Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/Y5LyyYUOXTFEg08dRczspK_kl2Y.roa
File: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (raw, json)
Hash identifier: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=
Subject key identifier: 63:92:F2:C9:85:0E:5D:31:44:83:4F:1D:45:CC:EC:A4:AF:E4:97:66
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019427489073A06CBA34328B4143711D4DDB
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/Y5LyyYUOXTFEg08dRczspK_kl2Y.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13896
IP address blocks: 185.155.144.0/23 maxlen: 23
185.155.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:90:73:a0:6c:ba:34:32:8b:41:43:71:1d:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6392f2c9850e5d3144834f1d45cceca4afe49766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:b0:3b:96:a8:f2:1a:39:2a:f4:62:95:47:
e1:c1:0e:05:4a:00:70:1f:34:39:35:0a:7e:29:36:
1d:8f:d9:03:0c:dd:e2:62:bf:31:36:17:85:c5:f1:
1c:54:20:ab:95:56:e9:30:5d:3c:96:94:80:4e:37:
e3:fa:bf:2f:ea:18:3b:28:d5:e6:ee:ff:1d:2c:fe:
a5:ab:f6:5c:23:ef:1a:90:5b:ed:17:80:49:84:e4:
8d:71:89:a7:ca:34:5f:7c:25:89:0a:5c:94:91:d6:
a0:cc:3a:ee:b0:f9:d4:d9:93:01:06:f4:fc:37:2d:
9e:87:92:f4:63:58:62:ba:90:5a:c5:fa:ad:f5:50:
95:7f:a9:c2:2b:be:96:d0:09:41:25:0c:7f:9f:11:
b4:d2:41:74:2d:c6:6e:d3:4b:35:c7:c9:4c:2b:d3:
78:cb:f6:77:d8:8a:6e:70:a7:00:94:fa:b6:ed:16:
5f:c3:fc:e1:e9:03:05:95:6a:1a:fb:41:75:5f:04:
3b:9d:13:47:ab:7f:eb:41:95:85:0b:4f:74:08:dc:
b0:94:f1:d0:4d:c5:80:6b:fd:b3:6c:df:f5:55:a6:
41:88:58:24:65:f8:3a:3c:9f:e2:0c:dd:ca:0c:9d:
7e:e5:9e:4b:aa:c8:1d:10:57:2b:03:04:62:97:8d:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:F2:C9:85:0E:5D:31:44:83:4F:1D:45:CC:EC:A4:AF:E4:97:66
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/Y5LyyYUOXTFEg08dRczspK_kl2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
35:1d:b0:e9:7f:d6:4c:bc:a7:86:c5:c4:3b:32:f8:96:bf:fe:
7e:83:15:e5:db:27:68:3a:85:52:5d:9b:b2:48:c4:88:94:b9:
ca:f3:02:ec:29:f3:93:ee:7c:bc:7b:e5:68:f3:93:e4:1d:ac:
36:7d:90:0d:ed:bd:62:aa:33:bb:e7:be:d8:39:56:79:4a:d5:
16:57:02:2a:d9:59:51:24:40:25:b7:75:84:40:e2:17:b3:99:
bb:b8:ef:55:3d:f7:63:4c:34:06:aa:9a:f6:04:25:ab:79:77:
90:72:db:e1:b8:30:56:0f:4f:5b:e0:5f:e8:04:74:2a:95:84:
c6:7e:df:f6:7b:63:1c:3c:d9:a5:85:06:1d:4c:b8:af:31:5f:
47:98:88:34:67:3e:84:2a:d0:14:ae:b5:65:85:c2:f3:d4:e6:
f6:f0:d2:5f:3b:31:e5:42:2d:21:eb:0b:dc:35:60:f9:9f:d2:
89:cb:60:c9:fb:59:23:02:25:8d:a9:b1:69:61:d6:02:d3:ea:
b4:0a:af:5f:81:aa:18:e3:e4:7f:af:34:8e:0e:19:fa:7f:31:
6e:87:b6:95:d0:f5:f8:f5:dd:59:42:a3:0b:5d:43:89:25:34:
be:a2:d8:2b:1c:69:f1:72:18:e8:52:ef:dd:21:5e:88:72:35:
8d:af:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:16:13 2025 by rpki-client