Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yysVJpwFUC6E189il_oDwVDR3cs.roa
File: yysVJpwFUC6E189il_oDwVDR3cs.roa (raw, json)
Hash identifier: plenS06+x/KFhegp+2vHyn/+wCqicW3TlWvYmWnAkyA=
Subject key identifier: CB:2B:15:26:9C:05:50:2E:84:D7:CF:62:97:FA:03:C1:50:D1:DD:CB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196B3C23298ED4814060238AB8F0CD13BC7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yysVJpwFUC6E189il_oDwVDR3cs.roa
Signing time: Fri 09 May 2025 06:36:10 +0000
ROA not before: Fri 09 May 2025 06:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.151.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:c2:32:98:ed:48:14:06:02:38:ab:8f:0c:d1:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 9 06:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2b15269c05502e84d7cf6297fa03c150d1ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:20:36:ef:7b:cf:3e:66:99:f8:05:4a:9e:
2a:07:6c:17:39:40:e6:10:9e:1b:bb:34:8b:cc:e7:
28:94:dd:c5:4f:44:bd:2c:aa:a4:18:76:22:d8:e9:
36:d3:55:ce:2b:02:06:bc:84:81:61:15:63:76:bb:
34:57:7d:ab:c5:c4:85:28:7a:09:a1:6f:d7:71:95:
9b:68:c9:9e:1d:e6:9b:ae:39:b4:fa:37:bc:b0:75:
ff:c2:dd:3b:cd:3c:e2:12:5a:23:7e:6a:23:75:16:
5a:9f:ee:86:35:6a:b0:b8:be:9e:41:d6:70:8b:ae:
39:6d:e1:b0:ce:d1:59:95:0e:d6:45:90:c7:68:da:
d3:94:3c:30:6a:16:35:dc:b2:ed:00:c7:61:31:5a:
96:7d:32:4d:bf:6e:a2:99:45:ef:ce:93:64:b6:8c:
7b:10:5a:7d:af:6f:76:a6:35:16:67:71:0c:9a:90:
7e:7b:6b:94:71:ee:0b:11:a6:f9:fa:10:5c:04:0a:
c3:bc:d7:4b:a5:b7:6c:48:80:75:e1:92:34:1a:d5:
89:ad:c5:27:23:a5:0b:79:51:1f:57:68:b0:91:36:
bd:6a:da:80:d3:59:99:33:2d:3e:6f:cb:20:e4:1a:
11:6c:2d:98:2d:fb:8f:a6:97:d6:50:1d:42:85:0e:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:15:26:9C:05:50:2E:84:D7:CF:62:97:FA:03:C1:50:D1:DD:CB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yysVJpwFUC6E189il_oDwVDR3cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:59:67:58:8f:ad:3b:38:20:4e:b7:63:7e:b2:56:f7:c6:81:
98:e2:bf:76:68:2c:22:ac:1d:96:73:82:6b:74:a0:56:a4:39:
c7:93:34:22:b3:bb:2d:5e:60:02:76:04:a5:03:75:34:ff:ca:
80:b3:b4:b0:3d:3f:b7:e7:7b:39:f0:1e:1d:8a:8a:7e:02:ee:
03:21:e0:91:01:1f:fd:8f:54:70:2a:32:17:19:3e:4c:bd:93:
7b:b1:03:d5:2e:cf:25:90:10:dd:f7:46:27:4b:93:10:6d:a2:
fe:0e:fc:23:6e:62:e5:c1:36:f0:e6:43:e7:e5:11:2d:8c:eb:
c8:97:09:70:8c:5f:a1:05:56:a0:d8:3e:be:d8:f2:f3:b5:94:
38:ff:26:a2:2f:d0:93:d9:82:87:e8:20:34:97:74:ff:48:e5:
c5:aa:f9:5f:4f:e4:5e:40:b0:c3:e4:75:b5:17:72:15:c6:21:
c3:38:ad:24:b7:34:81:f3:22:ab:ff:75:61:0c:14:25:4b:3d:
56:f3:e6:7e:c5:a1:d4:94:15:e3:5e:ee:df:61:3f:a5:5e:2f:
3f:c2:60:eb:10:d6:29:d3:64:d8:13:30:65:18:2c:b1:41:33:
13:04:36:46:3f:cf:c2:8b:8a:06:22:c5:ab:62:16:4d:de:54:
4e:3e:c0:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZazwjKY7UgUBgI4q48M0TvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTA5MDYzNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjJiMTUyNjljMDU1MDJlODRkN2NmNjI5N2ZhMDNjMTUwZDFkZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb4gNu97zz5mmfgFSp4qB2wXOUDm
EJ4buzSLzOcolN3FT0S9LKqkGHYi2Ok201XOKwIGvISBYRVjdrs0V32rxcSFKHoJ
oW/XcZWbaMmeHeabrjm0+je8sHX/wt07zTziElojfmojdRZan+6GNWqwuL6eQdZw
i645beGwztFZlQ7WRZDHaNrTlDwwahY13LLtAMdhMVqWfTJNv26imUXvzpNktox7
EFp9r292pjUWZ3EMmpB+e2uUce4LEab5+hBcBArDvNdLpbdsSIB14ZI0GtWJrcUn
I6ULeVEfV2iwkTa9atqA01mZMy0+b8sg5BoRbC2YLfuPppfWUB1ChQ7fTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsrFSacBVAuhNfPYpf6A8FQ0d3LMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveXlzVkpwd0ZVQzZFMTg5aWxfb0R3VkRSM2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdnMA0G
CSqGSIb3DQEBCwUAA4IBAQAfWWdYj607OCBOt2N+slb3xoGY4r92aCwirB2Wc4Jr
dKBWpDnHkzQis7stXmACdgSlA3U0/8qAs7SwPT+353s58B4diop+Au4DIeCRAR/9
j1RwKjIXGT5MvZN7sQPVLs8lkBDd90YnS5MQbaL+DvwjbmLlwTbw5kPn5REtjOvI
lwlwjF+hBVag2D6+2PLztZQ4/yaiL9CT2YKH6CA0l3T/SOXFqvlfT+ReQLDD5HW1
F3IVxiHDOK0ktzSB8yKr/3VhDBQlSz1W8+Z+xaHUlBXjXu7fYT+lXi8/wmDrENYp
02TYEzBlGCyxQTMTBDZGP8/Ci4oGIsWrYhZN3lROPsAu
-----END CERTIFICATE-----
Generated at Sun May 11 02:19:30 2025 by rpki-client