Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa
File: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (raw, json)
Hash identifier: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=
Subject key identifier: 63:96:2F:00:F8:25:0E:31:61:2B:56:0C:CC:35:35:CB:58:C9:22:51
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019601B659AB1E3503322831AB274A075504
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa
Signing time: Fri 04 Apr 2025 16:50:49 +0000
ROA not before: Fri 04 Apr 2025 16:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32613
IP address blocks: 64.188.100.0/22 maxlen: 24
64.188.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:b6:59:ab:1e:35:03:32:28:31:ab:27:4a:07:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 4 16:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63962f00f8250e31612b560ccc3535cb58c92251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:dc:85:6e:20:1e:53:fe:51:fe:80:3c:6d:
c8:6f:c2:dd:30:6c:b9:a6:88:a9:4b:27:cb:73:ac:
08:c2:5e:c5:c6:c1:1a:97:16:1e:f1:d0:c7:22:b5:
c4:d7:58:17:18:4a:a2:c7:d0:52:bc:29:ee:ce:f0:
7a:b4:d6:f0:c5:fa:59:3b:8c:8c:1f:de:3f:2c:98:
07:b9:ef:10:25:49:d7:83:55:ce:3b:0a:77:13:e3:
1d:6a:5c:71:74:48:42:61:39:ac:18:46:04:44:c9:
6e:87:05:3c:b0:ff:75:5e:87:30:31:ad:cf:91:2d:
7c:1f:94:1b:ad:c8:98:26:62:9c:ad:84:ec:0a:0c:
7d:b4:44:1d:5e:24:88:71:6f:f6:07:e4:df:95:7b:
7f:a2:72:02:ef:5b:bf:90:77:63:ab:b2:e3:9b:d2:
1a:05:3d:71:38:38:f2:0a:04:87:7b:2c:95:c7:88:
17:85:60:7d:16:d7:c3:96:21:1e:2a:6a:a1:ff:12:
dd:53:33:4f:ea:7f:e2:17:d7:4d:03:3f:b1:44:3e:
4c:36:19:42:33:1f:53:67:0d:92:9a:47:bd:f9:7c:
ee:dd:b9:4f:34:23:34:bb:dd:67:29:3a:49:3e:88:
50:aa:27:32:93:df:76:88:58:45:b8:1c:fb:c4:ef:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:2F:00:F8:25:0E:31:61:2B:56:0C:CC:35:35:CB:58:C9:22:51
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.100.0/22
64.188.120.0/22
Signature Algorithm: sha256WithRSAEncryption
52:65:d3:de:7e:2b:87:83:52:11:a0:77:99:38:b7:f5:10:ca:
13:e9:6d:ad:e5:88:8e:14:78:44:75:53:30:af:29:d5:0d:58:
1d:9a:d4:b5:15:d3:d7:52:17:f4:27:b6:b0:06:d9:0a:7a:1d:
18:5b:2d:27:05:3a:7a:a6:75:16:77:46:fc:c1:65:a2:06:fd:
82:d7:20:eb:c6:3b:8d:3e:65:de:4f:86:3f:a6:c3:c3:46:a8:
68:0a:7c:92:b4:48:86:43:15:8c:b5:a6:00:4b:83:4b:d2:8b:
84:e6:4f:3f:b4:fc:58:37:95:ff:0d:dc:7d:b5:34:41:7f:91:
09:d8:dc:d9:9d:cf:17:2f:b6:03:ac:ab:a4:ed:ad:80:ea:77:
45:2e:a2:b1:94:5f:32:29:71:35:c9:1c:d8:18:17:de:d1:31:
54:a0:a3:d9:13:b2:48:c3:54:99:5e:2c:a3:3c:57:65:2f:50:
a3:49:cf:93:63:70:b2:95:31:69:d1:38:db:26:d5:51:6d:24:
82:27:ef:6c:dd:ba:cb:5e:ab:72:38:2a:02:9b:a7:ef:a1:4e:
b9:ce:37:6f:f3:75:fd:dd:ab:4d:09:a6:f7:17:a3:49:0b:1b:
e7:10:ba:e4:70:57:df:4c:2c:38:22:e9:76:3a:5a:5d:af:51:
ca:55:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:52 2025 by rpki-client