Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yY_qfLYWWFOdAYOyDSixqMoPy5E.roa
File: yY_qfLYWWFOdAYOyDSixqMoPy5E.roa (raw, json)
Hash identifier: pZ9Y2yDhi0ATyXcPP3gSA98wkodAcZAJ6H5k3C88p3U=
Subject key identifier: C9:8F:EA:7C:B6:16:58:53:9D:01:83:B2:0D:28:B1:A8:CA:0F:CB:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222017461FC7CC3F6A2BCB18BFC5637F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yY_qfLYWWFOdAYOyDSixqMoPy5E.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13627
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:46:1f:c7:cc:3f:6a:2b:cb:18:bf:c5:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c98fea7cb61658539d0183b20d28b1a8ca0fcb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:ca:66:c2:23:a6:6a:6e:22:29:43:bd:ef:
70:44:e3:30:9f:2a:43:04:b8:15:11:e0:df:96:7d:
ef:22:3f:8f:8a:6d:cc:7f:35:c0:d6:d3:13:7f:1d:
bb:58:e2:22:fe:e0:c4:8b:5c:7a:0e:ad:39:91:91:
64:5c:be:5b:b8:ee:5c:dc:01:d4:8f:45:f7:0b:2c:
f1:21:69:9e:25:80:cb:ea:06:4b:59:d3:40:c5:80:
13:87:f9:7d:3d:05:f0:97:6a:88:53:39:b3:ba:9c:
c5:61:ce:c7:c4:b7:b5:9d:ec:73:d8:0a:ea:39:ee:
24:c4:20:9e:62:64:61:af:23:fd:e9:61:0f:ba:d2:
64:00:82:30:f3:21:1f:a9:b9:ed:f1:b8:a0:0f:6b:
05:ab:08:98:09:18:fa:87:3a:fb:6c:d0:87:88:6b:
3a:f5:e7:f8:17:ac:ef:f7:7c:48:43:ed:41:41:90:
61:0d:37:a7:44:c3:84:37:3e:bb:8a:85:34:c5:ff:
3f:d5:3c:b4:67:20:63:e1:6b:b3:d2:07:14:b5:4d:
a9:f8:84:8f:d0:4a:61:9d:a3:64:ee:58:fe:e3:10:
4e:cf:b8:23:47:98:29:9a:5c:99:af:ec:5d:4c:c8:
db:67:e8:69:c1:a6:2d:b5:f9:fd:79:d3:ec:03:c3:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:EA:7C:B6:16:58:53:9D:01:83:B2:0D:28:B1:A8:CA:0F:CB:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yY_qfLYWWFOdAYOyDSixqMoPy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b6:82:cc:c9:fe:c4:15:91:cb:be:cb:9f:76:af:87:3f:bb:
03:c0:83:e8:c7:68:52:44:ca:63:93:cb:ed:fd:a2:29:16:cd:
c6:46:79:59:20:2f:b3:12:6a:91:63:99:df:fe:7b:9a:ab:11:
99:55:b6:b6:a7:47:07:63:b0:4f:ee:90:a4:05:3c:26:71:27:
12:47:89:ef:7b:0e:90:58:c5:7f:78:39:4c:09:76:f2:f1:bc:
c7:45:f5:da:cb:38:ac:f6:c7:d3:4a:2c:17:67:12:e3:3e:e6:
e1:db:20:45:06:11:20:76:0c:49:61:ff:ed:82:9e:39:4a:fa:
5b:4e:88:ca:2a:7a:fa:7c:74:50:49:a7:a7:56:fc:6a:43:65:
69:58:60:13:cb:f8:f5:9e:46:fb:32:3e:11:25:8a:26:5f:10:
0b:89:d7:01:ab:f0:79:47:ad:bf:b1:b4:3c:bb:82:46:31:30:
41:c7:5a:42:c1:a6:d6:d7:0e:fd:3b:57:c2:89:37:22:9f:24:
a9:98:d1:3e:c7:ea:23:8e:ae:f4:58:77:0c:9c:91:df:9a:1a:
86:63:02:ad:94:92:5b:d2:96:28:07:32:0e:30:dc:b4:65:1e:
94:eb:d8:d6:45:d3:7e:54:33:8e:89:04:ff:ef:c9:78:b4:9b:
2b:ca:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:27 2025 by rpki-client