Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa
File: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (raw, json)
Hash identifier: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=
Subject key identifier: C9:0F:80:43:DE:04:D4:3F:53:BF:7A:B5:F3:09:BB:16:F7:B5:39:B2
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0194228DFBFB091BEC247CECCD9EF3411535
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209784
IP address blocks: 81.2.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:fb:09:1b:ec:24:7c:ec:cd:9e:f3:41:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90f8043de04d43f53bf7ab5f309bb16f7b539b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:fc:53:04:1a:d7:6f:ef:2a:96:3f:16:83:
fb:c0:ca:93:7b:64:c3:fe:ce:2d:a4:29:21:e1:25:
64:11:26:be:00:6b:14:61:de:0e:79:90:3e:53:1e:
4c:14:93:32:90:02:34:cc:fc:9a:37:f9:70:bb:2a:
44:94:9c:a3:47:e5:bd:d4:56:20:93:9b:50:3c:2d:
a0:74:71:ae:a1:ef:fa:00:c2:bd:1f:08:b9:70:f3:
24:e9:5c:62:75:5e:2f:5a:cc:4a:79:b3:38:40:4f:
bc:c8:e3:14:6a:ce:9d:8f:d8:eb:b1:f2:8e:3e:1b:
c3:3b:c4:ac:96:cf:29:c5:b9:03:c6:7c:ea:b2:78:
4d:61:10:e7:95:93:2e:30:84:0e:fd:18:3b:6a:53:
50:60:c0:72:41:13:66:b1:50:de:e7:bb:88:cf:de:
a8:e6:ce:dd:12:be:ab:48:c7:5c:0e:3a:13:f0:3d:
e3:b2:3e:fc:3a:42:3f:aa:9f:b3:80:08:3a:a4:89:
ed:d8:43:8e:ed:05:ac:bf:72:b6:dc:4e:e1:9b:7f:
60:82:68:18:b0:a3:68:96:53:aa:cc:ed:fa:7e:00:
2e:f0:24:78:04:bc:cb:00:7a:8f:45:49:7e:50:34:
de:93:2c:81:b1:18:6e:b5:bb:17:49:32:f6:80:ef:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:80:43:DE:04:D4:3F:53:BF:7A:B5:F3:09:BB:16:F7:B5:39:B2
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.187.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bd:df:8b:35:1c:a8:cb:71:9b:25:f2:8c:c7:d8:c0:c6:82:
11:50:2c:d3:14:f6:aa:7a:d2:65:78:10:85:13:a7:f8:77:b4:
b8:5a:9b:34:db:2a:ad:e5:7a:8a:54:94:3b:90:ff:00:06:14:
a1:54:5c:94:0a:b0:a5:8e:b9:9e:d0:04:6f:d2:ee:7a:94:68:
0b:79:ef:71:90:f6:58:60:b2:df:d0:b4:40:52:f4:6a:06:70:
e7:5d:75:9c:d0:88:cf:75:2d:46:a7:83:7e:62:73:d3:fd:3d:
9b:cb:06:f5:5c:9d:8f:95:d2:ad:76:4d:55:0b:5e:8b:d6:46:
f9:d7:ea:e2:b4:43:14:a2:89:bf:e2:2d:95:f5:74:58:da:9c:
c6:6f:d1:21:60:75:76:6c:78:ec:d4:33:94:f5:1a:98:de:d9:
6a:3c:98:2b:01:27:d9:03:f7:35:53:1f:a3:36:2a:fa:df:cd:
a7:5a:aa:ba:b1:33:e1:95:be:89:dd:39:e8:cc:d3:55:84:08:
3a:f6:e5:9e:33:f8:57:c4:e8:c3:34:bc:b1:4f:df:78:8c:3f:
de:48:5f:3c:1a:27:89:7e:6d:3d:2c:7b:0b:c8:e6:53:e6:e1:
26:22:da:71:1b:08:50:b8:00:62:77:de:53:c6:dc:a3:93:8e:
06:2a:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:32 2025 by rpki-client