Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YJcyCZotiHTjz2Kcx_-2jMkDqy0.roa
File: YJcyCZotiHTjz2Kcx_-2jMkDqy0.roa (raw, json)
Hash identifier: m4k2o8vDgx/Ap3inBuLEY1wc4Uq5NHQiLj8EREE1a/8=
Subject key identifier: 60:97:32:09:9A:2D:88:74:E3:CF:62:9C:C7:FF:B6:8C:C9:03:AB:2D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0197396A4F09C76323D47525035B8748E198
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YJcyCZotiHTjz2Kcx_-2jMkDqy0.roa
Signing time: Wed 04 Jun 2025 05:29:17 +0000
ROA not before: Wed 04 Jun 2025 05:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50025
IP address blocks: 109.248.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:6a:4f:09:c7:63:23:d4:75:25:03:5b:87:48:e1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 4 05:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=609732099a2d8874e3cf629cc7ffb68cc903ab2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:c3:ff:68:12:d6:33:04:4e:fc:cf:bd:c7:
2a:ab:99:28:93:b2:88:76:ae:76:0f:7f:94:ee:9a:
7b:dc:90:0a:7c:17:0e:ff:6c:1c:fb:0f:e7:75:78:
34:79:04:6f:f8:69:c7:b4:fb:23:fb:ab:0d:1f:eb:
a5:33:76:3c:02:c4:10:a9:60:a9:e5:6f:72:38:a7:
50:8c:f9:a4:ab:f7:c5:a2:50:7d:32:00:01:44:9b:
bf:5e:2b:a4:e2:d4:de:a5:4e:1a:2a:df:ee:5b:86:
d1:f6:c7:ae:cf:4b:8b:75:77:fa:28:1a:70:55:20:
2a:fd:31:f9:23:da:e2:e3:92:ad:40:d8:0a:c0:57:
8e:5c:27:43:e9:94:c8:12:be:da:57:c3:cc:30:ba:
26:7b:d0:dd:19:ab:ea:bc:5b:0e:8c:17:78:c3:e9:
94:1c:b9:11:ff:41:a4:75:d3:83:7e:c1:d9:ab:4d:
f7:26:03:7a:ed:84:2f:48:b4:2f:8e:39:1c:0e:1a:
db:fc:a3:29:53:ad:65:d3:05:72:66:63:9f:60:17:
49:91:85:b0:7f:74:79:bf:b0:e4:f2:cb:9b:2e:81:
fc:c3:57:3e:c0:a7:fa:13:af:f7:57:ba:6d:2e:a3:
c2:bc:80:09:a1:f8:b5:5d:26:a3:f5:eb:50:78:4a:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:32:09:9A:2D:88:74:E3:CF:62:9C:C7:FF:B6:8C:C9:03:AB:2D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/YJcyCZotiHTjz2Kcx_-2jMkDqy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
59:47:3f:8e:19:da:ef:fd:2c:34:2f:06:e4:a2:fa:f4:3a:a2:
cd:da:90:e8:9a:ab:d7:62:b0:cc:04:67:88:77:cc:30:18:e0:
a3:4b:72:8a:60:0f:81:5e:97:cc:03:0b:66:ea:06:5d:4e:4c:
47:08:fe:bc:9a:f1:31:1c:6a:d5:c0:31:76:fc:56:f2:fa:73:
96:9c:27:ce:9d:1b:32:a5:6d:f3:ed:0c:56:2f:b9:8f:ca:e8:
7c:a4:f9:c9:71:2e:07:86:b1:67:b7:b6:7f:cd:6a:f7:b0:f8:
cd:a8:a1:82:64:45:a8:2a:44:07:66:39:e5:88:c4:a6:b2:c9:
e4:df:08:9c:2c:2e:1e:b3:08:c5:58:ee:ce:ab:fd:f7:51:34:
05:c5:8d:35:35:5a:dd:a9:72:40:bc:26:da:c0:48:86:7b:9a:
86:83:8e:b7:4a:6d:c6:6b:33:d1:7f:6d:6c:26:03:d0:f1:a6:
31:e3:4e:17:aa:81:28:51:4f:89:bb:af:ff:a1:d7:d0:57:c2:
dd:33:81:80:58:51:60:d3:7c:94:84:d0:d1:31:25:ab:7b:76:
4d:62:aa:b5:c6:fe:f9:ec:80:d1:ed:fa:fe:23:69:14:32:37:
0d:8f:55:91:6b:a5:b2:f8:57:29:b4:b7:5c:83:ca:e8:60:b7:
ee:af:32:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc5ak8Jx2Mj1HUlA1uHSOGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwNjA0MDUyOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDk3MzIwOTlhMmQ4ODc0ZTNjZjYyOWNjN2ZmYjY4Y2M5MDNhYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5fD/2gS1jMETvzPvccqq5kok7KI
dq52D3+U7pp73JAKfBcO/2wc+w/ndXg0eQRv+GnHtPsj+6sNH+ulM3Y8AsQQqWCp
5W9yOKdQjPmkq/fFolB9MgABRJu/Xiuk4tTepU4aKt/uW4bR9seuz0uLdXf6KBpw
VSAq/TH5I9ri45KtQNgKwFeOXCdD6ZTIEr7aV8PMMLome9DdGavqvFsOjBd4w+mU
HLkR/0GkddODfsHZq033JgN67YQvSLQvjjkcDhrb/KMpU61l0wVyZmOfYBdJkYWw
f3R5v7Dk8subLoH8w1c+wKf6E6/3V7ptLqPCvIAJofi1XSaj9etQeErsoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGCXMgmaLYh0489inMf/tozJA6stMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvWUpjeUNab3RpSFRqejJLY3hfLTJqTWtEcXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbfjcMA0G
CSqGSIb3DQEBCwUAA4IBAQBZRz+OGdrv/Sw0Lwbkovr0OqLN2pDomqvXYrDMBGeI
d8wwGOCjS3KKYA+BXpfMAwtm6gZdTkxHCP68mvExHGrVwDF2/Fby+nOWnCfOnRsy
pW3z7QxWL7mPyuh8pPnJcS4HhrFnt7Z/zWr3sPjNqKGCZEWoKkQHZjnliMSmssnk
3wicLC4eswjFWO7Oq/33UTQFxY01NVrdqXJAvCbawEiGe5qGg463Sm3GazPRf21s
JgPQ8aYx404XqoEoUU+Ju6//odfQV8LdM4GAWFFg03yUhNDRMSWre3ZNYqq1xv75
7IDR7fr+I2kUMjcNj1WRa6Wy+FcptLdcg8roYLfurzJ1
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:03 2025 by rpki-client