Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa
File: Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa (raw, json)
Hash identifier: rByHn6YmBo2+AfIQ5f6f0MI7t8+wl3rDT7243r2K7f4=
Subject key identifier: 63:3E:89:2B:5A:7C:9C:05:9A:E3:2B:C4:E9:22:AD:21:02:7F:57:57
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01941FFAB15E6F389FCCD1F9DAC587DA245B
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 45.156.20.0/24 maxlen: 32
91.190.152.0/24 maxlen: 32
193.28.186.0/24 maxlen: 32
194.36.208.0/24 maxlen: 32
194.113.209.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:5e:6f:38:9f:cc:d1:f9:da:c5:87:da:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633e892b5a7c9c059ae32bc4e922ad21027f5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:f0:ad:ee:cc:e3:e4:d3:8d:b6:e6:6d:ce:
3a:65:9a:3c:5e:c8:4b:5a:23:7c:ec:ec:df:d1:3a:
3e:ad:02:f4:91:30:a7:70:75:97:c1:7b:bc:33:eb:
92:90:ed:6f:2f:d6:ec:a6:f5:dc:9a:b6:7a:c0:7e:
a7:ab:10:5e:b6:5f:d0:0b:ac:7c:00:bd:03:df:fa:
b0:4e:ff:f8:8f:6d:4a:9d:8e:6a:cb:0c:a2:17:12:
ba:e3:74:5e:96:f1:ff:84:50:51:02:87:bc:e2:6b:
ca:be:21:2a:e8:39:b2:8f:00:e6:0d:ff:38:eb:90:
e9:18:19:d4:f0:03:6a:63:62:f4:3a:4a:a6:bc:f3:
df:6d:bc:41:50:b4:76:91:ef:67:a7:97:50:ab:a8:
08:cf:bb:b5:86:c6:e3:71:1f:2a:e9:1e:71:e6:d9:
8f:15:fc:83:97:f3:6c:15:85:14:e0:51:bd:f2:7e:
f2:a3:0c:07:c6:66:3c:5c:24:df:c2:71:1a:45:f5:
8b:c3:a2:e5:01:ca:36:68:fe:87:1d:e9:01:78:7d:
ae:00:77:e1:b7:48:e5:39:a3:ac:ae:89:3a:4e:00:
b6:53:79:15:43:f6:d0:d1:5c:73:21:26:0b:8f:2f:
f6:6b:60:de:6e:29:d5:06:52:33:c7:8e:23:92:68:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:89:2B:5A:7C:9C:05:9A:E3:2B:C4:E9:22:AD:21:02:7F:57:57
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.20.0/24
91.190.152.0/24
193.28.186.0/24
194.36.208.0/24
194.113.209.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9b:a1:0d:36:4f:e7:0c:6d:f4:81:b5:2a:12:4e:2e:a8:0e:
98:db:3a:7e:fb:5b:ad:88:0a:35:74:f4:a1:7f:00:93:0b:81:
15:89:8e:29:6e:39:63:b1:84:8f:17:aa:c9:a4:f2:61:68:ff:
4d:7d:fd:8b:99:ca:ce:7e:d6:d1:58:27:4a:91:cc:aa:6f:cc:
b9:6c:90:d5:51:bf:5c:d3:a0:aa:61:a2:86:00:c8:d7:86:f6:
1c:3b:89:2b:8f:af:a1:d1:f3:90:60:48:6b:7c:c3:52:16:f8:
58:5d:77:4e:f1:bf:4b:d1:a8:cd:02:c8:4a:82:1f:74:1b:4f:
81:54:f6:8d:c0:b2:f3:5f:56:eb:c8:72:e6:ef:46:9a:16:68:
6b:63:c1:b7:4a:e4:ef:1d:87:f3:14:72:c6:8f:f1:8c:d4:d3:
5b:51:d1:05:95:f7:57:f0:e4:7d:06:78:a7:25:d5:9a:37:a5:
dd:16:97:b2:a6:bf:ef:bd:dc:64:a4:a3:e2:d0:0e:31:d3:4b:
f2:5d:3e:23:0d:59:e3:28:00:19:af:67:39:81:52:4c:40:8b:
74:b8:33:7f:51:d0:6e:be:46:f4:e4:d1:76:36:b2:ca:e4:bf:
a4:09:b0:21:f4:d9:a8:f6:02:2b:a6:66:8b:16:de:60:21:63:
b5:ec:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:18 2025 by rpki-client