Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SYHyceqFtkyCyptfpg33iZNyTQg.roa
File: SYHyceqFtkyCyptfpg33iZNyTQg.roa (raw, json)
Hash identifier: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=
Subject key identifier: 49:81:F2:71:EA:85:B6:4C:82:CA:9B:5F:A6:0D:F7:89:93:72:4D:08
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0194228DA9DAFF32249F4B7F89F0A1D838C2
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SYHyceqFtkyCyptfpg33iZNyTQg.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 193.110.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a9:da:ff:32:24:9f:4b:7f:89:f0:a1:d8:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4981f271ea85b64c82ca9b5fa60df78993724d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:f7:df:6a:f9:ed:7c:c7:30:0a:a2:b8:27:
f9:24:44:c5:11:56:6f:f6:c9:60:13:4f:91:15:8c:
f7:bb:11:63:1b:a5:68:fe:a7:dc:e7:61:df:61:00:
ab:7a:9c:79:e5:38:43:6f:03:61:f6:64:8d:ce:a3:
45:ee:25:72:4a:ea:43:0a:a4:ef:1c:68:3b:c6:be:
c1:ba:ab:38:66:fe:6e:60:4d:dc:06:12:0a:c3:63:
ee:2f:2c:e8:ab:d2:2b:d0:de:41:8f:59:68:5e:d5:
4e:b2:2b:86:cf:3c:54:40:a8:78:b6:b1:e5:ed:af:
4c:f7:79:d1:be:84:1e:7b:6e:60:91:bb:b5:16:78:
7d:66:2d:5e:c3:b0:c0:7a:78:fd:11:e2:37:ee:76:
28:a1:76:58:a9:e2:47:2f:0d:45:3b:85:32:5b:32:
3d:60:70:e1:d0:b0:e2:e9:0e:29:17:82:db:cc:3f:
f0:de:0f:96:02:f6:e8:e0:a0:36:49:0d:65:d1:4e:
32:9b:92:7b:25:78:0c:d7:8e:69:70:13:89:96:3a:
9a:cd:eb:08:86:b2:88:fe:20:13:67:fc:92:7a:14:
9e:51:8d:03:4e:9b:7a:69:dc:3a:d2:0d:f5:86:c3:
93:48:c8:94:a6:e1:23:3a:96:f6:e8:eb:63:8d:4b:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:F2:71:EA:85:B6:4C:82:CA:9B:5F:A6:0D:F7:89:93:72:4D:08
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SYHyceqFtkyCyptfpg33iZNyTQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:63:3b:d6:15:2e:3c:1d:12:e4:ac:0e:d7:b7:2c:11:b4:d2:
e1:20:2f:5a:b6:51:95:1b:1b:82:e8:de:99:86:74:75:8e:ac:
ce:1d:b4:97:e3:4c:61:cd:7a:9a:57:2a:06:e2:e3:1d:db:3a:
20:e3:41:2d:c8:a4:e8:ff:55:5b:4f:a5:23:b1:b0:17:b3:e0:
95:f8:5d:65:1e:7a:7e:0f:d6:7a:5f:87:cf:53:de:b5:24:8e:
7a:97:54:8b:88:07:b2:7a:88:05:0b:52:b7:66:53:24:48:a0:
e4:6a:d5:8d:b3:b6:dd:b6:c8:42:30:a9:55:8f:32:e1:8b:56:
67:eb:69:a4:fc:1e:b2:b0:54:bd:85:f5:18:ff:93:f4:f5:8c:
41:93:2d:d4:ae:0a:54:8a:8d:1e:50:59:60:1b:60:a6:84:57:
b1:c6:0e:9d:ea:f3:0c:fc:b7:c2:7d:c0:0e:e6:41:91:b0:9b:
ab:4c:10:cd:e1:d1:ed:54:4f:46:9a:0f:c4:e5:8b:bd:80:b0:
86:5f:f0:71:ad:7f:6d:f9:9c:10:d6:f2:83:01:4f:2d:0b:f4:
6a:56:20:01:ec:4b:16:02:67:68:41:d2:a1:73:a6:6a:37:22:
f2:61:af:cc:76:51:fc:08:ce:7b:f9:f5:75:fe:06:38:7a:88:
14:c7:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:39 2025 by rpki-client