Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/YuDsO55F13UZ0cxSF251Oa2EzOk.roa
File: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (raw, json)
Hash identifier: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=
Subject key identifier: 62:E0:EC:3B:9E:45:D7:75:19:D1:CC:52:17:6E:75:39:AD:84:CC:E9
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 0194236A05D86AF2FF7F94664149DBDF8812
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/YuDsO55F13UZ0cxSF251Oa2EzOk.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208849
IP address blocks: 45.82.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:d8:6a:f2:ff:7f:94:66:41:49:db:df:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62e0ec3b9e45d77519d1cc52176e7539ad84cce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:7a:4e:ac:54:d1:91:a3:d7:32:a3:05:a1:
0c:b9:70:7e:9a:19:2b:b2:0c:66:67:fb:89:89:ba:
1e:d3:d7:ac:97:3e:c3:31:6a:7e:3c:8d:52:38:68:
ca:0e:2b:d3:8b:ec:a0:69:e5:75:bf:0b:c7:e0:3a:
38:40:5e:aa:4b:fc:9c:07:da:12:1b:ff:79:c2:d8:
15:c5:dd:7b:16:7f:3f:6b:40:81:30:7e:9d:71:99:
a3:ba:ae:82:57:47:f7:3e:38:37:d9:a7:de:f7:3a:
b2:1b:4a:eb:32:31:56:b2:07:78:79:0b:af:9a:97:
7f:b7:48:1c:36:0b:b8:90:3a:ee:6d:d6:2f:3f:a2:
86:b7:ab:01:19:c5:bd:1a:bb:ba:cc:db:28:11:e9:
18:b8:02:13:60:38:54:35:71:06:93:10:98:82:ba:
0d:1d:cf:d4:d1:e5:55:a3:03:b2:d0:f1:af:0f:38:
4c:99:94:4f:2a:86:b5:57:fa:d4:6d:0d:72:0c:3a:
68:e8:c8:4a:64:b5:3b:82:34:94:69:af:74:a2:4e:
74:c4:bf:3f:b4:f9:3e:6f:9c:06:66:b4:cc:75:77:
d7:bb:28:fb:f3:e3:14:02:07:04:3c:e5:39:f3:0a:
a0:f8:08:a9:da:99:af:64:29:78:2d:4b:db:b1:2e:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:EC:3B:9E:45:D7:75:19:D1:CC:52:17:6E:75:39:AD:84:CC:E9
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/YuDsO55F13UZ0cxSF251Oa2EzOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:28:40:e6:50:61:88:dd:c5:97:2c:e7:40:c1:b3:fa:a9:c8:
9f:ac:65:16:d0:e7:13:0b:54:74:0a:33:49:14:ea:95:44:89:
3c:b2:c4:aa:c0:09:c9:04:5b:66:04:c6:a9:16:2f:ee:31:88:
b3:6d:cb:1e:bf:78:bb:37:d4:75:02:c6:ab:7b:29:9c:60:37:
ae:75:bb:0b:5a:11:0f:67:cb:20:e0:18:bd:05:32:6a:ad:9d:
eb:82:b9:a2:55:3b:f1:70:88:39:4d:47:e6:1d:45:1e:54:bc:
62:b9:b9:2d:63:e5:8a:91:ce:a4:b7:85:37:00:6f:27:1e:53:
db:41:05:95:16:d9:dd:a0:47:33:c6:ef:1a:35:47:c1:55:0c:
29:88:b8:87:4f:82:74:f5:15:9e:af:c1:a9:ea:ae:bd:c4:fc:
41:fd:fe:a6:62:34:c9:a4:48:cd:8a:a8:a3:d0:ee:c1:b9:16:
5e:21:40:d5:74:44:d0:58:21:e7:2b:0e:50:de:ff:60:55:1a:
bf:76:05:95:77:bb:7c:bd:93:13:1e:b6:59:3c:a3:0f:c0:cb:
c1:2b:6a:ef:0b:e6:e1:62:34:bb:ed:dc:79:64:b8:8f:78:70:
60:88:1c:3e:21:fe:bd:0c:fb:4b:b8:d0:eb:97:de:33:8d:50:
5f:0a:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:24 2025 by rpki-client