Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YeYBD4DlVu9uH9h1DQiZjPVwc8w.roa
File: YeYBD4DlVu9uH9h1DQiZjPVwc8w.roa (raw, json)
Hash identifier: nhn9bybdjENdDvlPckYFek5ve2UALHDYJfFKH6sO454=
Subject key identifier: 61:E6:01:0F:80:E5:56:EF:6E:1F:D8:75:0D:08:99:8C:F5:70:73:CC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01975A08D60DD57AA9BFE6E296AB5C8466C3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YeYBD4DlVu9uH9h1DQiZjPVwc8w.roa
Signing time: Tue 10 Jun 2025 13:30:17 +0000
ROA not before: Tue 10 Jun 2025 13:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29518
IP address blocks: 192.121.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:08:d6:0d:d5:7a:a9:bf:e6:e2:96:ab:5c:84:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 10 13:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e6010f80e556ef6e1fd8750d08998cf57073cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:b3:93:41:6b:42:02:40:21:99:3e:64:28:
f0:68:99:79:26:73:d0:d6:f5:29:62:04:0d:6e:40:
8b:d3:c3:7d:4f:fa:f6:92:ca:32:55:a1:db:ce:56:
0f:eb:4d:96:d2:19:8e:0a:4e:4a:ee:22:c3:e1:be:
da:61:bd:9b:bd:ce:05:9d:dd:09:0f:36:9c:47:20:
cf:8d:37:09:a5:db:89:07:92:5a:fe:e9:bd:7c:08:
1d:4d:cf:db:bc:1c:b6:89:20:1e:4f:9c:74:c2:bc:
89:c3:6e:d7:c5:44:42:c7:2b:7b:34:d1:c9:d1:4f:
b6:3f:75:2d:6e:84:ce:ae:3e:57:47:0f:52:08:7e:
22:92:13:62:14:25:50:fe:7f:53:70:98:9c:7d:ef:
70:17:64:5d:b2:6b:e8:39:d4:ef:58:d7:27:5d:df:
73:ce:31:e2:ca:5f:0f:02:87:70:cf:00:74:75:7f:
66:ec:28:c8:8e:7c:21:1d:1e:8a:7f:8f:58:a0:01:
99:5f:8d:2b:d7:c5:3e:d0:12:45:be:ee:ce:a7:03:
cf:5e:dc:8b:84:95:e9:fb:2b:77:9f:af:f6:ee:17:
60:86:1a:39:21:d3:59:08:fc:f5:e1:70:dd:ef:c4:
9a:d4:09:47:b0:d1:24:91:c1:b7:2f:7c:24:ee:4e:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:01:0F:80:E5:56:EF:6E:1F:D8:75:0D:08:99:8C:F5:70:73:CC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YeYBD4DlVu9uH9h1DQiZjPVwc8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:63:7b:8c:d3:65:3e:59:fa:d3:fa:bf:9c:8a:f9:ba:b0:cf:
64:c1:83:f0:29:a2:49:2e:07:f9:7d:2c:63:70:77:f9:77:4d:
fb:17:24:83:24:1f:91:dd:d5:f8:22:5f:e1:fe:be:e5:b3:1e:
13:94:39:e2:be:62:2b:e2:c4:10:2e:2f:59:b0:81:03:e5:5b:
96:1f:d9:5a:b9:c0:ca:1c:59:27:9d:a5:63:79:54:88:a1:cc:
91:c3:56:c1:18:f4:05:e4:8f:60:4d:1f:1a:1c:ab:65:ff:3c:
fc:3c:c2:8c:45:2b:ac:e0:3f:fe:5e:15:38:0a:70:59:7a:de:
e8:fd:6e:06:8d:d7:59:c2:88:9b:dc:53:40:aa:5a:ed:b0:be:
02:a3:99:a8:28:8b:d7:d9:21:ad:fa:14:ac:c1:32:61:7e:d0:
3d:18:28:2b:23:50:ce:03:11:a5:4e:4f:1d:9c:6c:c2:bc:3b:
d9:9a:da:b4:70:42:d0:01:66:9a:50:42:c6:12:25:a7:6d:30:
63:6f:78:f5:b0:15:fb:e5:f8:0b:21:b6:de:fd:0d:2f:2f:c0:
a6:76:37:d4:cc:15:c8:9f:41:84:85:57:d6:ef:34:7e:d8:4e:
64:81:d0:3b:63:c6:dd:2b:ca:e2:d0:a1:38:00:91:1e:0b:ec:
b9:47:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:16:12 2025 by rpki-client