Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa
File: yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa (raw, json)
Hash identifier: 6YREBZBiA8QEiaW/R5kG7b3htU5yGqMsceEpoJUmL8Y=
Subject key identifier: CB:19:88:E1:2C:96:78:80:56:29:5E:0E:05:B2:16:DD:4B:7A:F8:44
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA59E0B683D164BAF4464FF92799B8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205207
IP address blocks: 81.12.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:e0:b6:83:d1:64:ba:f4:46:4f:f9:27:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb1988e12c96788056295e0e05b216dd4b7af844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:d2:c7:27:f3:b8:87:df:f0:44:8b:55:03:
b0:6b:75:1a:cb:ec:ad:e7:04:96:dd:83:63:e0:0e:
3d:b4:86:3b:fe:21:5f:c6:1a:e1:be:7b:1a:a0:1c:
e1:92:aa:19:22:4c:c3:99:f0:25:c8:bc:92:98:6a:
6b:fd:f2:cf:22:f1:a8:90:7a:f7:a1:51:5d:bc:44:
6e:b6:5d:af:b7:56:f6:94:fc:96:b7:aa:7f:93:63:
71:94:42:a5:17:01:35:9f:44:e3:81:f6:77:2a:fa:
99:90:ed:b2:a3:f5:8f:fb:e0:3c:2c:44:63:85:a8:
65:c1:40:5e:57:5e:24:25:0b:6b:80:a4:be:97:3f:
ef:e1:2a:99:54:69:aa:90:1d:e8:9c:e8:57:ca:b3:
74:27:ad:22:e0:b2:92:24:16:a6:87:79:64:f8:6c:
11:d7:82:84:64:0c:d3:74:6f:e4:26:02:79:bf:97:
c7:2a:83:95:0b:b5:24:36:bb:9a:e9:c0:51:e1:0f:
6a:b2:04:6e:bc:cb:c1:2e:e9:28:0d:5f:ce:0b:a9:
2c:55:02:f0:fb:37:53:5e:f2:61:ee:6d:51:db:41:
6a:f7:b5:3e:20:b6:1e:27:a4:08:04:a2:00:16:61:
36:99:1d:9b:fc:db:86:6f:66:e8:7d:7c:92:56:94:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:88:E1:2C:96:78:80:56:29:5E:0E:05:B2:16:DD:4B:7A:F8:44
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yxmI4SyWeIBWKV4OBbIW3Ut6-EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.77.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c6:8b:da:6b:0f:ba:7d:3e:fd:fd:85:3b:63:9b:94:3b:ad:
45:a1:fe:be:87:35:a1:ef:cf:95:f4:7c:a6:d5:4c:ff:31:51:
22:d5:74:5b:e9:93:0d:64:8e:3a:19:e1:26:54:ca:69:5f:58:
87:0c:a4:42:60:69:44:e4:2b:50:34:1a:55:40:92:2d:50:23:
82:44:d4:16:ee:12:33:6b:40:29:76:6c:b4:a3:ea:d7:80:75:
c3:1c:db:d9:01:04:fc:47:54:20:cf:8a:95:ec:38:6a:5a:cc:
ca:ed:25:16:94:ea:0c:40:5f:c1:a0:8c:52:80:d1:87:48:91:
ca:3f:d3:91:fe:48:78:56:69:a4:30:bc:57:10:89:59:e7:50:
99:27:19:3a:35:73:ba:d4:d3:0d:e3:ed:b6:e9:9c:3b:62:8c:
05:43:72:85:96:9f:74:f4:c2:b8:2a:08:41:b1:5c:b7:62:dc:
4f:a1:3f:53:55:90:87:7b:e6:42:ef:c7:49:71:20:95:4e:d2:
33:8e:21:c2:a5:17:53:d8:d8:ae:29:bd:2a:18:f0:bf:aa:a7:
a1:c1:ac:47:fb:5a:35:41:ab:1b:e7:bf:17:98:80:01:43:9c:
2e:22:89:a6:ee:1f:31:bd:39:c0:bd:9b:81:51:fc:97:2d:4d:
a2:69:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:42:57 2025 by rpki-client