Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/ycVnM1zp10CMEnPemmwHq5Kmb7k.roa
File: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (raw, json)
Hash identifier: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=
Subject key identifier: C9:C5:67:33:5C:E9:D7:40:8C:12:73:DE:9A:6C:07:AB:92:A6:6F:B9
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01941F8C2B21265437F930AEE4FD91880FDF
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/ycVnM1zp10CMEnPemmwHq5Kmb7k.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41175
IP address blocks: 31.25.64.0/21 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.68.0/22 maxlen: 24
91.196.240.0/22 maxlen: 24
91.196.240.0/23 maxlen: 24
91.196.242.0/23 maxlen: 24
217.16.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:21:26:54:37:f9:30:ae:e4:fd:91:88:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c567335ce9d7408c1273de9a6c07ab92a66fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:a4:c4:0d:72:2a:42:50:96:1d:41:0b:74:
cd:17:da:70:15:a3:07:73:12:5c:a8:68:b4:55:42:
7c:90:75:6b:6d:cf:97:f2:ba:70:45:ae:d6:69:a1:
71:ea:f4:43:f6:79:5c:82:90:1c:85:d6:48:e1:5b:
d3:92:18:fa:04:cf:14:50:f9:9e:a3:ee:fd:ab:22:
49:40:5c:1e:cd:c1:7a:6e:be:8c:b5:32:73:f9:6b:
70:cd:73:1b:a6:4f:a6:82:0b:20:22:fc:33:a3:ae:
f4:fa:6e:c9:47:41:f7:ab:b7:77:f0:a9:a6:4c:4a:
0e:c0:3c:b9:34:00:5d:9f:1a:65:28:4e:9a:a8:97:
43:05:70:bb:ec:b0:b9:09:8f:3a:ac:f9:26:84:cd:
6e:7a:a9:ac:13:e9:8b:e9:3a:e6:db:58:9a:84:96:
28:2e:9a:8d:e1:d3:3d:ca:95:1f:2f:43:46:ed:8c:
5c:60:f2:04:18:d3:a6:c7:bc:12:37:52:c5:a1:28:
f9:3b:48:af:9d:a1:6a:98:ca:47:94:b7:47:e5:67:
df:16:70:cd:f3:5c:9f:1e:9f:22:e0:51:33:18:de:
b3:f5:a5:0d:4a:de:2d:55:7e:7c:5d:9c:7f:58:20:
62:fa:ef:a0:92:f1:14:32:f7:c1:7c:3d:03:b2:e1:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:67:33:5C:E9:D7:40:8C:12:73:DE:9A:6C:07:AB:92:A6:6F:B9
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/ycVnM1zp10CMEnPemmwHq5Kmb7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
91.196.240.0/22
217.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
92:a9:e2:4c:16:53:2f:06:f1:2f:a2:9d:d0:e8:67:7f:0b:c2:
6c:dc:3d:01:51:95:4e:a6:a5:0e:c2:f8:38:79:74:b3:e8:06:
44:c2:73:7f:8a:47:b2:88:cd:a4:9c:df:1b:6a:01:7f:bd:51:
3e:9d:f4:64:92:e4:5a:d0:cb:f6:e2:72:c5:2f:4b:d4:b1:7c:
ba:fa:cc:21:64:d8:df:cd:63:75:43:05:c5:1f:0e:3a:95:8d:
c0:69:22:d6:7d:11:6e:d8:85:fc:fb:9c:3b:1d:4f:a0:72:6f:
7a:c1:f1:b2:17:cc:14:08:11:fb:58:c2:f2:36:cb:aa:72:e7:
25:eb:97:34:c3:e2:fa:9c:11:c2:42:68:25:a9:c8:c7:b9:59:
4d:eb:c4:f3:bc:9d:d4:5f:b0:03:fe:e1:de:e1:35:95:f7:b5:
0f:2a:9e:46:a1:bf:7a:46:2e:99:d2:fd:0d:25:68:52:fd:04:
6b:a4:51:47:1c:5b:07:67:ce:1a:48:8a:0e:70:d9:a3:25:6f:
d7:7c:99:ab:4c:a5:65:79:29:c7:71:a3:52:6b:b3:02:13:72:
b3:c2:1e:80:fa:4b:69:14:38:ea:43:e9:67:60:c2:bd:6e:d8:
b6:43:07:6b:9e:a9:2f:ac:46:09:f6:28:2b:80:12:ee:09:19:
da:4a:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:56:05 2025 by rpki-client