Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa
File: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (raw, json)
Hash identifier: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=
Subject key identifier: 8F:2B:87:A0:8A:6F:1A:2B:DB:CF:99:B3:6C:9A:77:A3:E1:66:E1:71
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 019428238FAE79CDFA425225E9482158B425
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa
Signing time: Thu 02 Jan 2025 17:50:06 +0000
ROA not before: Thu 02 Jan 2025 17:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 62.132.26.0/23 maxlen: 23
194.45.24.0/23 maxlen: 23
2001:698::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8f:ae:79:cd:fa:42:52:25:e9:48:21:58:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2b87a08a6f1a2bdbcf99b36c9a77a3e166e171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:bf:11:bb:4f:a1:89:ad:96:7d:5b:58:24:
bf:51:65:a1:4a:60:bd:1f:09:ae:15:9a:8f:12:3b:
99:b3:c8:e4:3a:0c:82:bc:2c:65:08:eb:c6:be:e6:
15:1a:96:35:84:9c:4a:f2:d2:0f:a6:fa:0d:2c:d3:
c6:8b:20:6f:02:71:92:43:62:40:2a:bc:18:88:35:
da:f7:41:f2:3b:ee:df:ef:38:49:8d:98:fd:0e:f8:
d8:95:b1:f8:aa:2e:2f:8d:36:38:e3:54:a2:29:5c:
0c:f3:1f:fa:69:d4:31:dd:8f:95:c2:a8:59:22:54:
51:e7:8f:f8:6e:d5:f2:00:d9:ed:ab:c4:b2:a8:69:
59:d2:dc:94:7a:e4:e6:ec:c1:10:26:01:fc:bb:95:
b8:a3:a4:92:7d:da:52:e8:31:b5:d4:6f:0a:fd:f9:
96:10:d3:90:47:ef:08:04:16:ae:74:d2:44:d0:75:
bf:db:64:b6:6b:a5:1a:de:02:07:37:2f:7e:aa:5f:
88:af:6c:66:97:08:6b:6c:25:c6:a8:c0:d5:60:ba:
06:7c:22:eb:f8:74:fa:f6:51:0e:92:c9:68:e4:55:
87:74:83:fe:6d:b3:cb:b5:20:af:e4:e5:31:aa:bc:
16:f0:7d:a9:50:af:93:db:5c:2b:8d:b2:59:98:e6:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:87:A0:8A:6F:1A:2B:DB:CF:99:B3:6C:9A:77:A3:E1:66:E1:71
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.26.0/23
194.45.24.0/23
IPv6:
2001:698::/47
Signature Algorithm: sha256WithRSAEncryption
54:59:28:64:b0:f5:85:ed:b9:11:6f:e5:63:18:24:0d:0c:a0:
0f:88:43:49:0d:83:3d:f6:65:57:14:30:3e:f8:0f:84:05:e5:
af:d3:95:36:55:e0:19:e7:95:55:0d:f9:38:b0:df:19:1b:72:
b8:c1:d0:50:cc:41:65:19:0d:b7:f1:76:67:e0:52:3a:7e:44:
e1:7e:89:0b:c4:49:31:08:34:74:f5:0a:b4:93:56:87:5c:4f:
c7:be:e2:91:3a:a2:24:cd:d8:1b:80:18:d6:ce:0e:c4:de:ca:
91:49:b6:7e:71:ad:59:a6:e4:48:e6:6b:a6:47:2a:e7:d2:9b:
02:eb:f4:22:92:f5:c8:a5:59:95:09:a0:c2:0f:bd:3e:dd:7e:
03:d4:68:3c:2e:10:c8:23:be:9e:65:1f:8d:4e:cf:a2:70:4a:
86:05:cd:b4:de:bc:a8:98:4b:86:8b:ca:d5:3d:2e:d8:8a:78:
f2:56:c4:80:35:49:d4:21:39:e9:dd:ed:c2:62:58:65:7b:60:
a2:d5:b3:08:6c:f3:e1:3f:b9:d7:d4:c3:7d:89:b3:35:79:43:
ac:b3:15:40:cb:2c:64:91:a4:27:92:2b:d6:c3:1a:f1:0a:33:
f2:d3:05:60:8d:52:87:f3:b5:dc:ee:49:3d:74:96:05:70:43:
01:0b:94:eb
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQoI4+uec36QlIl6UghWLQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjUwMTAyMTc1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjJiODdhMDhhNmYxYTJiZGJjZjk5YjM2YzlhNzdhM2UxNjZlMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE6/EbtPoYmtln1bWCS/UWWhSmC9
HwmuFZqPEjuZs8jkOgyCvCxlCOvGvuYVGpY1hJxK8tIPpvoNLNPGiyBvAnGSQ2JA
KrwYiDXa90HyO+7f7zhJjZj9DvjYlbH4qi4vjTY441SiKVwM8x/6adQx3Y+VwqhZ
IlRR54/4btXyANntq8SyqGlZ0tyUeuTm7MEQJgH8u5W4o6SSfdpS6DG11G8K/fmW
ENOQR+8IBBaudNJE0HW/22S2a6Ua3gIHNy9+ql+Ir2xmlwhrbCXGqMDVYLoGfCLr
+HT69lEOkslo5FWHdIP+bbPLtSCv5OUxqrwW8H2pUK+T21wrjbJZmOYQrwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFI8rh6CKbxor28+Zs2yad6PhZuFxMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvanl1SG9JcHZHaXZiejVtemJKcDNvLUZtNFhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBPoQaAwQB
wi0YMA8EAgACMAkDBwEgAQaYAAAwDQYJKoZIhvcNAQELBQADggEBAFRZKGSw9YXt
uRFv5WMYJA0MoA+IQ0kNgz32ZVcUMD74D4QF5a/TlTZV4BnnlVUN+Tiw3xkbcrjB
0FDMQWUZDbfxdmfgUjp+ROF+iQvESTEINHT1CrSTVodcT8e+4pE6oiTN2BuAGNbO
DsTeypFJtn5xrVmm5Ejma6ZHKufSmwLr9CKS9cilWZUJoMIPvT7dfgPUaDwuEMgj
vp5lH41Oz6JwSoYFzbTevKiYS4aLytU9LtiKePJWxIA1SdQhOend7cJiWGV7YKLV
swhs8+E/udfUw32JszV5Q6yzFUDLLGSRpCeSK9bDGvEKM/LTBWCNUofztdzuST10
lgVwQwELlOs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:24:47 2025 by rpki-client