Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/wYF_ylL7pnBo9OaIzACNhn9RjFU.roa
File: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (raw, json)
Hash identifier: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=
Subject key identifier: C1:81:7F:CA:52:FB:A6:70:68:F4:E6:88:CC:00:8D:86:7F:51:8C:55
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01966288BE491203EFD6A840FF8FF886065F
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/wYF_ylL7pnBo9OaIzACNhn9RjFU.roa
Signing time: Wed 23 Apr 2025 12:04:10 +0000
ROA not before: Wed 23 Apr 2025 12:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210012
IP address blocks: 185.249.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:88:be:49:12:03:ef:d6:a8:40:ff:8f:f8:86:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Apr 23 12:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1817fca52fba67068f4e688cc008d867f518c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:7f:ff:c1:2b:f7:60:72:4c:59:9b:95:20:
7b:44:af:43:1d:2d:e5:43:e4:a7:a0:ce:51:b6:33:
1f:6f:a7:c2:e6:69:8c:00:2e:8d:29:68:e9:c8:6c:
32:86:1c:46:1e:96:80:f4:47:41:fb:0b:43:f7:35:
d5:8e:f6:61:71:8f:36:c9:c4:85:f3:ef:2b:e0:39:
f9:c7:0d:47:82:2a:c3:83:13:2d:2b:61:43:df:2f:
ff:c9:2e:48:a9:47:b6:63:fc:ca:e3:39:00:78:65:
91:e9:9c:c1:5d:a6:cb:67:f9:49:f1:68:57:d9:d1:
e9:fc:ec:bb:e1:29:be:ee:d7:2f:1f:b9:36:61:8f:
3e:e7:05:39:cb:8b:6c:fd:10:77:c4:36:b7:28:ed:
09:75:5c:60:69:cb:f8:b7:89:a8:67:a6:f8:5e:3f:
f6:de:d4:44:29:0d:46:27:64:07:da:e9:dd:e6:ac:
0b:3d:fd:29:34:81:37:b7:d9:6e:93:17:13:0c:61:
bc:f2:da:ca:2c:f3:2a:75:15:7b:d6:65:da:64:fb:
70:51:a7:73:41:59:a8:57:bb:82:99:89:40:5d:d1:
d1:7b:ff:27:dc:d7:d0:af:7c:d2:b1:d5:63:7f:52:
df:ec:7a:e5:bc:96:35:7a:87:9b:8e:d1:b2:90:ae:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:7F:CA:52:FB:A6:70:68:F4:E6:88:CC:00:8D:86:7F:51:8C:55
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/wYF_ylL7pnBo9OaIzACNhn9RjFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:03:c4:b6:0b:08:13:73:34:3b:c5:d5:6c:fe:74:26:62:f2:
01:6f:03:c3:d9:b0:5a:96:d6:48:7b:bb:62:a3:fe:df:09:53:
d6:b4:bc:61:ad:13:f5:33:72:d3:9e:4c:35:83:3c:4b:c0:8a:
06:9c:0d:60:3d:2c:09:8e:5e:9f:26:f2:c5:07:0e:b0:37:91:
51:35:0d:c9:04:41:45:f1:39:ff:4e:18:91:fa:7f:30:3d:3b:
af:9f:03:6d:ae:b4:6f:9a:35:f3:26:e2:c0:78:50:6d:a5:1e:
00:0f:37:b8:fa:aa:63:a4:25:62:04:24:6b:ee:be:bd:51:dc:
c6:73:97:80:5f:0e:84:4f:35:4c:dd:f9:3f:36:c3:7b:e4:54:
fa:c1:64:a6:cf:5a:4c:78:71:68:cc:aa:18:57:b6:62:26:c7:
1b:08:4f:76:eb:ef:86:5a:9f:b3:69:65:67:ee:02:d1:75:35:
b4:18:b5:14:c5:a7:d1:22:18:56:05:88:d5:87:d2:da:e7:20:
cc:58:97:53:a5:9b:dc:32:82:85:e9:22:b4:01:2f:a0:16:1d:
dd:03:d5:11:19:23:e5:dd:f3:fa:5f:66:4f:8f:d9:b8:a4:c8:
39:8f:f5:d3:fe:d5:8f:c2:ef:52:f5:5b:7a:98:c9:17:67:f4:
e7:f7:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:16:58 2025 by rpki-client