Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Yu_YoL2VLbB3tgeavUOvZOFACWA.roa
File: Yu_YoL2VLbB3tgeavUOvZOFACWA.roa (raw, json)
Hash identifier: zvUsEicFxXhJsM+hUOAshqrxLfIhqwc0EeEiVmj/nV0=
Subject key identifier: 62:EF:D8:A0:BD:95:2D:B0:77:B6:07:9A:BD:43:AF:64:E1:40:09:60
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01972E4B973049B2C70F3987D62858E67959
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Yu_YoL2VLbB3tgeavUOvZOFACWA.roa
Signing time: Mon 02 Jun 2025 01:39:55 +0000
ROA not before: Mon 02 Jun 2025 01:39:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 89.106.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2e:4b:97:30:49:b2:c7:0f:39:87:d6:28:58:e6:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 2 01:39:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62efd8a0bd952db077b6079abd43af64e1400960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:d2:d0:f9:93:7d:58:5e:39:b0:d6:e6:bf:
27:90:46:e4:3a:cd:2c:d2:be:9c:3c:be:47:62:ab:
9e:c5:d4:5f:6b:db:15:01:1b:ec:bc:03:2f:59:dc:
e2:48:79:30:79:70:71:26:df:d0:08:39:90:d3:92:
43:a9:1d:81:34:8e:db:0d:ed:72:5e:3f:03:75:d7:
f3:c9:2f:1f:1a:2c:b3:14:98:7e:18:31:0a:c9:c3:
35:3c:ea:91:32:ec:93:db:dc:96:c8:8b:3f:fd:e4:
83:b8:55:74:f0:35:d9:5a:31:6a:f2:6b:54:22:31:
4f:b9:43:49:3f:9c:e1:cb:70:76:9a:b2:5f:c2:e5:
d1:db:f0:3e:65:4b:ae:eb:23:dc:46:8a:bf:b1:f2:
9d:33:18:90:32:04:03:82:84:e7:a0:54:39:8f:2e:
ad:cc:78:e1:80:8a:2b:9d:e9:9a:19:81:01:52:f8:
bd:40:1c:f5:c2:7b:55:a7:ea:0b:af:6d:0a:a4:12:
20:48:68:04:b4:f9:80:ce:39:e4:ea:8e:a0:39:38:
ae:e6:7f:5f:61:85:2a:2d:43:51:4f:1b:8d:29:54:
bb:6c:55:1c:45:4d:fd:ea:e6:24:f7:9b:76:c0:1a:
70:f2:e3:af:19:c3:e7:53:72:d5:7b:01:d3:9a:62:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:D8:A0:BD:95:2D:B0:77:B6:07:9A:BD:43:AF:64:E1:40:09:60
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Yu_YoL2VLbB3tgeavUOvZOFACWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2c:b2:05:81:ee:8a:ad:3f:9a:48:e4:28:ed:e4:0b:81:4c:
0a:de:14:e1:89:83:7e:06:73:46:71:e6:e7:e3:ce:eb:7b:b1:
d8:2c:3e:1b:66:ec:90:69:90:c9:e1:c2:6a:35:ce:25:43:c3:
aa:4e:8a:9e:02:a7:f5:4f:4c:55:ca:38:59:cc:53:fe:b0:ae:
94:ed:76:6b:4e:3f:24:0d:c0:1d:58:6f:72:a2:7e:94:0d:fa:
ca:75:ba:f5:e1:7c:c3:f5:27:ff:40:9b:9c:8b:7e:2b:b2:cf:
99:fc:c3:55:a7:1a:e9:dd:34:e2:db:6f:fe:b1:6a:22:ee:4f:
bf:41:b9:f9:a8:02:3c:89:0f:fe:e6:07:a3:cc:4c:fd:ef:03:
7a:3d:a3:16:22:40:09:2c:09:0d:c1:c6:01:7d:34:0c:01:f2:
e6:11:06:25:b0:7c:1b:e5:47:fd:0b:e5:b7:76:44:7f:62:9c:
e1:38:98:be:2a:ae:9f:46:5c:eb:32:33:6b:ef:94:42:b7:4c:
a1:6a:33:6c:45:fb:83:17:d8:42:0e:7e:fe:a9:f4:50:a3:b5:
b9:ee:9d:3f:94:99:52:bd:33:cb:fd:d9:ef:ce:f0:75:c4:5b:
57:8f:16:c2:7a:1a:04:1b:21:a5:b1:c9:ac:ea:0e:c9:29:04:
af:a3:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:05 2025 by rpki-client