Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/cYL1PLXBlxYVDNJh8eskDp73wJI.roa
File: cYL1PLXBlxYVDNJh8eskDp73wJI.roa (raw, json)
Hash identifier: sc3bndIqRaS/g3PvEGkay4IT17gUF6IlbM+GmNxxekk=
Subject key identifier: 71:82:F5:3C:B5:C1:97:16:15:0C:D2:61:F1:EB:24:0E:9E:F7:C0:92
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019421B1B2AD238658E2689DD1A4DBF119A2
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/cYL1PLXBlxYVDNJh8eskDp73wJI.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213035
IP address blocks: 193.56.104.0/24 maxlen: 24
193.56.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b2:ad:23:86:58:e2:68:9d:d1:a4:db:f1:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7182f53cb5c19716150cd261f1eb240e9ef7c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:21:b3:13:8e:24:c6:67:66:71:f6:f0:d9:
0e:40:5a:4e:b1:36:2c:3d:7a:9f:a5:68:ab:5f:34:
1d:04:02:57:7f:fe:fe:03:52:65:34:eb:56:32:1b:
53:13:c3:1b:f8:4a:ef:8f:23:3a:34:bc:e9:eb:dc:
95:81:09:51:15:34:d6:58:ce:b3:e4:41:88:9d:60:
4f:48:3b:c9:96:08:05:cf:18:19:ea:88:5f:1b:e2:
6a:89:19:8d:2c:8a:e1:38:85:4a:d5:43:fc:1e:ed:
27:06:2f:77:34:1a:54:f8:1a:4f:ac:4a:53:30:a5:
45:fe:bc:a2:5b:eb:85:72:c4:01:58:89:93:41:07:
93:e8:82:b9:b2:59:42:86:54:95:0d:4f:13:db:a5:
77:bc:96:96:5e:b2:eb:60:64:6d:f8:6c:63:f4:73:
a9:29:41:02:75:7b:ff:f6:94:b5:b9:2f:0b:51:b1:
39:b8:6f:cb:d3:10:6b:11:0b:2b:95:d4:4c:74:83:
b8:d9:74:ae:24:81:c6:00:a9:14:e3:2c:33:5f:e2:
8d:3a:1e:64:76:59:fa:df:93:67:68:ec:56:2f:4d:
08:4b:2d:d7:a5:32:79:14:20:69:60:43:a3:35:ab:
c2:46:30:16:36:18:96:dd:65:18:0a:16:6c:04:8f:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:82:F5:3C:B5:C1:97:16:15:0C:D2:61:F1:EB:24:0E:9E:F7:C0:92
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/cYL1PLXBlxYVDNJh8eskDp73wJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.104.0/23
Signature Algorithm: sha256WithRSAEncryption
37:66:8d:a1:a6:ee:dd:a1:5a:26:99:d2:73:37:8c:10:28:9b:
a8:ce:8e:ac:43:bd:05:f7:df:c2:77:94:d4:12:0d:8c:4a:09:
a1:2a:d5:0b:54:6c:be:c3:43:25:78:1b:ea:7d:62:d4:99:91:
57:99:d2:c3:05:cf:b9:ee:32:3c:ea:28:96:0d:0a:37:4e:eb:
28:49:74:c3:a9:3f:64:a8:f7:c0:76:05:72:88:95:ed:7b:cc:
98:df:56:12:fd:8b:3d:a1:ff:1a:3c:f8:d1:80:1e:b6:9a:99:
bd:65:6c:c6:70:06:32:7d:67:0f:2c:c2:c7:f9:eb:c2:d4:4c:
19:fb:c7:d7:d1:00:3c:13:6a:6a:1b:ab:92:54:39:41:70:21:
b9:68:2e:f7:ed:4a:aa:aa:08:19:2d:41:69:d1:2b:d2:d6:d6:
e3:9d:4f:c4:cf:15:98:49:46:1d:a3:ef:1b:b2:95:58:93:f6:
5f:6f:95:ec:84:76:4a:73:e1:8e:61:c0:cf:5c:ba:34:29:b9:
56:33:5e:1f:ce:2e:66:fb:2d:d8:ab:71:2a:d5:5b:16:8e:3c:
df:17:ec:8f:1d:0d:5e:6a:f1:26:de:d1:df:07:75:ea:ea:16:
0c:a4:62:60:94:9e:b9:63:d4:50:ad:21:5f:59:08:0e:59:35:
2f:10:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:52:06 2025 by rpki-client