Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa
File: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (raw, json)
Hash identifier: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=
Subject key identifier: 62:16:50:15:6C:F0:0D:41:93:F8:78:D2:7C:51:E7:A6:F7:05:31:36
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019427B584B6359E4FFEA6A1B16E5A07BA75
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 146.19.227.0/24 maxlen: 24
185.149.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:84:b6:35:9e:4f:fe:a6:a1:b1:6e:5a:07:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=621650156cf00d4193f878d27c51e7a6f7053136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:08:d5:e0:72:5b:82:76:3a:2a:04:68:bd:
87:c4:2e:bc:54:93:48:77:3c:ec:32:35:75:3e:61:
4a:a8:a6:61:89:12:b1:5d:35:0d:d4:f7:ac:a9:d7:
27:9f:c4:8f:39:56:a8:7d:af:3b:08:50:8b:a7:3f:
a4:cc:a6:b1:df:9d:8f:55:ce:f6:be:7d:e8:66:e7:
90:2e:aa:86:59:8b:7b:5d:eb:b9:b3:1e:bd:b0:82:
86:e4:ba:f3:cc:c2:d0:f3:c4:52:fa:1f:59:91:f4:
ae:b9:dd:38:ad:e7:90:53:cb:ad:c7:78:89:8c:8f:
93:dc:85:5b:83:f9:95:a5:af:00:c6:11:86:51:b7:
99:31:ea:f5:1d:32:05:c5:b5:7e:91:85:d1:c6:cd:
56:62:e4:a9:29:e5:26:8e:ba:92:43:d8:57:99:b2:
d3:0d:ca:27:4a:2d:7f:13:89:a6:f5:91:e3:51:13:
3b:3a:04:2d:ad:e8:35:d4:e5:8c:1f:10:63:51:4c:
23:a1:53:a9:30:f1:ad:11:1e:62:74:91:29:94:8e:
c7:0e:bd:ae:1a:73:14:ee:35:b5:f3:c5:09:bc:3b:
c6:2b:d2:9c:78:cb:1b:41:69:7d:9d:b3:9b:56:ec:
af:20:d8:59:a2:9f:f4:68:34:5a:1e:db:df:f5:d5:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:50:15:6C:F0:0D:41:93:F8:78:D2:7C:51:E7:A6:F7:05:31:36
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
185.149.151.0/24
Signature Algorithm: sha256WithRSAEncryption
04:24:d9:1c:59:0e:f2:e1:8e:f1:83:5e:60:cf:e5:e1:7b:d3:
17:89:16:e0:d3:90:4e:0f:75:20:d8:66:c7:bb:71:f8:9f:6c:
96:33:73:4d:21:7f:46:7d:42:73:32:65:4e:6d:8d:c8:9d:9f:
b2:cd:a7:84:d2:b5:d2:4f:f3:b6:ea:25:f7:d4:8e:41:6b:f4:
c7:82:6b:d2:33:68:5b:3b:91:26:b4:cd:3d:de:3e:6d:8d:fb:
0a:60:83:fa:c6:8b:84:11:19:6b:eb:da:41:3a:6c:1e:96:71:
c7:d9:c4:08:93:ad:3a:80:de:97:85:2a:27:b6:40:44:57:51:
35:ec:79:de:d0:72:1d:ce:4e:5c:ba:52:1a:77:49:d5:b9:ea:
65:93:ad:25:ef:6f:2c:a1:02:f6:5d:d4:37:bb:d9:71:10:bf:
e5:91:2e:98:32:94:21:e2:a9:27:7a:80:11:d1:e8:db:f8:d1:
5d:87:74:f1:4e:1d:2a:2a:37:5a:78:e1:63:a9:65:e1:55:8f:
cb:50:66:56:86:b2:ff:dc:eb:27:98:7b:05:35:0f:a0:dd:9a:
83:6a:18:86:48:1a:eb:87:af:5c:06:55:ee:ce:9d:83:c9:d6:
c1:e7:2d:35:2e:eb:f6:81:40:c7:9a:5c:26:0d:64:f0:aa:2a:
6a:14:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:01 2025 by rpki-client