Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa
File: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (raw, json)
Hash identifier: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=
Subject key identifier: C9:92:FE:87:B0:8C:31:9F:E3:0A:4A:8E:51:65:F3:4C:D4:7C:DC:BB
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 0194274795306F7F74B44111A0C78240E487
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49754
IP address blocks: 195.130.194.0/24 maxlen: 24
2001:67c:247c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:30:6f:7f:74:b4:41:11:a0:c7:82:40:e4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c992fe87b08c319fe30a4a8e5165f34cd47cdcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:c9:45:8f:81:77:40:4a:16:21:1f:81:f3:
57:c9:f2:83:ae:99:ce:09:d2:96:eb:26:2d:df:aa:
7d:cf:f6:b9:10:a6:20:b7:b6:c5:03:b8:de:0c:3a:
55:ce:1b:63:03:f4:48:4e:41:f9:dc:03:00:7c:5d:
a0:12:46:b3:34:2d:6c:d6:b0:1b:9c:9f:95:2b:c1:
97:d7:7c:f8:ee:a8:82:cf:3e:c6:86:4a:fd:13:b6:
59:cf:55:8f:2d:2e:97:a6:af:06:4f:0f:12:ed:4d:
c8:e9:75:f5:19:fb:0e:85:de:59:1e:81:74:1d:51:
af:1f:b7:72:af:99:05:28:14:fa:f2:14:dd:ab:bc:
11:62:2f:24:e2:d0:42:ab:48:eb:50:9d:1d:0e:cb:
65:51:00:1c:1d:fc:24:46:72:99:64:96:09:c7:47:
79:a9:f6:35:42:a7:1d:3f:91:3a:2b:68:95:42:30:
ea:44:be:37:d0:b0:1d:c5:c2:2e:7a:67:d2:b8:b1:
5b:90:00:0f:50:12:ec:0b:b8:3d:84:70:95:00:5f:
9d:9b:9f:c1:40:21:43:b8:46:69:fe:90:46:6d:e4:
e7:b1:69:12:fa:79:3c:e1:19:ae:ed:e4:0a:6c:32:
16:0b:9f:25:59:b2:da:99:08:f4:c8:1d:3a:87:69:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:FE:87:B0:8C:31:9F:E3:0A:4A:8E:51:65:F3:4C:D4:7C:DC:BB
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.194.0/24
IPv6:
2001:67c:247c::/48
Signature Algorithm: sha256WithRSAEncryption
8f:46:14:4e:8d:f0:ca:b2:3b:d4:06:2d:30:73:f9:14:37:3f:
50:a9:08:56:e3:5f:ab:e1:ac:9e:9a:c0:2b:87:8e:1f:73:cd:
f7:29:71:03:eb:e7:0c:80:a1:93:ff:91:72:8d:35:79:75:ff:
bb:db:d0:b2:c4:a2:c4:1b:cd:86:0b:e4:e3:91:b5:18:22:d6:
6c:50:05:93:5c:7e:8f:46:77:7c:49:8c:87:fd:d2:7e:d1:ef:
5a:72:10:52:ba:44:69:c5:58:76:29:56:19:9c:68:9c:8b:dd:
27:ff:02:8c:e6:ee:11:69:d6:78:5b:e1:02:17:e6:7c:fc:ac:
31:91:04:b3:aa:cd:29:f2:07:ec:20:d8:95:49:7d:da:af:7a:
2d:b0:33:c4:e6:4d:84:1b:1b:6b:18:05:ed:b0:b2:ea:be:80:
e0:c6:45:90:41:74:2d:cd:1e:8f:ac:b2:3c:41:59:13:a4:e1:
6c:f2:e6:a7:5c:ac:7a:98:6e:a4:8b:fe:e4:2e:11:d1:7f:88:
cb:7e:c2:8c:fb:21:69:d7:7b:7e:e2:8e:17:15:0e:f7:37:2e:
e7:7e:df:05:44:8c:1e:26:15:f7:4d:d8:ab:c2:e8:56:b9:3e:
e3:6b:fd:75:27:2c:ca:4d:97:6f:2f:cc:3d:79:eb:4d:40:90:
ae:60:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:24 2025 by rpki-client