Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/yJQwQMARRrVe9vIkjsREE8o5TT8.roa
File: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (raw, json)
Hash identifier: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=
Subject key identifier: C8:94:30:40:C0:11:46:B5:5E:F6:F2:24:8E:C4:44:13:CA:39:4D:3F
Certificate issuer: /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial: 019652FB55DA0BD41E1ACFA39885A176D304
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/yJQwQMARRrVe9vIkjsREE8o5TT8.roa
Signing time: Sun 20 Apr 2025 11:35:25 +0000
ROA not before: Sun 20 Apr 2025 11:35:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 185.94.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:fb:55:da:0b:d4:1e:1a:cf:a3:98:85:a1:76:d3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Validity
Not Before: Apr 20 11:35:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8943040c01146b55ef6f2248ec44413ca394d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:2e:67:f6:c1:af:a9:e0:47:26:3d:03:4e:
e0:07:12:70:bc:5b:f5:43:53:b1:54:d0:3b:23:31:
46:8d:d9:38:d4:f9:80:9c:7f:3e:5b:de:83:44:be:
97:bb:8d:b9:11:cd:c8:cd:59:85:ce:96:d3:8b:f3:
d8:3d:f5:8f:99:25:33:e4:51:bd:89:4a:c6:08:47:
59:03:2f:81:1e:cb:22:0f:56:90:14:30:9e:80:25:
c4:9a:aa:cf:27:16:00:30:12:01:3b:42:de:67:7e:
ae:61:b8:0a:06:c9:df:5c:05:0b:29:da:91:bd:85:
61:0c:0d:84:76:cb:ad:9f:a2:ee:99:f6:38:01:5e:
9e:38:12:0e:e6:1f:81:35:11:4d:68:dc:b4:e4:08:
4a:be:e9:ea:78:1c:fb:ee:46:6f:ba:2a:75:3d:4d:
ed:33:15:81:3e:4b:80:2a:1d:b6:e6:38:b3:ab:37:
95:90:89:39:87:2a:48:0d:ba:e6:0a:52:c6:f8:04:
78:b2:bb:a0:41:f2:35:1a:d5:9f:d0:e0:c0:1a:b7:
4c:c8:27:5c:76:f7:c0:2d:56:13:02:b9:da:56:8d:
48:b7:c2:47:d4:66:f5:f5:2a:d4:30:fe:7b:52:c8:
c4:e3:97:a9:b9:1d:a6:a7:eb:1f:8d:98:23:73:11:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:30:40:C0:11:46:B5:5E:F6:F2:24:8E:C4:44:13:CA:39:4D:3F
X509v3 Authority Key Identifier:
keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/yJQwQMARRrVe9vIkjsREE8o5TT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:ef:1c:a4:0f:a3:c7:04:f1:43:4d:6a:02:3e:a2:e5:2b:
1d:42:5a:b5:6c:4e:5b:1c:2c:6a:bc:45:2a:40:04:31:0c:b0:
e5:43:5d:2f:f4:2f:19:6d:6e:b7:e4:b4:d4:bb:64:0e:8a:3f:
3c:04:98:e0:64:24:ca:a9:dc:c1:75:1c:9a:f8:73:51:33:0c:
45:7e:90:d8:ea:c6:d4:1d:6d:67:e1:dc:ae:10:3e:00:76:5a:
cf:99:d2:de:5d:b1:6b:3f:9c:92:38:07:5c:4d:6c:e4:1a:ff:
d7:54:b4:22:b8:a4:5c:79:58:b0:3b:bc:57:d3:76:a5:0a:bd:
b0:6f:1c:81:08:a9:b9:da:e6:f6:4f:f1:19:e6:ab:c8:10:96:
88:c0:f2:74:fa:26:e5:3d:dc:f3:15:33:ba:9b:6b:f9:ff:a8:
60:8f:a2:b2:1c:cf:37:55:57:eb:a6:54:80:e0:14:25:e4:a7:
ff:22:d0:61:1a:30:d8:9e:0f:a1:61:9d:0f:2a:17:4d:e8:bd:
d2:e7:d1:32:4b:4a:f4:3d:d9:5a:05:76:42:98:21:96:97:b3:
97:01:ba:b7:ba:cf:f8:5c:0b:4b:b3:b6:4b:fa:c1:6d:76:ed:
ae:ae:6a:33:7b:5b:e6:7a:1a:b2:5b:13:c6:87:6a:f0:c7:23:
c6:1b:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:13 2025 by rpki-client