Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa
File: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (raw, json)
Hash identifier: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=
Subject key identifier: 71:46:21:3D:58:CD:99:30:66:CD:46:FB:C4:DE:48:57:B4:F4:91:BC
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019687CF46A2D25A3E28D22E160ED3C4A68A
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa
Signing time: Wed 30 Apr 2025 17:47:10 +0000
ROA not before: Wed 30 Apr 2025 17:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:cf:46:a2:d2:5a:3e:28:d2:2e:16:0e:d3:c4:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Apr 30 17:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7146213d58cd993066cd46fbc4de4857b4f491bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:f6:7d:14:0a:a5:4e:57:e4:04:c3:79:85:
ae:bc:8b:37:dc:a6:16:01:e1:24:4c:81:dd:8a:25:
44:2f:4e:c9:72:c2:7a:fd:6c:5a:9b:5f:ab:c6:30:
f8:fe:c0:a2:32:1a:a2:f7:6d:5e:ca:e8:f8:a2:26:
0f:02:a5:92:11:97:28:23:81:08:c3:de:ea:e5:de:
15:6d:ca:95:95:dc:b5:5b:54:7c:9c:1f:dd:59:42:
f7:60:a8:34:5a:ef:71:f6:d3:9d:3f:e9:0a:a2:60:
86:72:a5:b4:d6:7a:5a:11:e8:af:f1:98:c1:a3:62:
29:f3:01:c4:fd:a6:01:24:68:8d:8f:6e:e1:af:99:
99:f4:65:ba:06:8b:3c:91:19:61:36:99:fc:78:8b:
5c:1d:f9:b5:55:fa:bb:1f:21:ae:3b:08:6c:88:a5:
9f:b5:cd:af:46:4f:97:9f:fe:34:45:2e:83:a5:c1:
bf:78:fc:08:92:fb:ce:f6:75:e9:35:3a:0e:1c:b5:
eb:11:f9:8c:74:81:14:39:56:a3:2b:72:c7:00:d7:
8b:8c:e7:1a:ae:71:c5:97:7a:a8:dd:45:3a:d8:c0:
61:e3:4c:fe:0e:20:69:63:b4:e5:a4:c4:f1:35:91:
9b:73:6b:ba:70:e1:4e:57:5a:e0:ae:5b:fa:b0:4e:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:21:3D:58:CD:99:30:66:CD:46:FB:C4:DE:48:57:B4:F4:91:BC
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.120.0/23
195.64.123.0/24
Signature Algorithm: sha256WithRSAEncryption
20:31:b5:5b:1e:9d:d6:8b:6a:4b:98:8a:bd:de:9b:d9:57:b8:
bf:3b:39:e9:b2:9b:13:e2:86:87:b5:69:49:c4:a0:40:54:7d:
4b:01:5f:73:f1:b6:95:01:f1:1b:02:cd:bc:da:6d:d6:49:ef:
5b:ac:7d:37:53:76:f2:ff:85:bc:0a:cd:01:95:b0:30:bc:94:
cb:ec:78:d3:3c:f0:03:d1:62:9a:b4:4c:a5:38:ba:7e:b7:b1:
d4:5c:c3:03:45:26:7d:cf:ec:e4:9d:a9:69:c5:2f:be:46:54:
27:2a:fc:11:0c:6e:4a:39:cb:08:27:f0:a9:3d:e0:26:d0:1e:
e8:36:5f:17:47:ce:2b:b9:48:85:70:2c:f0:22:41:90:71:14:
f3:cc:7d:f2:c6:f9:ec:c5:52:a8:78:e9:8e:56:07:70:61:ce:
42:ee:e6:b7:29:e7:7e:f3:c6:72:c0:a4:f1:e1:cc:ea:86:39:
c9:3e:af:9d:b2:50:ce:b1:fd:40:ae:35:25:de:90:5d:76:cb:
9c:ee:ed:14:4e:d3:44:76:63:40:f3:b8:57:81:19:ae:62:83:
1a:66:5c:d9:b0:c4:85:53:7a:ea:2f:f4:80:2e:1b:99:c0:ba:
83:d1:a9:47:a4:34:4d:67:fe:9c:b8:71:2b:ce:de:35:a1:60:
23:b2:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:33:39 2025 by rpki-client