Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y2HA4Jm4ye8rcgxhizIKIMMuNHM.roa
File: y2HA4Jm4ye8rcgxhizIKIMMuNHM.roa (raw, json)
Hash identifier: fUDOUi9RJ8TSV9I31Tu8tCUqL/RwcD9IZAikSAHq4VA=
Subject key identifier: CB:61:C0:E0:99:B8:C9:EF:2B:72:0C:61:8B:32:0A:20:C3:2E:34:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019735CF75EA0D2AC44745F71380BB151187
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y2HA4Jm4ye8rcgxhizIKIMMuNHM.roa
Signing time: Tue 03 Jun 2025 12:41:17 +0000
ROA not before: Tue 03 Jun 2025 12:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199458
IP address blocks: 2.59.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:cf:75:ea:0d:2a:c4:47:45:f7:13:80:bb:15:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 3 12:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb61c0e099b8c9ef2b720c618b320a20c32e3473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:2a:d3:b1:b5:eb:6c:7c:30:59:c0:f2:38:
4b:0a:e6:e5:97:be:3d:d4:9b:d5:8c:09:9f:e7:6a:
20:ad:7c:c5:0e:4a:c7:14:e8:cb:7f:29:6c:75:1a:
1e:14:a3:b7:e5:6f:48:9a:cd:ab:33:16:fd:4f:2d:
06:22:8e:34:f1:10:5c:a7:10:5c:0f:b8:8a:dd:f1:
b6:2a:25:25:c2:bc:d3:91:8e:b1:16:b9:96:f0:6f:
8f:df:35:6e:c0:b3:55:c7:69:79:b4:a8:d2:e3:ca:
af:91:6d:c3:20:75:51:78:a3:f7:f8:52:74:62:65:
45:82:23:06:6a:4b:75:68:38:3e:07:6e:41:a1:31:
67:83:37:4e:47:43:11:ef:bb:18:bb:a0:1d:07:e5:
d1:b2:94:ae:37:17:9d:14:d2:31:d9:4f:eb:0b:f8:
8b:a5:38:ac:47:40:9c:6d:0f:25:a3:02:da:f7:f5:
b7:5e:74:51:a5:8e:24:62:38:c2:0a:48:e0:7f:60:
87:58:28:8c:b1:65:e5:9b:fb:84:54:2c:1f:70:26:
7d:af:bc:11:1e:ac:ce:a6:97:41:45:9a:f9:c3:b5:
27:b4:eb:f3:15:a2:1a:b0:35:fe:18:9c:98:12:a7:
81:43:b5:47:8c:7b:9e:a4:9e:0c:c1:f0:0b:58:56:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:C0:E0:99:B8:C9:EF:2B:72:0C:61:8B:32:0A:20:C3:2E:34:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y2HA4Jm4ye8rcgxhizIKIMMuNHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:64:35:1e:e7:09:31:06:fb:be:67:7b:b6:6a:e9:c6:18:ea:
2d:2c:6f:b4:e1:d5:2f:0f:3f:2e:ac:14:0b:bf:de:f7:f9:25:
37:d9:14:76:b5:da:e5:8e:2b:b9:1d:c1:27:08:74:d2:2e:26:
60:a9:82:0e:04:4f:4e:e8:aa:99:e9:0e:39:cc:28:55:84:3a:
8c:3f:f1:ac:1b:3b:dc:ca:55:1c:76:2e:09:27:7c:7e:47:1e:
66:cf:3d:c0:55:dd:79:5b:b5:27:1f:40:42:31:e9:3b:e8:73:
c7:93:0f:42:4d:b0:4f:9c:f3:83:9a:67:45:ed:84:7b:c8:09:
62:25:a3:24:30:6e:f7:e8:8d:f5:76:51:0a:dd:3c:5e:3a:2b:
f6:12:44:4e:95:84:67:9f:ba:1a:39:3a:ba:e9:ef:7f:6a:5f:
ac:7d:f4:01:87:d8:27:5c:84:1b:91:5d:b6:2a:63:0c:e6:38:
10:67:a3:6f:aa:7d:e3:fb:16:85:30:f5:5f:39:d6:30:0f:df:
90:7f:56:ba:5c:14:86:e3:fa:5f:9a:47:cf:5c:30:5c:cf:24:
08:ad:b8:44:72:f7:f6:37:be:0d:a7:90:15:4a:e9:ea:49:38:
85:b9:8d:cc:22:fa:65:73:90:34:23:42:f7:b2:ff:cb:d2:db:
4b:9c:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:36 2025 by rpki-client