Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/STYQ_SYXh2dq-C7xVZvQixI1Nko.roa
File: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (raw, json)
Hash identifier: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=
Subject key identifier: 49:36:10:FD:26:17:87:67:6A:F8:2E:F1:55:9B:D0:8B:12:35:36:4A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0196612DC10465ABFB3459B44BC5D501952A
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/STYQ_SYXh2dq-C7xVZvQixI1Nko.roa
Signing time: Wed 23 Apr 2025 05:45:10 +0000
ROA not before: Wed 23 Apr 2025 05:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62553
IP address blocks: 213.145.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:2d:c1:04:65:ab:fb:34:59:b4:4b:c5:d5:01:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Apr 23 05:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=493610fd261787676af82ef1559bd08b1235364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:5c:8c:8e:c7:5d:e7:c8:7b:35:6d:d3:d8:
62:8a:1c:c9:c9:57:8c:32:6a:62:c4:55:df:37:9c:
a2:09:c3:c1:62:75:5d:40:b5:90:24:4b:5b:a6:80:
5f:ee:5f:a8:92:8f:d1:77:38:86:6b:de:c1:7d:a9:
2b:56:f4:d1:10:31:21:34:f5:6f:7c:08:07:b8:ff:
2f:40:53:b2:f0:e1:f6:73:2e:ee:55:8e:d6:15:0c:
09:e5:f8:31:dc:b2:1f:6f:e0:76:24:8c:99:bd:dd:
6e:ed:7a:c5:79:34:a1:a6:43:a4:c8:a3:c5:6d:dd:
e5:39:51:cf:3f:35:88:e6:a7:a0:22:a8:a0:7f:f7:
b3:ff:9d:b0:c9:43:4b:88:d9:18:f9:94:2f:ac:7f:
d0:da:16:87:03:1d:57:87:68:60:6c:1a:7f:90:cd:
bc:3e:95:7f:e0:0a:d4:ce:a0:e6:59:72:c1:f6:8d:
1b:32:f0:a5:89:69:e1:b6:f0:17:2c:73:f3:f9:93:
fd:38:f7:4a:37:4f:d7:46:1e:69:9f:2f:e0:2e:56:
5c:c4:f8:f8:18:63:53:c7:05:0d:7e:a6:3c:5c:28:
a7:43:76:ef:51:8b:05:84:15:47:b7:76:18:0e:d0:
81:e3:be:6e:3a:53:59:a0:0c:1e:2f:ef:fb:55:d3:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:10:FD:26:17:87:67:6A:F8:2E:F1:55:9B:D0:8B:12:35:36:4A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/STYQ_SYXh2dq-C7xVZvQixI1Nko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:77:74:0c:bc:71:e4:e2:55:15:6f:dc:ca:06:11:cd:4b:1f:
eb:f1:1e:15:79:8d:65:bf:33:50:18:59:ad:14:37:55:b9:99:
57:12:cd:87:6a:94:98:f1:e3:7a:3b:ee:cf:72:b4:59:d4:df:
ac:41:cf:f8:04:40:47:a6:bd:e2:aa:69:05:84:0d:fa:30:00:
17:f7:07:38:2f:3f:2b:a6:0d:e3:92:17:06:a2:31:dd:2e:fd:
11:7a:9b:3e:59:3c:e2:d3:53:f2:35:2f:07:3b:6a:5b:87:eb:
96:5f:0f:bb:e3:d1:4e:20:3c:05:35:41:c0:46:8c:50:bb:9f:
1d:5c:e4:d6:21:8a:fd:8c:66:db:3b:1c:ef:e5:2d:c9:78:0b:
ee:74:4a:e2:9a:5f:bc:c2:7e:45:25:f7:4c:54:ec:e6:96:7c:
14:bb:94:8b:0d:be:7c:69:04:8d:e5:af:48:29:de:66:65:8a:
89:20:23:42:f7:15:59:7d:e6:38:f1:a1:03:d6:30:65:cd:a7:
73:1e:88:19:7d:e5:02:c4:cf:63:12:c5:9f:d2:39:f0:04:a7:
a3:d2:2a:85:27:1a:34:a9:28:5f:6d:b1:75:f2:fc:36:6a:f2:
41:b8:84:4b:83:c7:e6:b1:ea:f6:8f:17:8a:be:3a:18:d7:26:
f2:bd:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:35:06 2025 by rpki-client