0:c1:8a:81:dc:ea:00:84:df:
12:33:84:4a:46:66:19:51:4a:97:ed:49:27:95:23:
32:19:3d:cc:dc:55:df:44:13:cc:2b:f7:30:7d:b2:
35:8f:0c:8f:22:e5:04:67:71:df:1b:af:ff:92:ba:
1a:57:e7:54:fe:c4:fd:cc:67:ed:f8:4f:3c:10:03:
68:15:1d:81:d1:c2:a1:43:8a:a6:21:a3:c1:66:70:
20:d6:8b:53:eb:77:75:d1:87:7b:4c:92:85:07:f8:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:62:34:55:52:3C:6A:55:04:2B:FA:7B:94:38:54:3D:7D:34:1F
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.24.0/21
192.108.126.0/24
IPv6:
2001:67c:1578::/48
Signature Algorithm: sha256WithRSAEncryption
99:6d:b6:64:02:2b:2a:fe:86:67:2c:cb:32:a2:22:61:f3:5f:
bc:1f:9e:f7:8b:14:ed:34:65:e7:3b:00:84:82:af:2f:df:0c:
26:d8:53:d7:d0:5d:32:0d:a3:74:63:a3:ce:5a:bc:3d:c0:6a:
6b:ed:7f:c7:0f:bd:be:88:be:8e:fa:e9:dd:72:ba:2c:78:ca:
3f:54:03:d2:79:67:2d:68:f6:2e:0a:8f:5f:d0:28:f3:77:f6:
57:2a:ec:e6:c1:04:e9:21:1f:7a:aa:15:95:cf:a1:81:44:80:
d4:d5:fb:db:6a:b9:16:ad:67:bb:a2:53:98:dd:03:8a:ef:2c:
d9:fe:39:0f:0b:16:0f:e8:c0:c0:b0:5f:a6:54:4b:f1:5c:a1:
58:4f:45:ed:91:4a:93:95:b7:5e:05:da:10:75:24:74:47:b9:
bc:e0:b9:70:8f:2d:73:a7:72:8d:d7:da:1f:ec:41:bb:17:2e:
14:5c:f0:3d:45:c7:8d:3c:c8:1d:dc:46:51:99:53:5a:08:76:
34:c1:cd:41:c8:cd:78:6e:54:3d:93:85:60:8e:37:fa:3d:30:
ab:72:a5:ec:aa:8e:01:2a:91:6f:7a:bf:2b:16:4d:af:e9:56:
ca:61:de:5b:23:35:4a:95:30:a6:93:cc:b1:7a:f6:c0:6a:2e:
2e:5d:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:33 2025 by rpki-client