Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa
File: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (raw, json)
Hash identifier: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=
Subject key identifier: 61:46:83:BE:83:FF:9C:03:FF:C8:5F:64:DB:5A:EB:6F:30:C4:B8:E4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB96FA627A28BC82DB12EF2187F599
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43043
IP address blocks: 83.137.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:96:fa:62:7a:28:bc:82:db:12:ef:21:87:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=614683be83ff9c03ffc85f64db5aeb6f30c4b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:80:32:c2:72:eb:24:d9:4b:d5:a3:cb:63:
d7:43:71:7e:fe:37:8b:55:ef:0e:2d:89:4e:7f:fb:
4d:f7:23:4f:f2:0f:ab:37:bd:41:a9:0a:88:73:01:
36:7b:4c:38:8a:3a:06:0e:cd:bb:f3:e1:57:12:8e:
be:54:cb:53:27:d9:01:b7:08:b9:60:f8:ff:76:53:
6d:68:5a:e7:02:e6:fb:56:d0:79:d5:41:e2:6d:9e:
8f:e8:fc:63:72:d9:72:b9:7f:88:47:6d:03:19:90:
57:d2:d6:c9:13:73:0e:e2:31:6b:0e:f6:98:b8:a4:
38:82:05:4a:d1:e4:98:10:db:1a:fd:a6:6f:db:63:
10:18:6b:d2:2d:e9:9b:d6:62:3b:1f:1e:04:4e:72:
b4:a2:81:f0:44:81:3b:72:fb:9c:03:e4:49:db:ba:
da:e1:94:aa:9b:2c:dc:67:97:61:e4:3a:cd:09:3e:
d7:5e:85:d5:e8:8f:26:2f:86:5d:ba:f0:74:cc:0b:
c5:dc:82:b3:ce:bd:c2:9d:2f:85:62:92:81:ae:f0:
07:67:18:41:13:a1:0d:0c:5f:70:b7:b1:c4:ff:4a:
d8:ad:8f:80:16:30:a5:55:5f:75:91:5a:e0:5d:d7:
21:b1:92:a8:72:a2:bc:4e:1e:03:67:8e:8f:5b:b9:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:83:BE:83:FF:9C:03:FF:C8:5F:64:DB:5A:EB:6F:30:C4:B8:E4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/23
Signature Algorithm: sha256WithRSAEncryption
79:6c:65:44:d4:a8:0b:40:8a:3b:b5:3a:83:51:c5:ab:53:a7:
5f:9a:0d:c6:e9:d4:75:2c:26:2d:54:9f:76:6d:22:d0:03:d2:
cd:8e:a5:75:97:11:6f:5f:76:26:78:49:99:c0:30:34:7f:b4:
eb:11:51:2f:c1:29:85:c4:86:c6:ac:e5:c5:4a:26:13:1c:9f:
93:5d:6f:c7:3f:34:3e:b3:cd:9e:53:c0:84:60:40:fb:a4:0e:
7d:0d:c1:86:5e:da:39:da:0f:74:90:fc:30:dd:d5:ee:1a:13:
b5:6b:fb:c5:02:89:4a:59:e8:b1:4d:0d:50:04:fc:7f:66:49:
11:ad:46:d9:de:e0:b7:d1:78:e4:57:c3:8f:f1:10:a3:d5:28:
65:d9:30:80:30:60:70:8c:17:2c:cc:c5:42:c4:af:d7:60:b5:
8e:a1:d2:00:d4:cb:5a:37:14:f1:6b:06:69:52:43:23:17:db:
c8:87:db:a3:7c:09:43:9e:76:af:41:39:c4:66:65:7e:39:e7:
6f:1f:8b:45:52:21:1e:d4:3c:28:a4:56:18:b6:4d:d6:2b:f9:
3d:b7:a6:e4:bd:42:8a:f1:1d:5b:c9:84:32:81:0f:d6:6f:44:
ea:f0:d5:0c:18:3f:96:8f:f8:ca:be:37:38:f8:f0:80:ea:df:
15:59:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:44:01 2025 by rpki-client