Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YcR3tFkWMaguUIEHADZ6w3HwI_M.roa
File: YcR3tFkWMaguUIEHADZ6w3HwI_M.roa (raw, json)
Hash identifier: kqrY9vC8fE72sXZvTqalLyqhisNxzy5KOwByyRK5+cU=
Subject key identifier: 61:C4:77:B4:59:16:31:A8:2E:50:81:07:00:36:7A:C3:71:F0:23:F3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F957933560346A70F0149A1C8663
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YcR3tFkWMaguUIEHADZ6w3HwI_M.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199048
IP address blocks: 62.176.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f9:57:93:35:60:34:6a:70:f0:14:9a:1c:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61c477b4591631a82e50810700367ac371f023f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:37:d0:84:af:e5:de:95:14:58:fa:a9:9a:
56:8b:c4:d7:ec:87:a4:e9:c6:74:97:c1:49:59:2a:
28:8a:5a:8c:d2:82:7e:6a:04:5b:c5:84:6c:38:dd:
76:6d:6c:ea:5d:bd:87:60:29:f3:ed:71:86:e7:a0:
da:a4:1f:c8:de:9f:f1:aa:93:4a:a7:14:3f:26:5c:
ff:42:99:f5:f3:a1:88:46:df:b8:2f:da:e5:ee:93:
cb:9e:b2:f1:15:27:0f:b6:eb:b2:5e:8b:68:5d:7f:
73:57:19:c4:c9:1a:0e:35:81:2a:81:ca:7d:ca:3b:
e6:b3:b1:14:b6:19:d1:65:22:3f:47:f3:b2:25:f4:
a6:09:32:b0:a7:5b:fa:00:30:21:ca:a6:c8:bd:82:
b7:37:1f:6e:9c:39:7d:16:41:c6:02:36:4c:83:c0:
1e:27:68:16:55:a6:9b:d5:74:25:cb:36:17:d4:e7:
23:03:89:78:24:11:d1:cb:d8:c9:e9:0b:52:4a:bf:
b7:92:21:8c:51:cf:ee:3c:69:d4:0f:99:4f:dc:18:
eb:55:2f:be:17:2b:8e:09:58:7a:a3:e2:59:a0:33:
5b:d2:ed:bb:02:20:96:49:6c:5d:e0:83:9c:4c:0c:
bf:50:74:4e:d0:33:37:15:66:b0:13:85:43:ca:40:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C4:77:B4:59:16:31:A8:2E:50:81:07:00:36:7A:C3:71:F0:23:F3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YcR3tFkWMaguUIEHADZ6w3HwI_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.98.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:12:56:30:a9:b0:7c:2c:54:a8:a1:ed:3d:ef:eb:b0:09:0e:
7f:ff:58:15:85:58:3e:6e:d9:fe:6c:99:6a:63:21:87:0f:08:
74:1e:13:fe:50:1f:c9:ad:c3:93:d5:9c:26:ca:c9:ea:98:9b:
c3:c0:b5:c3:89:d9:a7:9b:7e:4a:eb:d2:11:2a:0e:cd:51:83:
59:a4:b3:e2:fe:b6:ef:ab:99:5d:47:1e:78:8b:30:d0:0c:d4:
14:22:fa:48:b9:94:f4:34:6b:2d:d3:f1:b4:a9:02:b1:12:d9:
08:5e:e2:21:77:06:56:f5:db:12:0e:f5:d2:e6:b3:3b:9d:e5:
5a:a2:9d:d7:ae:b6:0b:a4:fd:43:d7:fb:eb:35:59:b7:dd:82:
98:f3:50:4b:45:a4:2e:fc:c2:a7:60:57:67:9f:49:59:ff:d0:
9a:dc:7f:cb:0e:31:6f:82:9c:7f:d5:78:b2:f2:d1:53:70:04:
70:0d:f1:42:71:3b:06:4e:db:2a:f1:d1:d5:46:22:56:e0:78:
14:37:84:b5:9e:e1:e4:29:a7:07:53:ca:b3:d8:ec:59:4f:6a:
6d:aa:69:14:d8:bc:38:5f:d6:28:36:52:22:7c:1e:93:69:4d:
45:88:d2:03:49:2b:5f:30:ae:a8:0c:e6:63:86:6f:f3:ff:e4:
07:98:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:43 2025 by rpki-client