Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4YmuD4CM5GoM5mNZv2Z-ds0bfZA.roa
File: 4YmuD4CM5GoM5mNZv2Z-ds0bfZA.roa (raw, json)
Hash identifier: V+LoJ35grMxzbDO4Oll9tA0gwpzWKojE+IT5JnBCpkc=
Subject key identifier: E1:89:AE:0F:80:8C:E4:6A:0C:E6:63:59:BF:66:7E:76:CD:1B:7D:90
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195F6886A4EE752C5C825794F8D32DB1A22
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4YmuD4CM5GoM5mNZv2Z-ds0bfZA.roa
Signing time: Wed 02 Apr 2025 12:44:50 +0000
ROA not before: Wed 02 Apr 2025 12:44:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 79.172.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:88:6a:4e:e7:52:c5:c8:25:79:4f:8d:32:db:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 2 12:44:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e189ae0f808ce46a0ce66359bf667e76cd1b7d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:52:c4:de:94:36:9b:1e:bd:56:12:09:33:
cd:6e:72:7a:ea:11:36:69:f3:64:78:eb:f3:20:ca:
89:2d:42:f0:e7:4f:dc:b2:bd:e3:ad:29:13:38:63:
85:26:86:ae:6d:5d:3d:5a:df:bf:3b:3e:66:ba:d2:
46:23:fb:df:f9:04:89:d2:fa:c0:53:c4:8a:40:15:
ea:d1:58:60:30:8a:af:2d:8a:1c:2e:67:cc:04:7f:
06:df:51:54:23:5c:90:93:c1:93:72:11:fa:da:8a:
09:00:6d:18:85:2f:03:ad:d7:c0:d9:d2:ba:7f:0c:
ff:dd:64:ea:bf:6a:81:31:b8:08:43:cf:e4:4b:47:
21:d4:34:90:3a:ba:e6:31:91:89:8d:27:00:28:34:
a4:45:22:3e:64:9c:76:eb:5b:42:65:bb:b4:81:af:
fa:e3:26:38:08:01:a3:d1:af:f7:c5:36:d0:84:c8:
83:3e:97:18:19:ca:df:d6:5c:a8:a4:f9:4d:56:78:
d3:9e:07:48:b6:19:bd:55:84:f0:1b:bc:6b:0f:d0:
b2:9c:04:3e:78:eb:5e:e7:67:43:41:05:bb:21:dc:
d2:77:03:95:22:27:73:ee:55:23:2a:f1:a7:70:b7:
68:c3:11:5e:78:64:32:ce:d0:ae:ef:9b:09:32:40:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:AE:0F:80:8C:E4:6A:0C:E6:63:59:BF:66:7E:76:CD:1B:7D:90
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4YmuD4CM5GoM5mNZv2Z-ds0bfZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.254.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e6:5f:94:03:bb:f7:63:1e:00:0a:91:92:b0:72:5e:19:44:
9a:58:5e:85:36:ac:d6:a4:b9:d4:b3:7c:7e:96:c5:f5:dd:47:
ea:c7:ef:eb:a2:80:6e:c2:ab:da:52:12:78:3a:98:c7:82:e6:
51:82:6f:b2:95:05:64:d5:c1:fc:ed:14:20:75:6f:28:ab:07:
3f:f5:a5:75:40:49:2d:8b:0d:b0:cb:37:f0:7e:63:37:e9:5f:
66:7b:91:f2:f4:f3:63:79:50:61:5a:a1:8e:3b:d3:d4:30:10:
34:6b:2a:05:3a:51:1b:53:98:e9:50:ec:e9:2e:4d:53:de:45:
7f:d2:eb:20:79:ed:25:df:3d:28:8f:23:97:f7:59:24:e4:2b:
a3:ea:6d:24:14:64:27:8e:e4:96:53:d4:50:b7:a1:57:2f:26:
18:6b:be:d4:7f:bb:a5:a1:05:94:16:25:14:37:aa:47:1f:6d:
8e:b5:73:76:23:f1:4b:c7:9b:13:38:16:bf:92:a9:4c:09:21:
0d:43:e8:0d:19:07:8d:c4:63:f9:6b:19:32:4b:c6:80:43:18:
d4:e9:65:cd:4b:db:df:f0:f6:53:32:5b:a3:1e:bd:97:eb:29:
6d:80:58:0c:56:9e:62:18:94:00:b4:2b:e8:d1:83:4e:cd:f0:
38:e5:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:53:53 2025 by rpki-client