Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa
File: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (raw, json)
Hash identifier: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=
Subject key identifier: 62:54:B4:AA:17:2F:7F:19:87:2B:78:B6:02:DB:BC:88:79:50:CB:2F
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0196730B4F9A2D721AE973A6CCC5946476CD
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa
Signing time: Sat 26 Apr 2025 17:00:42 +0000
ROA not before: Sat 26 Apr 2025 17:00:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 212.23.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:4f:9a:2d:72:1a:e9:73:a6:cc:c5:94:64:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Apr 26 17:00:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6254b4aa172f7f19872b78b602dbbc887950cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:ec:8c:f1:68:93:c7:a7:9f:7f:c4:de:64:
9c:ab:f9:33:43:a3:20:66:1c:06:a3:42:55:cf:bf:
27:e3:09:1b:b4:ad:03:09:63:38:29:bf:a5:0f:73:
5f:84:14:77:56:99:28:4c:fc:b4:b9:d2:d7:2d:c6:
e4:d0:bd:1b:65:dd:2f:4e:2b:55:d0:32:7d:08:64:
07:18:fd:d4:91:fb:1d:e8:e5:6e:45:10:12:ba:d4:
34:1b:8b:2d:7a:6c:7e:c1:ac:23:e4:2b:21:56:f4:
49:79:3c:dc:62:f3:ef:47:b4:ea:73:e1:25:3c:f3:
dd:4d:64:5b:e4:50:47:53:56:dd:92:0e:01:60:54:
b4:c2:9d:35:57:2f:8b:3f:7b:1d:1f:39:14:c9:ed:
44:a9:ca:b9:f8:21:a6:2f:9b:87:70:2c:37:b5:5b:
35:c5:87:8e:33:62:ff:5c:66:02:83:70:f7:5d:85:
06:d6:18:4c:2a:ac:1b:6f:4c:b5:cc:33:70:aa:64:
18:f5:3a:53:64:ce:04:c3:bf:79:a5:f7:99:7f:b9:
47:62:05:99:35:d2:62:f5:34:8e:61:73:d5:5d:b9:
5c:0d:02:78:f4:ba:a2:e2:bf:b8:b3:b4:ad:72:ef:
03:8c:85:1f:5c:b6:a0:f8:e1:4a:e0:78:fe:52:1a:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:B4:AA:17:2F:7F:19:87:2B:78:B6:02:DB:BC:88:79:50:CB:2F
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:f6:d5:5d:91:ad:e8:1f:3a:91:d0:a8:8e:a3:1e:5b:48:
41:ee:ab:8e:03:10:24:97:f2:e2:b7:a3:59:1d:79:ff:26:02:
df:a2:de:c9:dc:16:31:58:cb:04:e1:de:9b:1d:24:00:f9:a9:
bd:25:46:b5:2c:3b:5f:ab:af:99:fa:e7:f4:a3:71:ab:0c:18:
8c:99:7c:c6:50:01:8e:a4:f2:4a:57:dc:d5:fe:14:6c:79:e9:
51:b3:ab:94:84:65:31:b4:21:dc:68:a6:16:40:32:38:14:8d:
f0:13:64:f1:42:e6:be:7d:66:ca:4d:16:01:c3:0f:f3:9f:f0:
8b:5d:2e:9d:22:e3:a8:95:16:f3:c7:e0:7c:49:8c:ac:e8:d9:
22:ee:0f:bf:c1:a4:9b:d4:b4:9e:a8:a8:82:25:b6:9e:a3:9e:
52:11:f1:53:02:e1:49:b1:b7:b6:5a:a4:91:31:5e:18:2c:80:
88:d8:17:f1:85:f1:34:62:22:79:a2:ae:8c:3b:80:6c:4d:2b:
ef:5a:45:95:13:4f:19:09:c4:3b:c0:9a:0c:38:de:bb:35:90:
92:b0:a3:ad:0a:37:98:3e:25:d4:09:0a:2f:ed:fc:dc:4e:ee:
3b:3f:58:3d:80:05:79:4b:57:7a:67:71:f1:81:a1:ab:06:d2:
a5:dc:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:04:09 2025 by rpki-client