Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yZgl1zyLJKgQpTHOd8kSTVljdNM.roa
File: yZgl1zyLJKgQpTHOd8kSTVljdNM.roa (raw, json)
Hash identifier: f2YDZTloIVUPbF+TnGafTEX+6riOCFoEhWnQt6Ptf2I=
Subject key identifier: C9:98:25:D7:3C:8B:24:A8:10:A5:31:CE:77:C9:12:4D:59:63:74:D3
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5A3C1E03586D16F33EB364BDA4F6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yZgl1zyLJKgQpTHOd8kSTVljdNM.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208161
IP address blocks: 81.12.52.0/23 maxlen: 24
87.107.10.0/23 maxlen: 24
87.107.54.0/23 maxlen: 24
87.107.104.0/23 maxlen: 24
87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:3c:1e:03:58:6d:16:f3:3e:b3:64:bd:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c99825d73c8b24a810a531ce77c9124d596374d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:67:2e:6a:b6:1d:91:0e:ad:cc:6d:d5:cd:
ba:29:46:c8:50:2c:c7:f3:d6:8c:c7:f0:fe:a1:0f:
5f:1e:0a:f0:52:bc:f1:26:9b:58:0e:b6:e9:e2:a4:
b0:dc:a2:d5:98:dd:a1:d9:9e:c1:b5:2e:8b:04:0c:
47:01:1b:ba:1e:06:d2:c8:a7:db:25:4c:a7:ec:d8:
00:db:ba:ef:60:52:c5:a0:63:14:e3:72:d2:70:d6:
5e:e1:fe:f7:44:b9:f1:f9:38:f2:e5:bc:e3:55:7b:
ec:a1:55:56:d3:1e:1e:29:38:f5:18:3e:db:34:d9:
b0:6c:2c:3b:74:ca:0b:bd:95:e6:c5:c2:d5:b5:3a:
ac:95:9f:65:37:30:e4:c8:99:14:fe:b5:ec:66:99:
f4:f3:11:c5:28:1a:17:fd:3a:c8:1b:a0:9a:04:ff:
52:8e:2e:cc:ea:b3:ef:79:4d:c9:8d:25:2f:ed:a9:
81:fa:e2:c4:9a:6d:53:5e:4a:bf:e0:60:bf:3c:35:
95:04:a8:bb:36:5a:b4:e4:9e:e2:d6:4e:28:89:23:
4c:84:ac:db:a8:dc:e4:cb:62:1d:40:cc:86:be:66:
77:36:ee:39:ff:8c:0e:e2:b3:38:51:21:53:13:50:
bd:cf:34:dd:e2:36:fe:a8:a2:2d:63:fb:f0:b9:9d:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:25:D7:3C:8B:24:A8:10:A5:31:CE:77:C9:12:4D:59:63:74:D3
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yZgl1zyLJKgQpTHOd8kSTVljdNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.52.0/23
87.107.10.0/23
87.107.54.0/23
87.107.104.0/23
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
96:33:3c:9b:1d:f2:83:4d:7e:98:c5:16:94:29:89:f9:3e:5b:
39:d8:78:64:64:68:90:4e:b3:9f:0e:c3:b1:2d:e8:1f:fd:ee:
2e:da:a4:c3:0c:90:57:da:5b:20:47:66:6b:b7:5d:5d:32:ae:
37:a6:da:6d:18:aa:44:ae:4f:82:02:fd:49:a0:ec:2b:f6:3a:
41:88:ed:b3:f0:46:dc:de:e2:35:58:9c:57:46:1b:c8:76:9b:
0e:c6:da:d7:b5:14:d9:5a:36:0e:02:48:60:92:4e:67:be:b6:
7c:97:bd:48:b8:4e:6c:ee:17:a8:d8:43:37:90:b3:09:3d:22:
4b:78:e7:7f:2d:89:21:0d:0f:30:ff:35:9a:f6:c9:ce:4e:43:
c7:be:94:7b:93:e6:8c:a3:6c:86:98:e8:9f:8a:74:01:a5:39:
12:04:d4:b2:58:03:02:c7:fa:a9:8c:1d:28:f9:4e:bf:f7:f5:
cd:b9:3d:87:12:11:08:c8:d7:29:8c:3b:f1:ea:df:a5:2d:a0:
ec:54:a6:13:19:5c:ed:5b:58:0a:c5:74:7d:34:2b:f4:3f:e6:
5d:5b:7c:12:86:bd:65:cf:d9:dc:8e:82:5e:09:51:80:e7:bf:
13:c7:a2:fb:dd:a2:c5:34:e6:7c:b2:97:0c:81:63:b3:59:da:
7c:2d:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:57 2025 by rpki-client