Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa
File: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (raw, json)
Hash identifier: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=
Subject key identifier: 9F:21:8B:47:C5:59:58:C6:98:FA:45:35:35:43:3F:7D:CE:22:46:33
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019423D6FD9761EC4CEC672F8FB276999EA2
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198371
IP address blocks: 217.79.148.0/24 maxlen: 24
217.79.149.0/24 maxlen: 24
217.79.150.0/24 maxlen: 24
217.79.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:97:61:ec:4c:ec:67:2f:8f:b2:76:99:9e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f218b47c55958c698fa453535433f7dce224633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:13:d4:21:03:b7:5d:d2:dd:76:27:88:75:
9c:7a:d1:a8:24:58:54:ec:2e:85:07:d0:ff:a0:e9:
54:9e:e4:3a:40:17:97:59:23:2d:fb:d5:8a:34:c6:
29:97:06:09:86:3d:cc:ae:91:43:bb:5f:23:7f:1c:
a0:c4:e6:a7:ae:09:3e:45:84:6a:71:df:63:e1:38:
7a:68:d8:69:a7:4e:2a:40:c8:79:2c:84:96:8e:d8:
97:86:3b:fe:6f:dc:d6:f3:18:0f:6f:82:34:a2:31:
ce:27:8c:f7:ae:4b:93:65:49:5c:8d:69:e6:e2:86:
39:c7:2b:dd:1f:5a:23:32:db:2b:d4:78:0e:dd:02:
8b:ab:ed:2e:aa:07:92:b8:fb:e7:4c:b6:65:23:c8:
d4:f7:96:d1:35:ab:48:58:cb:8a:27:da:55:a9:74:
33:8b:74:5a:53:45:6b:dc:2c:7d:01:e4:1c:02:17:
87:b4:17:24:d2:3e:a0:3c:0d:79:85:d7:0a:82:3f:
21:4f:95:e2:0d:bd:e0:64:5a:32:ab:b6:2d:97:06:
c2:f1:c4:15:9f:8b:d8:35:ef:eb:40:3f:b0:76:ee:
67:b8:31:53:b4:8b:ba:13:cb:0a:30:e6:14:cf:d9:
66:c0:ed:4c:b6:a6:d6:f9:d4:16:a6:38:95:e9:53:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:8B:47:C5:59:58:C6:98:FA:45:35:35:43:3F:7D:CE:22:46:33
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:33:c1:a2:ce:11:45:b9:64:e5:ab:fc:9c:1f:4f:56:a5:7a:
02:7d:4b:a6:c2:62:1d:0d:a7:58:24:e2:5d:0a:32:69:c6:9c:
49:5b:f2:f9:f7:3b:8f:20:bd:09:7b:5c:fa:86:f4:04:66:b2:
c8:4c:e2:81:2a:4d:28:16:28:b1:46:72:d8:19:90:9a:bf:88:
4c:bc:dc:ec:cf:e0:10:8f:54:15:f9:79:e6:bb:a7:59:4e:b3:
b8:b5:6b:ae:27:b2:35:16:6f:8c:9e:2d:e0:ba:43:8c:fb:8c:
de:a3:ec:9b:d7:0f:4c:ef:f9:ad:23:2d:a7:e2:57:09:4a:9c:
a5:c0:f0:0c:5e:56:31:27:b9:cb:d7:3f:a5:9a:61:1b:e9:42:
32:ae:3f:69:03:e5:65:6c:ca:3c:e0:35:e8:34:25:e8:3c:3f:
07:2a:e3:e5:d2:cf:ae:ca:ea:24:d6:29:51:10:eb:5f:10:87:
3c:1e:67:bc:f0:98:f2:b2:6d:cb:14:6b:28:00:dc:75:d2:11:
c7:b7:ef:7c:99:74:9e:32:8f:55:15:7d:b0:b4:bc:f1:99:87:
d4:00:29:8d:6a:2e:4e:dc:a3:fd:55:6c:2f:79:f5:aa:c4:ac:
54:f3:92:cf:68:e2:77:8f:2b:7e:66:9d:c7:a9:25:b6:bb:86:
49:14:eb:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1v2XYexM7Gcvj7J2mZ6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1
ZmQ0OTAwHhcNMjUwMTAxMjE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjIxOGI0N2M1NTk1OGM2OThmYTQ1MzUzNTQzM2Y3ZGNlMjI0NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ8T1CEDt13S3XYniHWcetGoJFhU
7C6FB9D/oOlUnuQ6QBeXWSMt+9WKNMYplwYJhj3MrpFDu18jfxygxOanrgk+RYRq
cd9j4Th6aNhpp04qQMh5LISWjtiXhjv+b9zW8xgPb4I0ojHOJ4z3rkuTZUlcjWnm
4oY5xyvdH1ojMtsr1HgO3QKLq+0uqgeSuPvnTLZlI8jU95bRNatIWMuKJ9pVqXQz
i3RaU0Vr3Cx9AeQcAheHtBck0j6gPA15hdcKgj8hT5XiDb3gZFoyq7YtlwbC8cQV
n4vYNe/rQD+wdu5nuDFTtIu6E8sKMOYUz9lmwO1MtqbW+dQWpjiV6VOjaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8hi0fFWVjGmPpFNTVDP33OIkYzMB8GA1UdIwQY
MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvbnlHTFI4VlpXTWFZLWtVMU5VTV9mYzRpUmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2U+UMA0G
CSqGSIb3DQEBCwUAA4IBAQBXM8GizhFFuWTlq/ycH09WpXoCfUumwmIdDadYJOJd
CjJpxpxJW/L59zuPIL0Je1z6hvQEZrLITOKBKk0oFiixRnLYGZCav4hMvNzsz+AQ
j1QV+Xnmu6dZTrO4tWuuJ7I1Fm+Mni3gukOM+4zeo+yb1w9M7/mtIy2n4lcJSpyl
wPAMXlYxJ7nL1z+lmmEb6UIyrj9pA+VlbMo84DXoNCXoPD8HKuPl0s+uyuok1ilR
EOtfEIc8Hme88Jjysm3LFGsoANx10hHHt+98mXSeMo9VFX2wtLzxmYfUACmNai5O
3KP9VWwvefWqxKxU85LPaOJ3jyt+Zp3HqSW2u4ZJFOtC
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:07 2025 by rpki-client