Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/Yz1nqnWdktBLCf-4upLjmxtc2c4.roa
File: Yz1nqnWdktBLCf-4upLjmxtc2c4.roa (raw, json)
Hash identifier: J/e8pwliu2ZJzstQArsqHThwEBlwW9xmmljRrojzK28=
Subject key identifier: 63:3D:67:AA:75:9D:92:D0:4B:09:FF:B8:BA:92:E3:9B:1B:5C:D9:CE
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01989EABEEA9B3E11DB85C9EB17FE8623559
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/Yz1nqnWdktBLCf-4upLjmxtc2c4.roa
Signing time: Tue 12 Aug 2025 14:25:24 +0000
ROA not before: Tue 12 Aug 2025 14:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34202
IP address blocks: 217.173.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:ab:ee:a9:b3:e1:1d:b8:5c:9e:b1:7f:e8:62:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Aug 12 14:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633d67aa759d92d04b09ffb8ba92e39b1b5cd9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:79:80:32:ea:3f:ba:ec:ae:3a:cb:98:e2:
b9:f0:82:e4:ee:d9:b1:33:58:29:db:dc:57:a3:be:
7e:d6:21:3a:d6:94:1a:5f:89:28:6e:5d:fa:30:3f:
16:b6:6c:d7:d1:8d:7a:ac:9b:1b:47:24:45:4a:fa:
94:ec:66:36:b0:2f:3d:0b:6f:8f:63:d8:2b:51:6e:
50:a1:d5:dc:a4:bc:8d:5f:cc:ca:04:6f:1a:87:fc:
8a:7b:f8:b8:fa:1e:5e:d8:b9:12:e0:c5:44:4e:47:
d1:45:dc:4d:04:e7:36:54:a0:5c:9e:e5:c8:ad:e5:
2b:9a:79:50:b5:7f:a7:f3:e4:af:93:40:8d:51:13:
ad:a7:7b:2b:2d:ff:3e:df:96:f5:e5:9b:19:31:06:
6e:c8:2d:a5:c7:e9:1a:e4:15:04:06:b2:f8:84:4f:
28:57:c3:dd:c4:95:5b:77:c1:b0:74:48:62:99:cf:
8a:3c:f5:16:ce:2c:bc:3c:05:fe:17:90:00:2d:31:
6d:f8:b8:ac:f2:32:ac:14:1c:b2:e2:f1:74:87:fd:
93:ab:ba:98:34:ea:d6:4a:b3:41:60:5f:9a:80:a3:
fe:94:d8:ca:4a:d0:c5:fd:24:70:14:be:5a:a3:91:
18:09:1e:af:fb:6b:d5:9a:1a:11:63:c9:a7:e8:ad:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:67:AA:75:9D:92:D0:4B:09:FF:B8:BA:92:E3:9B:1B:5C:D9:CE
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/Yz1nqnWdktBLCf-4upLjmxtc2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9b:e2:0a:54:a3:b1:7e:7f:27:35:89:90:a8:8a:85:c9:88:
86:dc:00:c3:60:96:e8:00:7e:0c:41:f1:08:f4:2e:ef:a7:5d:
ea:04:44:93:17:d1:98:d6:03:0b:19:36:29:78:5c:8b:fd:6b:
93:c9:2d:05:d3:67:20:b3:d2:ac:5a:37:f9:31:71:39:b4:08:
13:97:8b:e6:4e:01:3c:4a:ff:38:06:41:e5:4e:5b:8a:4b:a2:
30:98:d8:10:81:79:47:48:1a:4b:44:75:19:61:0c:5f:b6:a5:
1a:4a:ae:fe:eb:74:1e:2b:1a:a6:dd:a1:ba:db:d3:90:f8:59:
5a:27:e3:2a:35:bb:72:53:76:bb:21:f5:6d:d0:85:15:58:cf:
4d:5b:d3:20:75:54:e6:58:3c:57:70:89:54:c6:4f:af:7b:bd:
8b:98:02:9f:cd:01:2c:f9:77:49:8f:77:61:1b:f7:82:a5:15:
28:10:04:6f:d2:14:59:b9:d8:e7:da:6b:6d:7a:0e:eb:4f:a7:
46:e9:63:b7:98:53:5a:8a:04:ea:25:3f:ab:e6:ec:41:c5:af:
6e:63:59:47:82:a8:06:c4:92:1c:f7:30:78:67:b4:ef:25:ae:
41:81:43:0f:7d:a0:68:00:ea:78:b4:a7:6f:84:08:fb:6c:ce:
d7:1f:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:21 2025 by rpki-client