Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/yYyiNsgvxodzcWtsJth3gtqP74s.roa
File: yYyiNsgvxodzcWtsJth3gtqP74s.roa (raw, json)
Hash identifier: h9GU418V8HLDeWxchLf1ERx3rIBgo7WWOa5d5upmucg=
Subject key identifier: C9:8C:A2:36:C8:2F:C6:87:73:71:6B:6C:26:D8:77:82:DA:8F:EF:8B
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 0194A7C6BA7615213A61B78072ED14A9126E
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/yYyiNsgvxodzcWtsJth3gtqP74s.roa
Signing time: Mon 27 Jan 2025 12:40:06 +0000
ROA not before: Mon 27 Jan 2025 12:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49033
IP address blocks: 103.66.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:c6:ba:76:15:21:3a:61:b7:80:72:ed:14:a9:12:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Jan 27 12:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c98ca236c82fc68773716b6c26d87782da8fef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:60:12:c2:6c:1c:00:e1:6c:25:0e:7b:99:
34:54:9d:37:5d:a7:38:b8:50:ef:7b:14:df:31:39:
3f:1c:24:b0:23:a4:99:14:ad:60:2d:6f:18:1f:2a:
db:70:ef:3a:03:90:94:8b:93:8d:49:7c:59:2b:b4:
b1:59:3f:a3:10:a8:31:c6:09:6b:a0:56:cc:02:fc:
ed:39:ea:7e:4f:44:c6:44:d7:3b:a6:e7:2b:85:22:
04:0c:3f:fc:c3:96:20:eb:ec:96:67:bb:6e:6a:79:
8f:e3:e3:28:a5:a9:80:6e:6f:1f:10:1a:c1:09:34:
78:93:76:a6:39:5f:4d:26:d7:68:92:d3:52:fa:a0:
ca:ee:9f:fa:1f:96:61:21:08:cc:be:b3:3f:6c:f8:
5c:9e:21:12:b9:7b:b2:34:88:7b:d9:99:f2:2b:14:
e3:4f:ad:c2:3b:d5:02:07:8b:e0:8c:10:92:3e:4f:
c6:16:2f:2a:bd:e3:7f:ff:81:ab:0d:2f:90:ab:56:
0a:42:34:c7:2b:00:75:57:65:f5:81:0e:09:36:60:
14:60:eb:5f:13:ef:d9:92:45:3f:88:7a:1c:3c:f8:
8e:96:3f:14:05:66:e3:19:92:3c:92:80:4b:2c:c0:
2f:f3:99:a8:67:c9:bd:21:90:ac:7b:b3:5e:b8:88:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:A2:36:C8:2F:C6:87:73:71:6B:6C:26:D8:77:82:DA:8F:EF:8B
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/yYyiNsgvxodzcWtsJth3gtqP74s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b1:f4:c2:50:d0:50:a5:55:0f:8c:3b:85:27:ff:97:04:fa:
51:00:8f:8b:61:e7:39:f2:dc:57:40:96:b5:53:f5:0c:a9:98:
08:8c:5b:75:6f:5a:cf:70:ab:09:dc:9c:70:0e:26:10:ce:ba:
0d:ac:ee:26:6d:b5:26:90:66:fe:59:d8:73:30:22:27:3a:6a:
49:6c:43:61:d4:78:8c:ca:cf:32:0c:c4:e8:64:b5:5c:29:cc:
4b:34:77:75:e5:08:34:a9:5d:01:6b:0a:7c:5d:ec:43:e9:7c:
d6:c3:10:4a:a0:10:bf:4e:fa:77:c4:bd:d7:f7:b0:fd:67:17:
a4:36:80:e3:39:75:33:fc:c9:5f:45:4f:99:6f:c7:6e:d0:45:
3e:ec:81:94:06:c8:3d:a9:c2:bb:ca:45:ae:2b:cf:93:96:ba:
ea:9b:dc:f5:bd:e6:02:04:78:1e:e0:a4:ba:f5:c7:6b:19:7c:
14:7e:66:0e:00:0a:e9:36:ed:29:7f:21:9c:4f:4a:e3:89:79:
64:51:81:89:a1:03:12:68:01:f4:2b:a2:7a:5f:4d:f6:94:fc:
a9:00:dd:9f:10:c3:f3:df:17:94:ca:2e:99:ce:af:f1:79:49:
87:3c:bf:bc:4d:e8:45:83:f6:dd:05:f0:19:23:b5:77:cf:1c:
0c:30:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:09 2025 by rpki-client