Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/YkiiV0RDHFC-BUQDCVg59T2UUOg.roa
File: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (raw, json)
Hash identifier: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=
Subject key identifier: 62:48:A2:57:44:43:1C:50:BE:05:44:03:09:58:39:F5:3D:94:50:E8
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 019423D738692680714EB570D2861F937AF3
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/YkiiV0RDHFC-BUQDCVg59T2UUOg.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 91.198.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:38:69:26:80:71:4e:b5:70:d2:86:1f:93:7a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6248a25744431c50be054403095839f53d9450e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:50:2d:33:a0:9b:4b:34:3c:90:f8:7b:0a:
4a:61:58:05:16:7e:7b:b4:13:01:f2:3e:b1:26:e4:
eb:bd:6a:b6:fe:ba:a4:45:b6:52:cb:24:8c:90:21:
97:55:8e:d9:ff:1a:4d:8b:7b:79:42:7b:3e:f0:cc:
e8:c8:10:62:14:aa:23:f5:db:3c:1c:d7:e9:a9:ab:
53:5c:f5:fa:8f:77:71:77:28:94:06:ba:1d:f8:38:
52:f5:85:55:f0:05:6b:d5:6d:17:67:3f:65:98:79:
ad:4a:4d:a7:ca:07:5d:6e:07:14:76:c8:9a:fe:cd:
2c:27:a7:ed:0b:45:dd:fa:a4:a9:62:f9:74:ca:40:
b4:2a:b2:59:52:c5:99:bf:f4:aa:ae:d6:7d:05:1b:
05:10:1f:b3:b5:8e:21:93:8f:72:c7:67:3e:10:5c:
4c:54:e6:be:0b:78:c1:fe:48:04:65:e8:e7:05:11:
e5:04:30:7a:b5:79:95:f3:96:72:8e:4f:eb:11:2e:
5e:30:8e:92:b3:72:30:d6:48:ca:70:cc:1e:ec:d9:
80:f0:49:85:2c:e0:58:d0:05:37:26:ff:09:8b:89:
41:17:a7:55:08:5e:77:2f:48:f8:30:5e:5c:c0:2a:
2e:da:e7:6d:56:6f:ea:8f:9c:17:15:69:5c:bd:6e:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:A2:57:44:43:1C:50:BE:05:44:03:09:58:39:F5:3D:94:50:E8
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/YkiiV0RDHFC-BUQDCVg59T2UUOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a5:9c:a4:a7:b5:1f:ce:72:82:81:36:44:8d:4b:a9:18:97:
1c:f6:85:a7:9c:94:f8:6b:ee:ba:e9:1b:c5:1c:e8:c3:84:72:
84:27:83:38:1b:a7:3d:cb:b0:8b:d7:c6:58:d9:f8:dc:2b:96:
04:0d:1d:7f:43:6d:c0:81:f7:ba:03:29:ff:a8:10:71:b7:75:
9b:d7:33:f9:aa:aa:1d:28:e0:e2:88:1c:0d:66:74:ac:e3:6c:
2e:73:13:63:e6:01:bd:89:e8:c1:fb:c0:bc:dc:cd:3f:a4:44:
b3:2d:77:5d:b0:7a:66:79:ce:69:81:26:4f:af:7e:99:ff:6c:
bc:11:06:d2:53:db:0e:57:23:3b:38:18:23:c3:13:4e:59:7d:
d9:d8:89:c0:6d:d7:c0:b7:32:1a:20:bf:2c:76:4f:b4:25:17:
9f:01:7f:5b:e3:2e:41:c3:b2:3a:05:a9:97:7e:dc:1b:59:56:
af:b1:e1:17:e1:b6:be:d0:22:db:1b:a3:a0:9d:11:e8:8e:d3:
83:f2:c9:ba:7b:74:09:76:e7:63:21:14:b1:ab:35:50:e4:d3:
25:a4:e8:2a:02:a5:b3:82:f0:1a:4e:36:01:78:2d:a5:3e:14:
d7:c9:7b:af:c2:9c:86:b5:b8:86:0b:0f:f0:9f:0b:91:fe:c1:
8f:8c:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:19 2025 by rpki-client