Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/YUQVyrq4PHervTbSyhk_DAk9Eqc.roa
File: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (raw, json)
Hash identifier: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=
Subject key identifier: 61:44:15:CA:BA:B8:3C:77:AB:BD:36:D2:CA:19:3F:0C:09:3D:12:A7
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 01942369A54A087F1ADD0D459C108DE16686
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/YUQVyrq4PHervTbSyhk_DAk9Eqc.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215770
IP address blocks: 91.238.217.0/24 maxlen: 24
2a14:6280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a5:4a:08:7f:1a:dd:0d:45:9c:10:8d:e1:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=614415cabab83c77abbd36d2ca193f0c093d12a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:fa:9d:5f:94:11:d5:00:56:40:db:ca:74:
70:18:66:2b:66:43:f9:f1:a0:88:1a:e1:03:72:9a:
c1:bb:28:db:36:73:db:d8:3d:39:0e:ea:3f:ca:60:
9d:2a:66:d5:1d:62:97:f1:d3:b8:a8:9d:98:07:c6:
0e:d8:d5:25:55:f3:33:09:97:08:a1:52:25:35:9f:
7c:34:78:05:20:c5:10:69:4f:11:39:ba:a8:4f:7c:
9b:c7:08:8c:79:d9:5c:3c:40:aa:66:2e:68:05:d2:
ac:43:c6:dc:2f:3d:6f:9d:63:55:44:92:f7:e6:13:
8d:d8:97:15:eb:40:9e:d7:82:bb:5d:01:44:77:bf:
4c:f1:5d:ea:64:2e:9a:9a:23:3a:f2:b6:32:01:22:
4e:45:d9:05:e6:9c:bf:0a:34:a4:2b:eb:b7:69:45:
a3:78:e5:09:34:20:4c:da:26:79:aa:60:8d:29:5b:
b7:d5:ef:0d:92:f0:6b:54:32:40:5f:46:5c:8b:a4:
2c:a5:58:13:fd:9b:9a:dd:7b:62:d8:f6:9e:8a:10:
90:3b:fd:24:c3:29:f2:57:4c:3b:ef:f4:ba:48:f7:
25:54:08:59:ba:79:e7:92:e3:df:6f:c8:49:70:a6:
c9:11:4f:60:20:84:60:67:a8:0a:e6:ef:d6:0b:1c:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:15:CA:BA:B8:3C:77:AB:BD:36:D2:CA:19:3F:0C:09:3D:12:A7
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/YUQVyrq4PHervTbSyhk_DAk9Eqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.217.0/24
IPv6:
2a14:6280::/29
Signature Algorithm: sha256WithRSAEncryption
7e:6e:a7:fc:2b:93:32:e6:9e:7b:21:18:d5:18:05:0c:42:5a:
41:30:c4:ca:d3:96:03:4b:e3:b4:dc:40:56:73:ac:cb:ca:f8:
3d:7d:02:29:05:6f:f5:90:81:31:de:c1:da:54:9a:c7:e6:49:
52:06:e7:fe:6b:7a:db:39:51:d3:df:e5:5f:3a:4c:8c:a0:b4:
85:76:42:a7:91:04:84:b8:20:b9:0b:ab:c4:0a:f5:00:57:28:
15:e2:ed:53:8f:4c:01:d8:29:90:9f:79:96:22:71:41:8a:38:
e9:37:69:cf:1d:e9:e7:c4:c7:b4:f4:22:ff:b0:20:92:b5:0e:
48:83:5b:b2:36:24:c9:14:a8:c0:7f:e2:88:57:61:6a:75:96:
70:19:dd:89:eb:46:a4:da:6b:b5:90:ca:7c:5a:9c:da:01:1c:
f8:6e:bc:00:ce:a6:ea:78:3b:f9:5b:7f:ec:75:be:b1:79:3e:
2e:41:0b:a7:af:d0:1b:d0:7b:68:02:24:63:38:c7:de:46:1e:
6c:75:9f:58:9b:af:ad:e1:21:fd:1b:57:de:ac:ae:ee:97:82:
22:6d:70:e9:4d:8f:bd:05:f4:d6:1f:3c:b5:79:12:2a:c0:5a:
82:65:b4:5e:dd:ae:3f:f1:00:fc:c8:35:9c:89:ed:ba:c3:74:
5e:c1:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:14 2025 by rpki-client