Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yozNJC2GV7zwKI3kCqD2Kg47OHw.roa
File: yozNJC2GV7zwKI3kCqD2Kg47OHw.roa (raw, json)
Hash identifier: Q9hJIdmDY+Zqg0O4o2JjEv06jvmUsaDGnP+EBbtFdvA=
Subject key identifier: CA:8C:CD:24:2D:86:57:BC:F0:28:8D:E4:0A:A0:F6:2A:0E:3B:38:7C
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019681B90CF5A5F6571E01F6DD626714C0C3
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yozNJC2GV7zwKI3kCqD2Kg47OHw.roa
Signing time: Tue 29 Apr 2025 13:25:10 +0000
ROA not before: Tue 29 Apr 2025 13:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 91.132.160.0/22 maxlen: 22
193.135.151.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:b9:0c:f5:a5:f6:57:1e:01:f6:dd:62:67:14:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Apr 29 13:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8ccd242d8657bcf0288de40aa0f62a0e3b387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:57:4c:26:9b:45:92:d6:48:47:3f:63:f1:
94:79:02:83:b7:70:01:fe:36:79:ba:45:8c:79:85:
ce:ae:7c:c1:fe:c5:05:ce:d7:68:f1:a3:08:71:1e:
80:de:ee:58:fb:e8:16:48:b7:94:5e:3e:30:6f:c9:
17:fd:02:48:01:53:ac:40:c9:16:77:3b:77:6c:eb:
44:33:99:6b:cf:5b:89:d1:09:f2:bd:32:34:99:03:
e2:65:da:cf:55:3c:75:be:ae:25:fa:91:1c:1a:e7:
73:09:c2:c0:dd:5b:3c:59:09:5e:14:72:cf:5c:c8:
c4:8c:72:a4:2a:31:01:ea:66:b4:47:84:2a:91:f7:
ca:96:4c:28:7e:d0:a5:84:ee:1c:30:bb:30:06:6c:
be:f5:81:6b:07:f6:54:e5:e7:ce:81:49:7d:a4:4d:
59:b7:23:09:b0:b6:66:81:22:e0:f2:6f:95:c0:77:
8e:4f:e6:b9:0a:53:99:47:e2:ff:2a:db:1f:55:44:
c2:aa:ba:11:e6:5f:bb:7f:88:a7:fa:e9:b9:73:80:
a9:d0:3b:38:7d:c8:75:d4:9d:6b:52:15:1a:2a:32:
1c:75:32:54:ec:64:42:57:06:c1:02:61:dc:77:15:
74:96:68:65:9e:75:ea:9c:2a:51:89:89:7d:5d:5a:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8C:CD:24:2D:86:57:BC:F0:28:8D:E4:0A:A0:F6:2A:0E:3B:38:7C
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yozNJC2GV7zwKI3kCqD2Kg47OHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.160.0/22
193.135.151.0/24
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:28:c1:5f:8e:23:ae:37:e1:de:b1:cc:e8:30:93:b6:e6:75:
5d:f0:43:26:95:37:eb:4f:00:9f:3f:45:90:a4:bf:a5:f5:13:
87:28:62:18:ac:a6:96:d6:c7:c7:c3:ae:d7:34:19:b1:9e:9e:
4e:ae:d8:f5:76:28:bc:b8:aa:de:48:05:25:e5:4f:c3:8c:b1:
50:0a:8e:c5:8b:04:91:fe:a6:27:14:7a:1e:7b:ec:fc:bb:fa:
42:90:12:f0:20:8a:49:1d:53:46:df:f8:b4:4a:f8:cd:e0:d7:
8e:31:b1:6e:01:2c:c3:74:6a:38:4c:cf:61:cb:0e:2d:2a:e3:
51:ec:66:4d:84:68:c0:74:f9:01:23:72:07:6b:e7:32:0b:55:
b1:5f:1d:54:5c:2b:9a:de:95:bf:9f:db:da:5e:f4:3a:9f:ad:
17:a6:aa:38:37:be:33:61:66:fc:ce:73:05:21:02:ce:b5:4f:
0a:76:4d:6f:b3:8c:26:0b:db:8b:a5:c4:f9:48:b0:56:be:14:
01:b7:14:58:dc:5f:09:1a:29:da:29:ab:2f:32:a9:ad:e8:48:
31:34:d3:71:bb:4a:72:3c:de:05:f0:08:d5:ac:53:88:d4:d4:
e2:61:14:d1:e1:0d:26:f3:41:14:c1:4f:2a:6a:d4:97:7c:9f:
b1:63:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:25:09 2025 by rpki-client