Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/_ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa
File: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (raw, json)
Hash identifier: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=
Subject key identifier: FF:2B:2A:13:E4:AF:D1:F4:E0:C3:F8:32:F2:A5:2D:06:F5:F8:DD:9C
Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial: 0196728E4C1D34D4A7C2DCE31570CCA7621F
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/_ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa
Signing time: Sat 26 Apr 2025 14:44:10 +0000
ROA not before: Sat 26 Apr 2025 14:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41323
IP address blocks: 176.121.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:8e:4c:1d:34:d4:a7:c2:dc:e3:15:70:cc:a7:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Validity
Not Before: Apr 26 14:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff2b2a13e4afd1f4e0c3f832f2a52d06f5f8dd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:f1:6f:54:3b:2b:79:71:b7:62:b7:a2:ff:
01:ad:2f:68:83:f1:30:46:6e:aa:e0:ec:94:b9:62:
10:89:c5:bb:12:22:46:12:ad:3b:54:40:48:5e:0f:
01:d7:98:1c:db:bf:fb:ba:49:fb:4f:6f:3a:a8:40:
92:76:d3:44:75:93:ab:e0:44:61:75:68:80:af:4f:
23:51:35:65:23:7e:87:68:ae:a8:c6:76:c2:1b:a7:
88:16:3e:f7:86:d7:51:3e:09:cc:fd:19:d4:68:c0:
72:f5:3d:39:06:b6:f7:a6:36:de:4b:09:0f:54:e5:
54:62:f3:54:9d:93:f3:ae:2a:ee:59:1d:cc:03:b5:
5f:19:77:db:d8:37:ba:38:57:25:8c:e0:22:50:df:
86:76:27:c0:76:4e:30:ca:f3:33:c8:47:3c:08:49:
e9:7b:1d:a0:3b:f8:fc:1f:09:04:b4:78:8d:d9:d1:
8b:e5:b3:b3:4b:46:1e:96:6d:3c:f1:ee:c8:1c:7a:
1c:1e:37:55:02:6a:de:e3:a8:23:bf:b7:8a:2c:39:
f9:00:b6:6d:19:21:69:0d:a1:23:c5:01:e8:fd:dc:
5f:ce:bb:e7:5d:f5:63:80:66:1b:78:30:4d:d8:f6:
4b:c2:5b:62:ef:2e:ca:7f:c1:c9:2a:2f:17:9a:c4:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:2A:13:E4:AF:D1:F4:E0:C3:F8:32:F2:A5:2D:06:F5:F8:DD:9C
X509v3 Authority Key Identifier:
keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/_ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.8.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:b7:94:ab:aa:47:fd:93:f5:a4:00:e3:98:38:f0:0a:6c:
a2:93:8d:7c:70:e0:50:e4:56:6b:71:33:9c:47:f2:ac:7a:4b:
34:13:6f:aa:31:7d:03:3d:14:44:08:ca:29:e1:d1:f8:5c:64:
fd:c1:99:f5:0e:c1:5e:0f:c3:be:30:a1:c3:71:23:97:ba:16:
92:93:e4:f6:1a:c4:ee:c5:a1:34:07:bb:8b:01:81:56:01:9a:
cd:c5:ca:c2:98:c4:84:7c:8d:1c:47:3c:c5:52:89:19:1f:65:
1b:1b:70:17:37:8e:33:8c:26:a1:11:ec:7f:78:45:bb:13:85:
69:c1:0c:dd:e4:8e:35:48:05:f4:5a:6d:ca:7f:88:39:33:61:
b2:6f:54:35:14:1a:48:89:a2:76:20:97:a6:a5:78:a1:1b:53:
79:e1:9f:f6:16:cb:04:a9:c5:df:81:82:3d:a6:f7:ae:9c:ea:
ce:94:c5:29:c4:6a:58:9d:2e:79:58:6f:02:86:76:57:75:05:
2b:15:34:39:98:03:83:a8:68:3a:e3:fb:6b:8c:71:c1:8b:8c:
e4:9c:2b:e5:60:f0:65:4e:bc:27:67:77:47:b3:52:2f:a1:95:
0d:3b:8f:f8:8a:03:bc:51:38:62:4a:c7:77:ef:ac:a9:20:40:
89:7d:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:36:23 2025 by rpki-client