Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/Y-7q9kMx7K8cMciXy89it_JnTm4.roa
File: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (raw, json)
Hash identifier: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=
Subject key identifier: 63:EE:EA:F6:43:31:EC:AF:1C:31:C8:97:CB:CF:62:B7:F2:67:4E:6E
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019427B4AD776BFFDD52A573D5ABAA459343
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/Y-7q9kMx7K8cMciXy89it_JnTm4.roa
Signing time: Thu 02 Jan 2025 15:48:59 +0000
ROA not before: Thu 02 Jan 2025 15:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49244
IP address blocks: 193.203.104.0/24 maxlen: 32
2a12:c080::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:ad:77:6b:ff:dd:52:a5:73:d5:ab:aa:45:93:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Jan 2 15:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63eeeaf64331ecaf1c31c897cbcf62b7f2674e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:25:f3:ab:c2:95:1e:1b:e9:f2:c5:a1:7f:
8b:ff:95:4f:c9:9e:04:7b:bd:31:b4:cf:4a:b5:10:
d0:c7:78:69:8f:07:0c:f5:3a:c0:35:dd:71:8a:c0:
0d:2e:43:43:73:76:91:cf:38:65:8a:92:a0:aa:2a:
6f:eb:12:d1:53:08:53:8f:3a:61:1f:96:6e:14:2e:
af:93:bb:12:85:ed:cd:51:27:7d:ad:67:7b:6e:7f:
d4:be:a5:6f:35:21:31:d7:7c:60:fb:97:1d:e8:6a:
4b:17:66:75:ff:f4:d5:d9:11:ef:c8:bd:61:b7:f7:
72:bc:f0:fe:d5:53:9e:16:9e:db:8d:4f:75:d9:b3:
45:39:36:6f:20:36:5c:65:90:14:aa:c0:00:53:2a:
0d:c5:d3:f4:b2:06:15:c3:b1:83:72:62:6b:2e:40:
ca:72:2f:91:b2:ba:95:b4:52:8a:04:79:57:52:ff:
e0:de:4a:72:7f:52:db:c7:bf:52:c8:75:30:a5:84:
3a:05:f1:4b:5b:54:ac:61:84:05:70:00:93:8d:6f:
da:f7:48:22:f9:a2:16:fb:f2:09:bc:ea:93:88:47:
1e:92:87:c4:00:f1:09:1b:af:9c:0f:5f:55:81:f4:
7b:b3:df:c8:91:c6:20:b5:24:4a:2b:ae:64:e2:df:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:EA:F6:43:31:EC:AF:1C:31:C8:97:CB:CF:62:B7:F2:67:4E:6E
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/Y-7q9kMx7K8cMciXy89it_JnTm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.104.0/24
IPv6:
2a12:c080::/29
Signature Algorithm: sha256WithRSAEncryption
1b:28:90:49:7b:83:66:6e:69:7b:96:72:cd:90:55:d6:b4:2a:
50:fe:b9:ca:3c:ab:c7:8d:25:97:b6:5e:ed:34:4a:ce:50:e8:
d6:4a:d8:8c:23:65:9e:df:04:16:6a:35:ac:4c:e7:6e:64:95:
b5:94:94:f9:a9:b0:76:ef:0c:1e:de:53:fa:83:f7:c0:55:45:
ee:3a:fc:21:b7:20:6d:74:b1:fd:de:75:4f:61:00:fd:07:5d:
90:a4:76:6b:ff:b6:2c:ac:a3:de:fc:c5:0e:12:89:f7:97:fd:
20:34:3d:26:cb:ca:e0:a9:ca:60:46:df:a3:f0:ec:e8:2f:bb:
19:fd:6d:d2:a2:c2:d5:07:a4:f5:b3:99:24:be:ba:e7:96:d4:
f7:84:83:be:2b:f9:ed:fc:52:0b:46:4e:97:29:38:ec:0d:de:
a3:41:b4:f4:ba:a3:41:32:cd:2b:91:0b:2f:12:47:1b:73:ce:
48:7d:f1:f9:a5:e9:02:4e:f8:e0:be:09:b6:79:d6:69:94:ce:
a7:61:9d:b1:b5:25:df:5c:72:0d:0b:4c:9d:88:5a:51:00:04:
bc:a6:ae:2b:9a:99:84:2b:e5:71:fe:17:28:d7:cd:e3:dd:9c:
27:5d:d0:ae:d9:a8:72:52:da:e4:de:95:d0:3e:bc:56:05:56:
9d:ca:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:05 2025 by rpki-client