Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVIvDHNDVcwLeARxiZEeyTJYsRM.roa
File: YVIvDHNDVcwLeARxiZEeyTJYsRM.roa (raw, json)
Hash identifier: ChQLwsOKPdU46CcJpL18pTx9yxzR2ECQFVoUE+n94KA=
Subject key identifier: 61:52:2F:0C:73:43:55:CC:0B:78:04:71:89:91:1E:C9:32:58:B1:13
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D37032D9A7C65C0870739B4523C7D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVIvDHNDVcwLeARxiZEeyTJYsRM.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200823
IP address blocks: 62.89.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:37:03:2d:9a:7c:65:c0:87:07:39:b4:52:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61522f0c734355cc0b78047189911ec93258b113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:7c:48:9a:b2:d4:0b:69:e4:b7:49:13:fc:
62:d9:4e:cf:fc:ae:cb:d8:e4:39:1a:11:2c:0d:65:
06:29:d6:b8:b3:90:8e:2f:87:a7:f6:e3:13:03:67:
ef:14:40:74:d2:f0:3a:27:12:81:53:3d:d6:ca:9b:
51:c5:6f:61:eb:a7:a1:65:bd:61:7b:31:b9:f6:ee:
df:5d:84:ac:cd:ee:82:8a:96:a7:12:4a:39:0f:aa:
0e:76:0c:8a:4e:fa:5a:b1:96:0f:3f:5a:ed:40:98:
9a:e9:72:e7:ee:2d:41:5d:14:f7:aa:c2:fb:76:b9:
6d:95:a2:77:1d:c9:d2:50:8e:59:97:8b:24:1d:06:
e1:5f:47:7c:d5:a7:63:50:f0:25:13:35:0e:80:2d:
38:a8:1e:a9:88:ee:98:83:79:ab:81:7c:61:44:b6:
71:d2:f3:40:45:07:d1:55:0f:c3:b5:ea:25:8c:6c:
a7:a2:0e:d1:fa:6f:d7:25:67:7c:2b:99:bc:3c:2d:
b1:fe:e9:21:61:df:62:66:3d:d9:58:0a:57:d2:f5:
0b:e8:95:ff:fc:e5:a2:b8:df:8f:07:38:e2:57:93:
76:1b:70:60:39:77:a5:33:d8:24:7c:9e:a7:a5:5d:
2a:45:6c:46:e3:8c:a9:c8:c0:24:10:9c:1b:52:89:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:2F:0C:73:43:55:CC:0B:78:04:71:89:91:1E:C9:32:58:B1:13
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVIvDHNDVcwLeARxiZEeyTJYsRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9a:ef:95:80:c4:3c:48:60:e4:8e:a4:42:66:f1:30:44:30:
33:3f:b9:a5:18:87:98:54:a9:13:95:4a:e4:87:f7:8c:e1:99:
8f:11:40:10:d5:f7:c5:0c:0b:2a:0c:b6:cb:1c:56:e9:9e:c5:
bb:e4:b8:44:b6:9c:64:a9:86:4a:30:f7:39:7e:7a:e5:9d:eb:
56:95:28:fc:de:3e:b6:28:9d:a7:41:27:79:46:7d:68:d3:74:
44:a2:93:62:e6:5e:83:76:32:82:28:fe:ac:8d:ff:a0:60:65:
61:da:c0:e9:bc:b6:4f:be:7b:32:81:0c:5a:de:22:ec:f2:48:
1f:bb:7a:8d:c9:1c:7f:3a:e2:71:da:01:5f:0c:82:be:90:3b:
7c:cf:38:71:ec:ba:be:22:43:2c:37:a2:e3:f3:58:6c:fe:52:
25:04:fc:2a:9d:b2:c1:48:42:6b:44:e6:4b:32:e8:da:04:f1:
e5:37:56:59:14:f3:2c:61:ca:69:69:90:39:64:94:49:ae:7c:
09:0e:a9:3d:14:e2:28:13:8c:57:3c:9e:ea:34:c4:2a:ff:7a:
b6:a4:74:f3:99:fc:8a:f1:10:22:df:93:8e:d3:00:1b:2b:44:
98:13:e8:32:de:94:5e:c7:ea:be:3f:c7:01:cb:43:79:e7:3b:
bc:c9:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:44 2025 by rpki-client