Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_YoSAm3lcbi756fxblV3ZfZrhI0.roa
File: _YoSAm3lcbi756fxblV3ZfZrhI0.roa (raw, json)
Hash identifier: ute7toKDg9faNDGXI79EvogsCjtOm93xLjXKKvEk2do=
Subject key identifier: FD:8A:12:02:6D:E5:71:B8:BB:E7:A7:F1:6E:55:77:65:F6:6B:84:8D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455B64EDD4C2C13DABDA7866D03FC7
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_YoSAm3lcbi756fxblV3ZfZrhI0.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51585
IP address blocks: 31.145.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5b:64:ed:d4:c2:c1:3d:ab:da:78:66:d0:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8a12026de571b8bbe7a7f16e557765f66b848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:0c:a1:d5:f4:21:a9:01:7e:1d:9d:35:ff:
a8:44:04:ea:49:17:ef:35:a2:27:b7:bd:fb:9c:4c:
aa:6a:c4:4e:f2:c7:c0:a0:5a:a8:06:bd:a8:94:05:
80:35:57:9b:eb:62:26:7f:e8:cb:e6:ff:11:6d:41:
7e:83:50:43:9b:76:ea:f5:fa:bd:f8:0f:17:dd:5e:
ad:40:b2:5a:c6:b9:9e:60:82:f2:36:e7:72:5a:86:
be:b4:4c:f4:b4:87:18:9f:7b:7c:0d:fb:94:e5:51:
05:e7:3a:dd:3b:ca:30:63:9a:54:45:a5:ed:5e:27:
05:27:27:47:8b:c6:05:c9:f4:a2:9e:37:94:63:83:
da:af:1f:40:e3:5e:bd:f6:ea:fe:cc:71:d8:3f:42:
ab:8f:22:76:78:89:17:ff:a0:89:82:4f:35:cb:da:
ab:43:32:9b:44:33:d1:af:3b:84:f2:94:0e:0e:b4:
58:44:a3:01:23:ea:e9:83:08:23:d8:68:a1:ea:cd:
ea:64:c3:8c:95:cf:09:80:ab:0b:0c:ed:1f:c3:ad:
f3:2f:d0:67:8a:c5:7e:d0:c9:f6:1c:76:c3:08:98:
50:92:e2:80:e2:84:54:51:7a:6b:f9:64:8b:33:71:
a9:69:18:88:5f:6b:57:35:26:29:c7:82:4f:5d:72:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:12:02:6D:E5:71:B8:BB:E7:A7:F1:6E:55:77:65:F6:6B:84:8D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_YoSAm3lcbi756fxblV3ZfZrhI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:8e:d7:12:d2:67:06:60:e0:65:15:91:2a:4a:86:8a:01:9d:
eb:1e:10:ce:03:8d:a0:39:47:1d:71:8c:8b:b2:e4:1a:8b:eb:
01:d2:38:24:e5:db:66:ed:1e:63:78:66:89:b3:4d:c5:09:fc:
bc:a1:a4:af:e9:0d:9e:19:dd:06:7c:32:05:f1:6d:da:70:81:
55:11:fe:98:a4:af:5a:7d:b3:14:b3:a8:e5:50:f3:58:53:fd:
55:8b:4f:c0:61:3b:69:0c:c7:e4:a2:63:71:7e:7e:72:88:1f:
b2:a3:31:a4:ba:30:5b:cb:9c:2c:b3:4e:44:c0:19:7b:d4:3a:
8d:4c:b6:da:19:1a:d7:bf:14:37:c9:40:21:0e:ed:d4:d2:09:
92:ce:2d:a4:12:25:e7:76:e9:88:04:10:40:ea:46:87:10:d7:
43:54:7c:14:e3:5f:20:18:1d:77:da:0f:d5:67:56:d5:b8:ce:
bb:b1:d7:cd:88:41:80:c6:50:25:93:28:c6:55:c3:c0:b6:fa:
6a:72:d5:69:88:aa:61:c9:f3:0f:d4:02:33:06:1e:09:3a:5a:
92:7a:30:30:94:e6:42:da:ae:40:11:09:78:49:b8:01:a4:9c:
9d:30:1b:1a:89:90:39:3e:16:fa:85:11:26:46:7c:79:c9:f6:
47:2f:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:42:54 2025 by rpki-client