Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa
File: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (raw, json)
Hash identifier: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=
Subject key identifier: 61:67:C1:07:50:3A:02:CC:A8:54:75:8F:62:1F:CF:1B:C3:AA:73:B6
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 019426D9D7C8698FE919ED5BE849333AD6E5
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 143.225.0.0/16 maxlen: 16
192.55.101.0/24 maxlen: 24
192.132.34.0/24 maxlen: 24
192.133.28.0/24 maxlen: 24
192.135.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:c8:69:8f:e9:19:ed:5b:e8:49:33:3a:d6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6167c107503a02cca854758f621fcf1bc3aa73b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:d4:ba:ca:1a:45:92:a8:03:ea:ae:6f:4d:
4e:7d:ee:34:83:1f:0b:b7:ef:68:7b:fa:b2:57:21:
ac:31:0a:ff:e7:2d:b9:49:07:53:b6:bc:ae:ce:2c:
7c:0b:3f:5c:4a:97:37:3e:75:0c:e4:61:7c:8e:ad:
fb:20:4d:c3:8e:5a:73:cd:9e:a3:dc:f2:99:ca:32:
f0:8f:2a:74:59:a3:2b:e2:ef:ae:11:25:d3:44:6b:
3a:63:6c:e5:9d:e7:91:c3:70:eb:31:2c:86:89:eb:
93:9d:18:5f:c5:e2:d2:a3:51:f6:f0:c6:29:42:a1:
21:22:5b:db:64:e2:92:e1:6f:83:9d:2b:91:19:83:
01:84:6b:0d:8d:37:11:11:9d:ff:e7:2d:fc:6b:2f:
d8:ca:8d:02:f2:23:74:9f:de:85:7a:fb:49:b4:ea:
8d:61:cc:c1:93:f8:c1:4f:20:1b:bb:74:f9:1c:7d:
d5:fb:26:46:4d:78:38:be:13:2f:0b:08:74:9c:41:
64:ac:3a:b1:0c:09:03:2a:11:10:7b:fd:e7:d5:94:
74:b1:57:03:45:f8:37:ca:63:27:84:99:1c:64:8e:
6a:99:ba:c4:c6:6b:cc:61:03:0e:e1:78:77:f6:f0:
b3:f6:de:2c:4c:4a:c3:ee:d7:00:48:e9:79:7d:d9:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:C1:07:50:3A:02:CC:A8:54:75:8F:62:1F:CF:1B:C3:AA:73:B6
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.225.0.0/16
192.55.101.0/24
192.132.34.0/24
192.133.28.0/24
192.135.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9e:d7:1d:de:72:fc:d0:58:01:ad:06:1c:3b:b7:1e:65:d5:
51:0a:53:99:d4:dc:ce:07:ce:e6:7e:c8:ab:b8:33:48:74:a4:
3b:f1:6b:49:b8:ea:d3:ac:37:70:b7:86:5b:ff:7b:a8:c9:a3:
af:d3:2e:e5:40:09:b8:dd:46:1f:37:db:d3:67:e3:48:30:4a:
df:49:cf:a1:f7:bf:66:f5:aa:c6:35:b1:c1:67:21:1b:98:25:
10:3f:0d:1e:e8:23:26:fc:da:34:38:dd:f5:0d:aa:79:6e:0a:
de:f9:06:ab:d2:da:51:ed:68:2f:bd:10:7c:a2:45:c3:65:7c:
89:1e:69:7f:d6:1a:ac:85:3f:da:85:51:2a:75:13:6c:0f:00:
45:8b:9c:f5:f7:42:38:12:d0:47:bf:17:4f:45:79:f5:d2:e2:
db:c4:ae:ad:26:ec:4c:d3:1d:8c:58:88:7d:6c:dd:0b:d0:cc:
cd:1d:65:98:24:15:20:8b:e8:8c:c0:80:79:99:9d:8b:67:94:
d6:04:04:dd:90:1e:71:c7:98:16:c8:b6:e8:71:61:1a:4d:61:
64:f7:7b:ce:c1:82:36:6a:62:6d:b8:f9:26:54:94:bd:62:fd:
f1:26:29:29:4c:86:9f:a9:54:b7:02:0f:85:1c:f5:ba:6c:1a:
c0:67:c6:c1
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQm2dfIaY/pGe1b6EkzOtblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz
YTUzZjgwHhcNMjUwMTAyMTE0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTY3YzEwNzUwM2EwMmNjYTg1NDc1OGY2MjFmY2YxYmMzYWE3M2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mvUusoaRZKoA+qub01Ofe40gx8L
t+9oe/qyVyGsMQr/5y25SQdTtryuzix8Cz9cSpc3PnUM5GF8jq37IE3DjlpzzZ6j
3PKZyjLwjyp0WaMr4u+uESXTRGs6Y2zlneeRw3DrMSyGieuTnRhfxeLSo1H28MYp
QqEhIlvbZOKS4W+DnSuRGYMBhGsNjTcREZ3/5y38ay/Yyo0C8iN0n96FevtJtOqN
YczBk/jBTyAbu3T5HH3V+yZGTXg4vhMvCwh0nEFkrDqxDAkDKhEQe/3n1ZR0sVcD
Rfg3ymMnhJkcZI5qmbrExmvMYQMO4Xh39vCz9t4sTErD7tcASOl5fdkyVQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGFnwQdQOgLMqFR1j2IfzxvDqnO2MB8GA1UdIwQY
MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt
NDgwMTE5OGU3NWNhLzEvWVdmQkIxQTZBc3lvVkhXUFloX1BHOE9xYzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh
LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAATAdAwMAj+EDBADA
N2UDBADAhCIDBADAhRwDBADAh6UwDQYJKoZIhvcNAQELBQADggEBAE2e1x3ecvzQ
WAGtBhw7tx5l1VEKU5nU3M4HzuZ+yKu4M0h0pDvxa0m46tOsN3C3hlv/e6jJo6/T
LuVACbjdRh8329Nn40gwSt9Jz6H3v2b1qsY1scFnIRuYJRA/DR7oIyb82jQ43fUN
qnluCt75BqvS2lHtaC+9EHyiRcNlfIkeaX/WGqyFP9qFUSp1E2wPAEWLnPX3QjgS
0Ee/F09FefXS4tvErq0m7EzTHYxYiH1s3QvQzM0dZZgkFSCL6IzAgHmZnYtnlNYE
BN2QHnHHmBbItuhxYRpNYWT3e87BgjZqYm24+SZUlL1i/fEmKSlMhp+pVLcCD4Uc
9bpsGsBnxsE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:59 2025 by rpki-client