Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/Y8EodOzkg41GjWx9slGHWzyOuz0.roa
File: Y8EodOzkg41GjWx9slGHWzyOuz0.roa (raw, json)
Hash identifier: 9vunkyhjN/3Ybhldfd7RCxZi2c6G40osarupV7bQAZo=
Subject key identifier: 63:C1:28:74:EC:E4:83:8D:46:8D:6C:7D:B2:51:87:5B:3C:8E:BB:3D
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 01942521DEE4FE0A15A5AF485D5B29774035
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/Y8EodOzkg41GjWx9slGHWzyOuz0.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39743
IP address blocks: 185.5.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:de:e4:fe:0a:15:a5:af:48:5d:5b:29:77:40:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c12874ece4838d468d6c7db251875b3c8ebb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:9f:ba:80:52:c0:8c:c5:61:a9:45:06:ff:
a1:c6:2d:c6:c0:c0:82:82:d6:0f:05:c4:4d:2d:b4:
73:e5:db:40:f9:ba:0d:93:06:94:e5:4f:af:ad:66:
e2:9c:b5:08:32:d1:60:75:ca:f2:67:09:6c:e1:b3:
5e:b2:ea:dc:35:af:f2:55:d0:e4:f2:52:0f:c4:32:
4d:78:61:f8:d9:a1:14:1c:5c:aa:a2:27:85:7a:8b:
b1:6c:07:d1:44:97:a2:d4:ae:bb:03:2a:9c:ef:5e:
4b:4d:c9:71:df:73:52:40:38:42:b4:4e:f8:ee:42:
d4:ea:ad:07:e6:26:c6:5e:c4:63:90:27:4a:66:0f:
11:8b:f9:cc:46:ea:32:cd:6e:ed:5f:58:87:fd:1c:
34:7c:db:3e:6e:7e:f4:84:92:eb:ac:74:61:4f:59:
2d:7d:63:68:fd:c5:bd:e6:b0:96:eb:c6:a5:89:25:
73:d7:e8:d9:d2:da:c2:85:c5:55:d1:d2:21:4f:59:
a9:20:ea:d3:73:68:20:2f:c7:ac:d9:91:c9:14:57:
22:64:96:4d:3b:4b:33:31:54:9b:22:a8:27:19:bd:
50:da:16:cf:dc:a6:40:40:37:05:f6:7a:43:4c:07:
de:43:44:75:ba:2c:67:ef:9b:e8:5c:e6:d6:11:46:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:28:74:EC:E4:83:8D:46:8D:6C:7D:B2:51:87:5B:3C:8E:BB:3D
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/Y8EodOzkg41GjWx9slGHWzyOuz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.46.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f3:87:10:46:f0:35:94:b4:be:91:a7:a2:38:5e:5e:1c:f3:
b1:9b:bb:84:f6:ac:96:a6:e1:94:b5:70:4b:89:d5:86:84:94:
5d:6d:29:58:83:3e:66:4c:91:b8:46:4b:2d:a6:e9:2b:48:6c:
bd:b2:d5:41:d3:94:ac:b0:10:be:3f:d6:d9:66:a9:80:71:87:
43:1f:31:da:0f:98:00:da:5b:f7:5d:53:84:23:84:ee:aa:20:
47:dc:7f:46:9c:12:70:f9:dd:68:30:9b:52:a0:1f:70:92:7b:
4d:6d:58:0e:e3:a7:a3:bf:58:26:28:53:07:1b:50:b3:c3:85:
e7:7c:11:8d:90:21:b7:37:0a:ad:19:fd:de:c2:1b:67:e0:37:
ed:5c:18:bd:c2:66:38:d0:d3:87:88:6d:a0:ca:4a:13:53:eb:
8b:65:dd:9f:35:44:d6:d3:52:fe:6b:ad:90:fa:05:e1:39:6a:
b7:3d:a8:5c:81:d0:19:1d:51:e5:eb:4a:1f:66:49:d6:e6:47:
e5:12:c7:a2:3c:12:cc:14:fb:e3:da:1a:3c:5d:c0:74:26:cf:
3a:16:a5:c4:c1:24:05:7f:0e:80:de:fe:90:f4:c0:78:b3:2f:
81:ce:bc:cb:71:ac:a5:72:d7:c4:8c:05:16:ac:2d:23:18:1b:
98:51:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:42 2025 by rpki-client