Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa
File: Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa (raw, json)
Hash identifier: qC85OfWmRiiIbRUFQTQXhA1rLa0/Vh0pG/wieHJV01o=
Subject key identifier: 62:7C:F7:BF:C0:24:D1:6E:75:AE:E3:2F:04:D3:0D:80:23:D8:15:87
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA55048680F6ED6D353D0E8F37D7CA
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60627
IP address blocks: 81.12.63.0/24 maxlen: 24
87.107.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:04:86:80:f6:ed:6d:35:3d:0e:8f:37:d7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=627cf7bfc024d16e75aee32f04d30d8023d81587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:35:c3:c9:c5:6d:2a:31:90:5c:5e:2d:31:
fc:ad:0f:46:9f:ad:b1:32:ea:03:06:ef:69:df:48:
29:38:3a:33:7e:3a:86:50:08:b3:13:78:3c:f0:2e:
da:41:af:67:19:5f:e3:2a:b2:4c:e3:61:38:32:fb:
89:e5:e2:6f:e6:db:04:90:38:e0:66:a8:d7:cc:99:
2e:80:66:ec:66:19:93:b2:c0:85:f8:c4:8a:7a:af:
67:42:41:ab:d0:87:cb:59:18:bf:75:9e:d5:e1:31:
58:a1:2f:2b:3d:b1:66:b3:38:ec:24:d9:dd:f2:6e:
ca:a1:0c:3f:4b:ec:f8:5d:8d:d3:cb:d9:71:73:d9:
a7:47:f9:4b:74:e8:fe:9d:ff:6c:9c:f1:04:ef:21:
b2:7e:25:b1:7d:91:80:61:21:f3:89:27:01:36:1f:
40:2e:25:73:b4:2e:d5:cb:0a:de:7f:e3:ed:b3:41:
53:fd:14:eb:04:93:bd:b3:22:8f:5f:df:0c:2c:90:
22:b6:2a:d8:ef:ff:48:3c:97:42:bc:36:e7:59:f0:
40:ae:33:f5:07:10:31:cf:6d:0c:72:6f:8f:48:ef:
1d:53:60:e7:93:c2:88:bf:c0:1a:e8:c7:5e:09:5f:
a7:d3:25:7c:0d:3a:08:cb:ea:66:4f:df:60:10:e9:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:F7:BF:C0:24:D1:6E:75:AE:E3:2F:04:D3:0D:80:23:D8:15:87
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Ynz3v8Ak0W51ruMvBNMNgCPYFYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.63.0/24
87.107.66.0/24
Signature Algorithm: sha256WithRSAEncryption
75:92:9c:6c:c9:80:ce:ba:93:1c:95:3f:54:00:0f:8c:69:d5:
5d:d8:ba:7e:d5:22:8e:ea:6c:4d:de:0b:63:c4:c3:33:db:60:
7a:7c:78:4a:52:10:2b:39:97:2e:b5:18:56:fa:f0:9d:e5:3e:
2a:b2:74:d0:b6:6a:d6:1a:eb:5c:8d:bd:d1:65:75:af:d9:92:
fe:f7:c9:76:b4:1e:a9:29:86:82:93:1f:79:bd:a4:29:f1:82:
ac:b3:0a:de:28:46:d6:1f:02:56:e5:68:37:66:2e:a9:1e:73:
7d:f5:f4:c4:1b:bc:24:48:3f:4f:11:e8:0a:be:25:a5:50:e4:
34:17:92:3f:80:72:34:21:c4:8c:73:62:17:49:85:7a:b9:4e:
ba:07:0e:3f:93:c8:2e:27:94:8b:09:d6:5b:db:17:dd:b6:6f:
4f:f9:ca:d7:d1:2a:b2:5e:a8:65:11:33:c0:da:c1:ca:11:f9:
cf:2b:40:51:25:fd:24:55:c4:f4:32:9d:c1:4b:a0:37:be:5b:
93:82:8b:a7:ba:f5:70:27:d4:97:35:71:85:fb:43:27:9a:81:
a6:0a:ce:20:2f:f5:57:ad:94:ab:f1:d3:2a:78:2b:ab:89:77:
6c:51:d7:53:fa:80:6c:2a:85:2e:0d:37:fb:cd:8e:6c:96:62:
39:32:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:33:56 2025 by rpki-client