Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yxRSfxGFcJIa8ffdbZ9g0mH-Fb4.roa
File: yxRSfxGFcJIa8ffdbZ9g0mH-Fb4.roa (raw, json)
Hash identifier: FFxtXSJ+YpMD3iO7sAPHCzivau9+E52vsrOXY8IAZow=
Subject key identifier: CB:14:52:7F:11:85:70:92:1A:F1:F7:DD:6D:9F:60:D2:61:FE:15:BE
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0194F4991D58D249D4CAAFAB56FAF70F0958
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yxRSfxGFcJIa8ffdbZ9g0mH-Fb4.roa
Signing time: Tue 11 Feb 2025 10:41:02 +0000
ROA not before: Tue 11 Feb 2025 10:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 213.220.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:99:1d:58:d2:49:d4:ca:af:ab:56:fa:f7:0f:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 11 10:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb14527f118570921af1f7dd6d9f60d261fe15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:45:74:a5:5d:1e:2c:fc:01:aa:d2:80:be:
f4:bf:41:fe:1d:b6:d3:3d:36:ce:24:18:77:33:a8:
dc:59:bf:88:0c:71:8f:a2:c3:fa:59:d7:2b:91:0a:
5a:a4:df:71:d6:6d:db:e7:1e:ac:b9:04:9f:68:fa:
c6:b9:16:81:cf:93:9f:02:b7:11:0f:ec:98:50:58:
91:e4:68:2e:df:b3:03:4a:fc:10:25:a3:5d:f4:6f:
bf:62:e5:c1:c1:bd:68:e5:f0:68:e9:d8:9e:2e:0b:
07:99:8e:d0:a2:15:38:16:87:c4:46:f8:2b:f2:83:
02:98:84:c1:d9:80:4d:8a:d0:bb:b0:92:68:6d:64:
e9:81:4e:81:f1:74:69:76:5c:9f:76:76:00:bb:42:
7e:4e:dc:35:c4:0f:bf:d2:35:12:c8:74:31:6c:04:
19:58:44:2a:df:fe:ca:e5:01:93:c5:0a:d1:47:61:
81:ee:66:a6:0c:83:1b:0b:d9:b9:ed:cf:94:e9:79:
a6:a5:09:32:cc:38:be:44:78:82:8d:7f:07:93:6c:
8c:53:b4:f1:28:c5:10:40:5d:fe:f5:27:2f:93:24:
a7:eb:23:0d:f5:3c:03:5e:3e:67:65:42:46:50:c3:
c1:c1:08:e5:96:81:3e:b3:fa:06:12:88:ac:c9:fd:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:52:7F:11:85:70:92:1A:F1:F7:DD:6D:9F:60:D2:61:FE:15:BE
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yxRSfxGFcJIa8ffdbZ9g0mH-Fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7d:ce:12:08:9d:34:4c:ea:97:8e:aa:ba:b9:6a:02:eb:6d:
38:29:ab:4d:46:0a:3b:c4:76:58:e2:47:ea:13:10:d1:e5:2c:
69:51:bc:7b:c2:54:6a:a6:15:16:ed:28:9e:db:56:3f:dd:77:
a8:19:8e:ea:2e:96:29:ac:71:ac:6c:e1:ae:bf:e0:8b:d3:f9:
da:5c:19:93:0e:62:fb:20:f3:b8:78:6e:12:60:3c:5d:68:7b:
bf:11:89:7f:dc:ea:68:4d:a7:75:96:6a:0c:ee:0d:7e:79:18:
39:9b:34:fd:13:e5:fc:27:39:70:7c:e7:ce:ed:df:c7:86:41:
6d:8e:3d:56:e4:b3:92:2a:81:29:88:da:ee:8e:e0:a6:bf:df:
83:bd:51:6a:e1:52:97:81:a3:3a:c3:ee:25:59:04:10:c2:67:
db:91:8e:c9:25:8b:5d:a0:a4:20:4d:9b:ad:1f:0c:9e:d0:7b:
1e:53:65:0e:08:0c:f3:f2:ba:f6:b3:f0:ad:1c:30:c3:cd:db:
61:c1:8c:ec:58:00:7b:6e:cc:4d:45:c1:26:dc:3f:d0:f3:7a:
a8:0a:3c:87:e9:44:dd:00:fa:9f:a5:75:51:58:cf:d0:30:71:
e9:e0:25:df:63:de:0f:7f:4e:be:2f:19:6a:30:8c:63:10:41:
d1:dd:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:10:07 2025 by rpki-client