Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa
File: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (raw, json)
Hash identifier: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=
Subject key identifier: 63:AC:78:5F:B9:A5:EE:00:57:FF:F5:E0:0F:2E:8C:F6:6F:32:FD:F3
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019421B1A044CBB19FF57D17556FDF62C864
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24933
IP address blocks: 185.44.32.0/22 maxlen: 22
2a04:9880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a0:44:cb:b1:9f:f5:7d:17:55:6f:df:62:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63ac785fb9a5ee0057fff5e00f2e8cf66f32fdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:e3:31:9f:d9:87:f6:60:40:7f:b1:4e:c9:
1d:68:b3:4a:f9:f9:af:f4:07:52:62:9a:78:b3:af:
72:a0:48:48:98:ff:85:16:88:c6:bb:13:cb:14:74:
78:f4:e8:01:fa:1e:62:93:66:d4:84:10:16:7f:53:
f9:c2:50:67:78:b2:55:f8:b3:5e:36:7b:95:4f:14:
ff:47:be:6a:26:46:f3:77:6e:48:10:d6:da:47:f8:
cd:95:31:5f:9f:41:ec:44:d5:35:3d:c8:81:fd:96:
3e:3b:de:7b:9e:9e:8a:78:ed:04:64:d8:6a:33:6d:
ff:f6:e5:2b:57:c0:98:d5:7c:50:c1:c1:21:f6:6d:
88:1f:8f:30:87:cb:7b:2d:1a:2d:de:c0:f6:fc:4d:
0c:0d:7c:71:dd:11:8b:e7:46:ef:b4:56:aa:41:86:
57:bb:7c:59:fb:d9:aa:53:b8:38:f4:00:52:c7:a1:
ff:18:44:c0:8a:31:5e:da:c3:8d:9e:e0:f7:29:3b:
05:e8:e9:bc:b4:63:c5:e5:56:43:28:0a:e3:c4:cc:
b3:a6:31:eb:4b:54:61:56:90:04:7f:71:93:10:f1:
fb:c3:2a:0f:32:cc:ef:cd:09:5f:a7:cc:7c:53:a5:
af:33:4b:30:7d:57:76:6f:ca:62:4f:87:d8:2e:2e:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:78:5F:B9:A5:EE:00:57:FF:F5:E0:0F:2E:8C:F6:6F:32:FD:F3
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.32.0/22
IPv6:
2a04:9880::/29
Signature Algorithm: sha256WithRSAEncryption
2c:01:2d:da:5c:0b:6e:dd:51:37:68:13:64:a9:84:5c:9c:79:
64:0b:46:56:18:a8:e4:c4:f4:34:ae:54:0f:38:7d:ad:a2:29:
dd:2f:17:59:22:19:12:ab:cd:12:82:42:e3:26:e0:52:d9:01:
57:92:e6:4c:e4:7d:c6:4d:fa:c7:50:3c:d5:38:e9:ae:c5:1c:
43:f7:d1:29:5a:41:76:3c:99:f4:a1:73:b9:80:b4:dd:a4:cf:
72:e6:6c:d3:db:1c:ff:63:af:4b:26:a8:13:e5:59:b1:d6:e9:
e1:50:48:41:6d:af:8c:28:86:af:f5:3d:97:bf:06:f7:1e:ad:
4a:71:1f:70:19:62:1c:94:8d:94:3d:7d:d1:96:c9:bc:1e:c5:
5d:28:84:fc:4b:b4:3b:b1:b4:2c:75:fe:9b:ce:1f:e7:3a:2f:
4c:ca:9a:b0:07:f3:e1:10:80:67:4b:36:3e:85:0f:37:4a:bb:
62:96:7f:70:60:d0:bc:06:0b:0c:57:da:8f:2b:d6:56:27:d5:
7d:ca:39:69:52:6c:56:cc:9a:7b:ac:f9:c1:d0:82:43:8c:e4:
df:db:b4:dc:c2:c0:fb:aa:97:01:1f:44:99:51:4d:d8:11:29:
67:d2:f2:2a:7c:ce:51:75:9b:7d:80:93:c3:1d:8b:75:cc:bf:
26:c5:64:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhsaBEy7Gf9X0XVW/fYshkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2FmNzlkYTVmMmI2ODk4NmM4MzU2NDYwYTQzZmE0MmQz
N2YzYTYwHhcNMjUwMTAxMTE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2FjNzg1ZmI5YTVlZTAwNTdmZmY1ZTAwZjJlOGNmNjZmMzJmZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTzjMZ/Zh/ZgQH+xTskdaLNK+fmv
9AdSYpp4s69yoEhImP+FFojGuxPLFHR49OgB+h5ik2bUhBAWf1P5wlBneLJV+LNe
NnuVTxT/R75qJkbzd25IENbaR/jNlTFfn0HsRNU1PciB/ZY+O957np6KeO0EZNhq
M23/9uUrV8CY1XxQwcEh9m2IH48wh8t7LRot3sD2/E0MDXxx3RGL50bvtFaqQYZX
u3xZ+9mqU7g49ABSx6H/GETAijFe2sONnuD3KTsF6Om8tGPF5VZDKArjxMyzpjHr
S1RhVpAEf3GTEPH7wyoPMszvzQlfp8x8U6WvM0swfVd2b8piT4fYLi6TjwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGOseF+5pe4AV//14A8ujPZvMv3zMB8GA1UdIwQY
MBaAFIx6952l8raJhsg1ZGCkP6QtN/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3Mjkt
YmNlZGJiZDZlNTc0LzEvWTZ4NFg3bWw3Z0JYX19YZ0R5Nk05bTh5X2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3MjktYmNlZGJiZDZlNTc0
LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSwgMA0E
AgACMAcDBQMqBJiAMA0GCSqGSIb3DQEBCwUAA4IBAQAsAS3aXAtu3VE3aBNkqYRc
nHlkC0ZWGKjkxPQ0rlQPOH2toindLxdZIhkSq80SgkLjJuBS2QFXkuZM5H3GTfrH
UDzVOOmuxRxD99EpWkF2PJn0oXO5gLTdpM9y5mzT2xz/Y69LJqgT5Vmx1unhUEhB
ba+MKIav9T2Xvwb3Hq1KcR9wGWIclI2UPX3Rlsm8HsVdKIT8S7Q7sbQsdf6bzh/n
Oi9MypqwB/PhEIBnSzY+hQ83Srtiln9wYNC8BgsMV9qPK9ZWJ9V9yjlpUmxWzJp7
rPnB0IJDjOTf27TcwsD7qpcBH0SZUU3YESln0vIqfM5RdZt9gJPDHYt1zL8mxWSU
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:13:41 2025 by rpki-client