Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/YzR4bVvYuilSAsgyIIG5IHRToDw.roa
File: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (raw, json)
Hash identifier: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=
Subject key identifier: 63:34:78:6D:5B:D8:BA:29:52:02:C8:32:20:81:B9:20:74:53:A0:3C
Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial: 01967C6E1274C5BD4CA31256708D3F4343AE
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/YzR4bVvYuilSAsgyIIG5IHRToDw.roa
Signing time: Mon 28 Apr 2025 12:45:10 +0000
ROA not before: Mon 28 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50576
IP address blocks: 46.231.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:6e:12:74:c5:bd:4c:a3:12:56:70:8d:3f:43:43:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Validity
Not Before: Apr 28 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6334786d5bd8ba295202c8322081b9207453a03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:4f:ed:f3:08:cc:eb:da:e4:9b:71:d2:5d:
99:0f:93:85:f8:50:1d:81:5e:33:88:18:0d:fc:0f:
6e:6c:08:b6:bd:d8:d7:4e:0c:7a:75:ff:37:2e:c4:
f9:f7:82:58:15:f9:ff:00:eb:5a:68:63:ad:30:9a:
58:6e:c9:2d:25:02:6d:b0:53:f9:9b:43:6a:36:ff:
79:44:b4:60:3e:9e:c0:a2:02:aa:5c:e8:76:ba:5d:
a4:6f:ce:41:5f:6f:12:f4:6b:4c:bf:cb:16:f8:9f:
96:c8:6d:1a:eb:70:46:4b:eb:f7:8a:87:c3:b4:2d:
9e:0f:73:56:c7:5a:37:e4:ce:26:81:14:9c:7d:f2:
a7:68:98:ed:52:4f:f2:d7:a6:fe:94:d9:4b:aa:bf:
0b:eb:9b:80:6e:aa:bd:21:38:33:dd:a6:c7:5c:a1:
a9:cb:9b:e0:31:52:ed:43:8b:7e:36:26:f7:37:e7:
b3:a2:ff:6f:0f:3e:92:7f:e9:f9:41:5e:d6:6e:f9:
53:34:47:d9:04:19:53:e3:11:f0:e2:59:47:4f:58:
36:49:30:c0:66:c5:80:ff:00:ee:c9:b9:23:bf:24:
75:a8:d9:9d:26:0d:cc:90:53:64:1f:3f:d0:19:0e:
a0:0c:f2:24:50:d9:eb:a3:43:02:22:00:4b:c4:e7:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:78:6D:5B:D8:BA:29:52:02:C8:32:20:81:B9:20:74:53:A0:3C
X509v3 Authority Key Identifier:
keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/YzR4bVvYuilSAsgyIIG5IHRToDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6b:ac:ef:36:3d:67:bf:37:09:f5:95:e1:52:ac:51:29:ab:
20:45:a9:4b:19:59:4d:c5:79:7c:be:63:5b:c9:3c:04:6c:22:
7c:87:ca:60:17:47:c2:b3:87:e9:54:34:10:3d:46:24:13:d3:
fb:9d:ce:f2:8e:11:44:a1:bb:f8:06:b1:02:71:2b:d4:2c:40:
5e:f6:a4:6f:c6:86:60:a0:fd:ab:a0:8d:4d:27:55:b3:60:d0:
81:af:18:fd:b6:28:22:3b:2c:25:b6:36:1f:4f:37:72:7d:3c:
d8:ee:19:66:1d:4f:09:0f:c5:cd:70:f6:79:98:bf:92:d3:bd:
f0:fe:4b:d9:a2:e8:82:b5:39:0c:ff:95:82:5b:70:fe:82:cc:
77:0a:10:57:5b:63:55:2c:d3:7e:2c:a4:b9:03:09:94:b4:05:
f0:78:3f:f8:a0:2a:7d:74:5f:86:fc:79:a8:e6:8e:48:4a:02:
93:19:31:2a:35:7e:b9:f7:7d:56:3b:82:d7:e2:bb:c0:e4:33:
e2:82:36:85:83:fe:13:fa:c3:3a:c0:7f:bb:39:7c:43:06:86:
54:c5:af:33:45:28:6c:fa:da:e7:9c:c6:ea:72:d3:dc:e3:16:
d0:83:ab:42:dc:d9:1c:a0:03:69:e0:e1:da:50:f4:64:54:ae:
41:c9:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:44 2025 by rpki-client