Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yTmJ0Z5hccagnj44nOST7TfPQ9Q.roa
File: yTmJ0Z5hccagnj44nOST7TfPQ9Q.roa (raw, json)
Hash identifier: pSxWvBAV8kMMQHtQdCeuWkG1l1cHTnVfqh3aLJUBeos=
Subject key identifier: C9:39:89:D1:9E:61:71:C6:A0:9E:3E:38:9C:E4:93:ED:37:CF:43:D4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01965309C2050207754F193B29D852148411
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yTmJ0Z5hccagnj44nOST7TfPQ9Q.roa
Signing time: Sun 20 Apr 2025 11:51:10 +0000
ROA not before: Sun 20 Apr 2025 11:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 217.60.198.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:09:c2:05:02:07:75:4f:19:3b:29:d8:52:14:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 20 11:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c93989d19e6171c6a09e3e389ce493ed37cf43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:1e:67:1e:66:c6:ee:ef:66:b3:b4:5d:53:
10:0a:38:25:4d:28:a6:36:5e:e3:a8:ca:16:6f:b1:
5d:09:e2:55:b7:38:f3:5c:53:a2:7c:b5:12:53:b2:
12:46:12:8e:dc:14:94:c3:28:4e:dc:f7:ab:4d:87:
97:96:b6:22:34:23:41:f5:02:6e:06:89:4f:38:1a:
d8:98:7e:26:cd:f6:72:19:2d:92:f4:67:07:d4:a3:
2e:46:11:73:e7:4d:82:56:bd:76:01:ca:8d:64:b8:
90:00:56:c4:e6:34:a8:46:84:ec:97:42:3a:f7:2c:
1d:b7:a7:d2:42:27:dc:58:fa:aa:33:70:ed:78:63:
2b:db:da:76:7e:a3:d0:7f:f4:68:1f:38:93:61:50:
b0:1f:17:60:5e:d7:f2:df:26:5e:c9:27:82:5e:1a:
95:cd:fa:de:18:4c:ac:2f:52:d6:92:41:48:95:b0:
64:b9:cc:51:d9:21:64:12:8b:97:a3:f2:00:6a:9d:
a3:21:ed:b3:f3:ea:85:d9:9f:bf:e3:f5:7f:ca:1f:
4f:a8:89:32:80:ef:21:4a:e9:32:80:d9:b3:f8:a0:
cb:78:42:c5:4b:f1:46:c4:54:34:f1:b0:92:80:5a:
a0:40:36:d6:2d:5d:2d:2a:29:b6:24:65:3f:7b:d0:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:89:D1:9E:61:71:C6:A0:9E:3E:38:9C:E4:93:ED:37:CF:43:D4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yTmJ0Z5hccagnj44nOST7TfPQ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.198.0/24
217.60.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:93:2e:5e:55:86:45:8b:88:f3:31:58:65:70:53:07:3f:78:
9f:2f:f3:2b:6e:f2:20:8b:4b:99:81:88:d6:ee:12:e2:1d:01:
f7:de:7d:c2:5e:58:52:78:46:0a:aa:66:19:61:1d:7e:c3:a2:
91:4c:08:17:74:43:29:a7:92:52:a0:3d:b9:b9:dc:57:6f:c8:
2e:9e:a6:f7:b7:d5:77:1c:d3:b4:9b:06:bd:d9:df:12:a9:1c:
60:cb:ef:20:90:8d:df:21:09:1f:f1:e6:56:3e:44:5e:72:60:
c1:bb:1e:cf:9e:16:09:4a:f0:c0:f5:f7:d7:c0:a8:a1:32:73:
b1:6e:e4:78:c6:77:e5:6e:c1:a1:17:11:13:95:23:8f:c0:af:
90:b5:7e:57:14:a0:f1:4e:a3:d3:1f:de:35:fd:14:1b:c5:36:
66:d0:9b:47:23:91:ea:7c:42:7b:ef:4a:63:d0:8c:6e:36:53:
5c:97:be:0d:16:fa:c0:79:1e:56:88:57:b5:93:85:6a:27:ed:
d7:f6:e1:16:8a:e1:71:86:7f:42:82:db:b6:2e:6e:28:21:66:
d1:30:e9:d0:2e:f0:42:d6:64:4d:2b:c9:ef:5a:df:ef:3e:b4:
53:03:cd:20:5e:e7:84:b3:31:5e:56:0b:92:9d:9a:ec:cb:7e:
6d:9f:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:33 2025 by rpki-client