Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y36y0VyHhynI1M6D12Od33Ykw_E.roa
File: y36y0VyHhynI1M6D12Od33Ykw_E.roa (raw, json)
Hash identifier: cTQaqLocSqNXp6WbIleS9WKjFtP53ZF7kInDuQGOgMo=
Subject key identifier: CB:7E:B2:D1:5C:87:87:29:C8:D4:CE:83:D7:63:9D:DF:76:24:C3:F1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01974232D8F02F790A4A1199130B2DF3E888
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y36y0VyHhynI1M6D12Od33Ykw_E.roa
Signing time: Thu 05 Jun 2025 22:25:18 +0000
ROA not before: Thu 05 Jun 2025 22:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 74.112.156.0/22 maxlen: 24
89.106.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:32:d8:f0:2f:79:0a:4a:11:99:13:0b:2d:f3:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 5 22:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7eb2d15c878729c8d4ce83d7639ddf7624c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:89:e9:e6:d0:19:83:bc:80:e3:68:74:53:
f6:56:91:09:5b:b6:5f:78:70:3c:ab:cc:72:8c:2c:
1e:3d:44:82:26:ad:fc:58:a4:38:5b:b2:2f:1c:ad:
ca:c5:46:61:7f:c3:c5:5e:c1:c5:a9:70:8c:a7:37:
45:35:e1:1b:8a:cf:c9:a9:ac:3a:a4:5d:78:c5:3e:
66:f4:a6:16:be:c4:42:ec:9a:71:a3:5d:9a:32:e8:
b5:e7:39:2e:44:f9:85:c0:8e:fd:86:39:b5:3c:2f:
6b:9d:8e:d0:24:15:ed:02:9a:20:25:48:c1:01:9e:
21:79:09:aa:2e:7e:9f:bb:b9:15:2a:c4:ed:28:5a:
73:4e:e1:20:f2:98:ac:bb:81:7b:53:ec:0b:59:f1:
67:da:af:83:03:73:ba:51:9e:34:2e:03:b5:2e:91:
fd:95:37:63:11:2d:ef:e5:d5:82:55:39:cd:7d:8f:
2e:03:8c:54:50:13:3e:42:27:4d:ea:d0:b0:fe:9d:
c1:1a:33:3d:2c:a3:a4:b4:25:17:aa:fe:43:0c:81:
91:7f:9d:dd:c2:76:7d:9e:40:01:2e:e4:1a:b6:c8:
5e:46:e5:d3:62:85:fa:71:af:0b:63:0e:d4:30:b7:
37:9f:61:e8:17:97:c8:5f:ef:0b:5a:be:e0:5b:65:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:B2:D1:5C:87:87:29:C8:D4:CE:83:D7:63:9D:DF:76:24:C3:F1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y36y0VyHhynI1M6D12Od33Ykw_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.156.0/22
89.106.28.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:6d:df:70:1a:5d:13:8a:08:04:05:a8:81:c8:26:ad:6b:e7:
30:a6:ee:56:33:da:27:8e:c4:fe:f8:93:3b:50:7e:75:cf:a9:
0b:57:87:94:a9:99:c0:16:40:61:60:f9:52:b1:e0:b9:be:9f:
63:70:ac:e7:6b:c9:b5:f2:98:1c:9b:d5:38:de:76:f0:3c:34:
04:ab:66:e0:a6:a1:50:ca:1d:14:9d:0a:db:f2:d8:ea:70:8b:
b5:11:f3:45:4a:41:49:03:4a:8a:50:98:d5:8c:6a:ba:ae:70:
ec:70:e3:43:c5:a6:b9:d2:11:36:97:63:28:87:9e:73:cd:a4:
c9:3d:9b:44:bc:4a:1c:32:6d:fb:fb:78:1e:c5:98:1d:79:01:
6a:3f:c1:9e:07:b0:a9:ff:46:8a:66:26:b2:10:d2:e1:86:b8:
86:8a:2a:ba:62:cb:a8:5f:13:e7:53:e4:90:1c:42:6d:5f:2e:
ab:f9:78:37:82:01:ef:fb:37:62:f5:6b:d2:c9:8e:1b:e8:68:
6e:ee:f9:17:7f:2c:57:bd:74:32:60:f8:cc:80:14:9f:84:76:
14:ff:fb:43:f9:cb:d5:38:27:ed:b7:b9:da:15:e9:79:70:6e:
6e:c3:76:9f:95:13:50:db:49:7b:2a:bf:59:cc:76:af:55:de:
9c:07:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:43:04 2025 by rpki-client