Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/YQXawzEq297nYPKGFHjn15vLQy4.roa
File: YQXawzEq297nYPKGFHjn15vLQy4.roa (raw, json)
Hash identifier: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=
Subject key identifier: 61:05:DA:C3:31:2A:DB:DE:E7:60:F2:86:14:78:E7:D7:9B:CB:43:2E
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0194258F7EB3E1424221562D26D94D426626
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/YQXawzEq297nYPKGFHjn15vLQy4.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 185.23.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7e:b3:e1:42:42:21:56:2d:26:d9:4d:42:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6105dac3312adbdee760f2861478e7d79bcb432e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:6a:d4:b8:d4:72:61:7e:12:4e:46:8b:3a:
91:ce:ab:e6:67:47:0f:be:99:29:72:37:7c:86:86:
8d:6c:c9:49:3b:e9:84:c8:30:ae:d4:9c:65:a6:f0:
cf:1c:99:3a:ad:db:09:00:ed:6a:8f:82:71:c8:a3:
6d:cc:af:dc:0f:e5:c3:d7:f9:fd:a1:59:8e:c3:55:
58:1b:99:0e:a6:fa:1c:b9:65:5a:76:e4:dc:5b:41:
b3:9f:14:69:98:1e:a9:3e:8d:e7:4b:66:73:05:14:
4c:8e:0f:56:4e:c1:82:71:a3:35:24:c2:4e:d3:6f:
5b:e1:96:b1:61:2e:25:d6:5a:e4:1b:b6:1e:3f:fd:
a9:d3:b1:5e:aa:78:dd:8b:1d:6c:bb:86:dd:0e:aa:
01:d9:a3:09:48:fa:93:ed:6a:e7:4f:b8:a8:2e:32:
82:2c:7a:6a:ad:d9:ec:af:e8:13:44:79:4c:5a:e9:
b0:0d:09:0e:07:5e:ef:c1:cf:3f:d9:a6:2b:ba:bb:
3a:ac:01:95:c5:3a:38:d9:4b:f1:60:cf:23:6b:59:
5f:96:cf:5b:c6:85:30:39:37:b6:94:a7:96:f1:4c:
20:c5:5e:12:5e:8e:a2:a0:de:48:f4:cd:70:2b:d2:
0e:f9:eb:c8:40:a6:b0:10:26:40:8e:a1:04:12:53:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:DA:C3:31:2A:DB:DE:E7:60:F2:86:14:78:E7:D7:9B:CB:43:2E
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/YQXawzEq297nYPKGFHjn15vLQy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8e:f0:dd:b1:67:dd:23:92:8b:6a:7e:76:ac:59:2d:d4:fe:
db:9e:8a:78:de:82:d0:d4:5c:c8:f6:23:eb:ff:bb:54:5e:3a:
e9:b1:c0:e4:19:01:b6:1c:89:cf:83:00:2e:97:a3:34:75:34:
9d:a2:a1:ba:89:45:5a:1a:7e:24:28:c6:9e:ad:bc:1b:73:70:
6d:4c:ae:e3:b1:3b:01:f9:60:da:52:e1:90:50:30:75:e7:61:
76:ed:48:33:8c:0b:06:76:9f:3d:f8:c0:c7:96:63:09:31:40:
e1:1e:6a:db:b2:d2:5d:a4:78:3f:d0:39:0b:b8:4d:8d:35:f3:
83:d6:f0:79:60:f0:1d:f1:cd:56:c1:b0:72:94:89:3e:9b:67:
c4:11:d2:13:94:18:7f:5c:1a:22:e4:47:61:ea:eb:1f:86:c8:
d5:f5:de:9d:a2:11:90:1a:c2:a0:36:49:bc:3d:43:62:e5:e0:
bf:01:f3:24:5b:80:fe:6d:1f:35:54:fd:4a:64:a2:11:84:a0:
a2:0f:90:fc:27:d4:43:dd:99:8e:b8:a9:6b:a1:93:08:9d:38:
f4:b4:cc:f3:67:d4:cf:e5:b1:1d:0c:2f:cc:b2:47:7e:e2:3c:
32:7e:88:de:40:be:78:9d:87:7f:ea:da:64:8b:04:09:b9:04:
0b:1e:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:36:02 2025 by rpki-client