Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/y_KZFLyx6LB5ap_GILmPLg-5ycM.roa
File: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (raw, json)
Hash identifier: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=
Subject key identifier: CB:F2:99:14:BC:B1:E8:B0:79:6A:9F:C6:20:B9:8F:2E:0F:B9:C9:C3
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019424B402F1AF45C49283E8D7043F6C1AA4
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/y_KZFLyx6LB5ap_GILmPLg-5ycM.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197112
IP address blocks: 91.219.84.0/24 maxlen: 24
91.219.85.0/24 maxlen: 24
91.219.86.0/24 maxlen: 24
91.219.87.0/24 maxlen: 24
171.25.180.0/24 maxlen: 24
171.25.181.0/24 maxlen: 24
193.16.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:02:f1:af:45:c4:92:83:e8:d7:04:3f:6c:1a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbf29914bcb1e8b0796a9fc620b98f2e0fb9c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:3a:67:dd:83:57:e3:e0:73:72:f3:73:1a:
8c:97:cf:ea:1b:3f:d7:c9:03:52:0d:7f:18:f0:d3:
10:5c:6d:a2:9a:42:b3:81:b9:bd:91:d7:2d:9a:71:
a9:4e:9e:b8:11:97:76:46:12:58:84:70:ab:78:17:
5a:b5:c2:c8:fd:56:56:02:81:76:87:6c:6b:07:fb:
f8:1e:4f:45:34:de:8e:8d:81:01:50:c4:69:f4:e4:
e1:0d:55:b6:3f:45:ac:3c:5f:12:9c:6e:8b:81:5c:
ee:60:cf:9a:30:05:5c:f4:56:05:4c:99:87:f8:da:
51:0c:cb:be:7a:a3:44:1d:c5:0a:97:48:8a:a2:7d:
20:dc:ed:ad:ef:a4:54:fa:6b:be:90:ef:b3:37:7e:
24:34:17:fc:b6:c2:0f:d4:8a:ca:3f:9f:29:48:33:
92:a7:51:87:70:67:57:29:62:08:be:b5:f6:36:f9:
18:a5:3e:06:de:a8:55:f3:81:19:85:a6:c2:bf:f2:
eb:a2:f8:ce:fc:bf:11:1a:7e:83:df:0a:22:69:46:
4e:a5:a9:fc:99:97:35:0b:1a:a3:37:20:89:5f:4e:
29:54:e4:dd:d4:b0:0e:e6:a1:f4:73:87:e5:d5:2a:
22:e4:ae:1c:16:e7:f4:f1:79:31:a7:f0:56:6d:19:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:99:14:BC:B1:E8:B0:79:6A:9F:C6:20:B9:8F:2E:0F:B9:C9:C3
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/y_KZFLyx6LB5ap_GILmPLg-5ycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.84.0/22
171.25.180.0/23
193.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
78:db:a8:0a:5f:aa:11:ee:dc:29:ba:76:9d:6a:46:29:d4:ce:
92:d8:5e:71:0b:f3:29:d8:89:50:b6:e3:95:e0:d6:a9:f2:b5:
af:d0:df:ba:f4:22:d4:6f:e0:1e:69:2e:f3:1c:07:f3:d8:55:
a9:b8:ca:ee:e8:bf:dd:96:7c:d7:63:25:f8:b6:07:ad:cb:fa:
a9:40:61:00:86:5f:ca:f9:a3:ac:9b:b6:0f:4a:b2:a7:cc:a6:
e1:f2:4c:3a:94:6e:43:94:79:96:ba:d8:59:32:0a:71:94:71:
14:75:c3:19:fe:f6:4f:ae:25:ec:e6:4e:99:9f:87:3f:df:0b:
25:c5:49:a2:04:aa:08:48:0d:b4:cd:16:d6:36:5f:d5:6d:78:
18:62:90:84:c9:20:ec:1b:68:c4:86:5b:f9:f2:0e:0b:cc:83:
df:c7:6f:02:f1:3e:48:a1:f3:98:3e:58:4b:0e:c6:2f:1c:9f:
b1:5e:79:b7:bb:fe:9b:a5:a3:67:e0:c1:ac:09:97:c6:e2:97:
2f:d9:f3:ea:0f:6f:85:83:06:57:12:8b:c5:e1:93:23:5a:d3:
27:b7:c7:b4:55:a5:fb:98:f6:1d:1b:4b:26:7b:c9:8b:a3:48:
30:3b:8b:ba:4b:0f:84:3e:4f:31:14:da:7e:72:24:2f:f7:3a:
b8:61:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:20 2025 by rpki-client