Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ysladXf6oYnCTwWnK2V2L5LQnNo.roa
File: ysladXf6oYnCTwWnK2V2L5LQnNo.roa (raw, json)
Hash identifier: 0L0Y20A6vpRFtNvRHClJppBoC92MD1wQPKybyP24G/s=
Subject key identifier: CA:C9:5A:75:77:FA:A1:89:C2:4F:05:A7:2B:65:76:2F:92:D0:9C:DA
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01969515B7664F7C739DD4751FFBC3E00BD9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ysladXf6oYnCTwWnK2V2L5LQnNo.roa
Signing time: Sat 03 May 2025 07:39:10 +0000
ROA not before: Sat 03 May 2025 07:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60647
IP address blocks: 46.38.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:15:b7:66:4f:7c:73:9d:d4:75:1f:fb:c3:e0:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 3 07:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac95a7577faa189c24f05a72b65762f92d09cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:8f:73:7e:f6:6d:14:67:42:20:34:f1:8b:
54:b0:dc:de:d0:0d:9d:ec:7b:c8:7a:e2:29:28:79:
2a:16:7a:93:ec:97:68:b7:a8:7e:b5:6a:75:47:f8:
70:3d:24:3f:eb:25:ed:27:7d:ef:b0:7a:0f:e0:29:
f0:13:82:a7:be:82:05:80:24:84:75:d5:02:c2:2b:
6b:dc:16:fb:26:bc:ef:1e:9a:a9:82:50:67:0e:d8:
e4:1e:a3:60:40:cb:0d:1e:fa:08:c8:6b:2d:1c:65:
5b:3c:ac:29:aa:cb:a0:ca:eb:0c:fb:89:34:df:cb:
49:17:9c:22:fb:48:0c:6c:ad:11:52:ef:2e:0e:e4:
09:9f:0c:fd:1c:a3:cf:0b:03:e1:f8:7a:48:2f:73:
7d:09:74:eb:cf:54:40:54:12:c3:3b:10:36:64:64:
f9:6a:02:9e:28:62:36:5b:68:35:40:1c:93:8b:a2:
22:57:0f:0b:cc:bf:de:2a:43:6b:c3:d0:97:72:65:
80:e0:89:c3:63:5c:a8:50:b0:d2:0d:87:a3:e4:71:
d5:fc:6c:83:02:52:07:f7:0c:52:81:97:f0:68:99:
db:b3:8c:86:cf:3e:79:03:75:15:bf:af:4a:3c:ce:
71:df:29:be:4c:48:e3:c0:b7:7f:dd:8f:66:e2:f6:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:5A:75:77:FA:A1:89:C2:4F:05:A7:2B:65:76:2F:92:D0:9C:DA
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ysladXf6oYnCTwWnK2V2L5LQnNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.157.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a7:04:2d:01:43:b1:b1:29:96:32:93:0a:2a:fc:23:dc:aa:
f9:bc:99:8e:45:73:e9:36:0e:b1:6d:75:e4:83:1e:e7:83:eb:
e9:9c:b4:99:0e:9c:29:69:be:54:f6:74:e5:1d:0a:4d:26:d7:
4f:f9:6d:a8:2d:8e:1a:6d:e9:77:73:3a:31:47:ef:5d:59:99:
96:a6:cd:b1:d2:97:2e:59:44:8e:d6:e2:79:1e:27:fd:2c:34:
fa:40:63:c3:1c:fb:f2:3c:af:2c:f8:08:3b:51:d6:f3:41:c4:
b8:81:7d:1f:32:72:c0:d1:26:6b:37:f1:01:bf:b7:1d:e8:99:
8e:a4:6d:53:98:78:85:67:dc:f6:8b:9a:40:73:5f:61:7a:98:
31:45:71:62:07:37:5e:63:64:20:55:b2:10:e6:db:bc:3a:98:
3e:c8:04:ed:ef:cb:51:c3:f0:4b:62:1a:3e:06:d9:a8:0e:74:
7f:79:ba:60:2b:16:4c:3c:d3:58:a9:b4:23:9d:dc:da:ea:2b:
f6:15:70:4b:e8:24:5c:9c:f5:42:f9:56:f2:17:98:5c:71:f2:
60:60:5f:79:1b:b1:25:af:57:bf:71:8b:2f:49:9b:0a:4e:80:
71:e1:8e:b3:cd:dc:b3:e9:2e:e9:09:13:b4:04:be:b6:f1:bb:
82:15:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:40:37 2025 by rpki-client