Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YYRunzU00lfTZedGDKZRLYH7qfE.roa
File: YYRunzU00lfTZedGDKZRLYH7qfE.roa (raw, json)
Hash identifier: Tz6Mn3bLsJcRUyBtr0Fp1yUrHFxxa3aSAUgPUHv7Yow=
Subject key identifier: 61:84:6E:9F:35:34:D2:57:D3:65:E7:46:0C:A6:51:2D:81:FB:A9:F1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0196686E7126DC1E8BB840E6F544784FD639
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YYRunzU00lfTZedGDKZRLYH7qfE.roa
Signing time: Thu 24 Apr 2025 15:33:10 +0000
ROA not before: Thu 24 Apr 2025 15:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 178.173.232.0/22 maxlen: 24
188.253.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:6e:71:26:dc:1e:8b:b8:40:e6:f5:44:78:4f:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 24 15:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61846e9f3534d257d365e7460ca6512d81fba9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:34:62:29:6a:61:3a:54:b4:80:bd:77:06:
cf:47:d3:f4:14:f6:d2:5a:f2:34:7f:8d:65:2f:ee:
7c:a6:17:4a:2e:1e:1f:66:35:58:a2:cc:cf:80:14:
43:d4:f3:67:df:10:58:77:c6:17:e9:da:8d:1a:98:
27:36:5d:68:7a:5a:7d:f4:b1:28:18:cc:b8:1a:6b:
d6:bb:8a:59:c9:62:09:6c:f5:35:f4:28:98:c7:46:
31:ee:9d:e7:25:36:50:5b:ab:4b:be:86:81:e6:6a:
ae:cb:c9:70:8b:a6:77:e2:f9:eb:e6:3e:74:bd:2d:
89:5d:41:50:fa:09:a6:8c:bb:f2:e8:26:56:00:9d:
cc:c3:9c:2a:f8:ec:66:10:fe:55:68:f9:37:d9:ee:
52:d6:2a:28:27:15:30:a2:7c:1a:63:b5:a2:1f:b2:
a1:d7:f8:14:79:4a:6c:3f:d9:03:09:b6:c6:07:48:
40:62:eb:5f:7f:48:9a:bd:ad:f1:b5:19:98:17:2d:
9c:02:dd:46:9c:61:d3:3d:5e:c8:b3:a6:42:d4:82:
5e:23:0b:d6:29:8b:42:6d:9f:1a:e5:ef:4d:2d:70:
4e:b1:5b:d0:80:3a:2a:29:3b:a0:d3:68:dc:42:4c:
73:55:03:d8:0f:6a:8b:74:7d:d3:02:ba:ba:6f:ce:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:6E:9F:35:34:D2:57:D3:65:E7:46:0C:A6:51:2D:81:FB:A9:F1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YYRunzU00lfTZedGDKZRLYH7qfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/22
188.253.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:af:f4:05:59:80:f7:4c:6e:6c:39:6b:eb:c4:1b:f1:90:1a:
cb:27:78:49:22:0f:60:3a:88:e8:e3:37:51:00:63:6e:8f:26:
f3:cb:9c:c2:2b:db:23:35:1e:fe:14:d0:ee:52:01:c7:2c:40:
de:88:9f:b8:de:93:db:1c:06:7a:18:09:a2:1a:72:23:12:eb:
89:e2:42:2a:cb:42:cd:9c:88:15:c0:34:a3:13:5e:df:1a:8f:
4e:54:6d:dd:8e:ac:a8:80:3c:52:17:13:76:a5:ab:9e:33:da:
c7:6a:93:2f:18:bc:4d:81:92:a7:e6:f5:55:75:50:cf:4c:43:
26:18:fb:e1:55:1b:d9:ab:d9:0d:d6:ed:fe:5d:8b:62:92:58:
e3:c9:d9:7d:d7:c1:fd:e5:ae:cb:8b:57:a8:38:83:31:24:89:
f1:b3:5a:dd:9d:31:c6:8e:9f:0e:09:31:59:44:10:6f:5b:42:
72:07:3c:d3:f4:9c:98:95:b9:ab:8a:f2:2f:da:eb:37:16:41:
9f:bc:b1:75:e2:a1:af:6b:5e:08:91:d3:d3:8d:2a:13:22:9c:
44:4f:1d:7f:ab:82:1b:df:35:f3:93:6c:81:72:00:8a:42:d7:
29:d1:1d:f1:78:b5:1a:bd:99:38:df:28:be:1f:9d:70:cf:6a:
3d:43:89:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZobnEm3B6LuEDm9UR4T9Y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwNDI0MTUzMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg0NmU5ZjM1MzRkMjU3ZDM2NWU3NDYwY2E2NTEyZDgxZmJhOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYE0YilqYTpUtIC9dwbPR9P0FPbS
WvI0f41lL+58phdKLh4fZjVYoszPgBRD1PNn3xBYd8YX6dqNGpgnNl1oelp99LEo
GMy4GmvWu4pZyWIJbPU19CiYx0Yx7p3nJTZQW6tLvoaB5mquy8lwi6Z34vnr5j50
vS2JXUFQ+gmmjLvy6CZWAJ3Mw5wq+OxmEP5VaPk32e5S1iooJxUwonwaY7WiH7Kh
1/gUeUpsP9kDCbbGB0hAYutff0iava3xtRmYFy2cAt1GnGHTPV7Is6ZC1IJeIwvW
KYtCbZ8a5e9NLXBOsVvQgDoqKTug02jcQkxzVQPYD2qLdH3TArq6b87emwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGGEbp81NNJX02XnRgymUS2B+6nxMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvWVlSdW56VTAwbGZUWmVkR0RLWlJMWUg3cWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsq3oAwQC
vP1oMA0GCSqGSIb3DQEBCwUAA4IBAQBdr/QFWYD3TG5sOWvrxBvxkBrLJ3hJIg9g
Oojo4zdRAGNujybzy5zCK9sjNR7+FNDuUgHHLEDeiJ+43pPbHAZ6GAmiGnIjEuuJ
4kIqy0LNnIgVwDSjE17fGo9OVG3djqyogDxSFxN2paueM9rHapMvGLxNgZKn5vVV
dVDPTEMmGPvhVRvZq9kN1u3+XYtikljjydl918H95a7Li1eoOIMxJInxs1rdnTHG
jp8OCTFZRBBvW0JyBzzT9JyYlbmrivIv2us3FkGfvLF14qGva14IkdPTjSoTIpxE
Tx1/q4Ib3zXzk2yBcgCKQtcp0R3xeLUavZk43yi+H51wz2o9Q4lh
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:31 2025 by rpki-client