Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/yDa2dQgeJJIFzKakaTK1-AlXD1I.roa
File: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (raw, json)
Hash identifier: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=
Subject key identifier: C8:36:B6:75:08:1E:24:92:05:CC:A6:A4:69:32:B5:F8:09:57:0F:52
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019426D95FABBDE8C2A81FCCD757AC345EB1
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/yDa2dQgeJJIFzKakaTK1-AlXD1I.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 94.158.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:ab:bd:e8:c2:a8:1f:cc:d7:57:ac:34:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c836b675081e249205cca6a46932b5f809570f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:4b:1c:92:98:dd:7e:88:55:6f:ec:a3:5f:
07:b1:38:5f:c2:c8:bc:e2:2f:1e:13:55:d3:91:d3:
1e:90:1e:42:25:93:44:50:b0:5f:f3:6f:8f:3d:ad:
26:12:ce:dd:6b:fd:d4:d2:76:e7:09:b0:b1:4b:8c:
2b:f3:2b:e0:80:42:28:e4:d6:8e:d5:58:8e:4b:a3:
4c:1a:f1:18:28:8a:87:79:80:a3:bb:37:2a:ed:d0:
18:04:70:1d:33:b8:53:73:d4:07:9f:55:be:c7:2c:
ca:eb:ad:48:23:9e:17:0f:21:fd:35:fe:4d:6d:e2:
18:59:bc:5d:e9:a9:7d:66:8d:b0:90:bf:48:7a:c9:
e9:67:58:08:b0:9f:a9:0b:dc:21:4d:d8:5e:27:88:
eb:1c:63:0e:d9:2d:67:13:d5:b8:e2:68:3f:e1:d2:
bc:f4:a5:1a:b6:93:cc:26:9f:df:06:dd:c1:4d:b6:
de:74:e3:5c:d9:b4:df:20:b2:69:66:44:a2:97:40:
3f:f1:42:a5:07:9d:d3:ac:ca:72:2a:f6:db:ed:ac:
d9:3a:db:10:95:5c:8e:75:1f:42:29:1e:e6:42:65:
c7:81:15:b7:6c:f0:28:e0:6e:67:bc:f1:17:51:98:
02:04:55:60:c5:19:63:93:4a:31:eb:74:0b:8a:55:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:B6:75:08:1E:24:92:05:CC:A6:A4:69:32:B5:F8:09:57:0F:52
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/yDa2dQgeJJIFzKakaTK1-AlXD1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.28.0/22
Signature Algorithm: sha256WithRSAEncryption
91:e6:e9:ae:4c:b4:44:32:d8:65:16:1e:af:5e:e1:10:f2:ed:
b8:65:13:e7:c2:4b:03:0b:27:78:42:dc:b3:de:3d:e0:ff:d7:
ea:67:ed:ef:44:44:60:ec:92:88:ad:3e:fb:98:bd:e8:5e:ef:
6b:14:13:4d:af:92:fc:7a:ef:06:ff:36:8e:a4:d0:74:d5:4a:
14:9e:be:c5:7b:9b:a7:6c:4e:ed:bc:0d:48:9d:b5:df:3d:f7:
04:b2:2a:3c:06:97:1b:68:b0:dd:37:81:b2:b4:0b:0f:f1:c7:
93:8d:4e:d7:65:57:5f:e2:f8:92:29:21:2b:ce:b9:62:94:b1:
ae:cc:f1:49:2e:1f:ed:b8:b3:c9:a9:e9:a3:e1:5a:c2:8e:b3:
c3:20:c8:71:af:b2:66:a2:17:fb:9c:57:6f:f6:2d:48:51:81:
5a:f6:52:72:ab:2f:de:05:9c:65:18:9b:28:fa:5f:89:fc:5e:
18:fe:82:90:cb:7d:fd:f0:59:40:25:d8:c6:f5:ce:18:04:6a:
90:81:05:20:06:7f:fe:c8:b1:5f:f4:f9:82:e2:1a:da:34:89:
a2:84:38:bc:be:b5:80:82:09:61:4c:45:fe:02:10:27:8e:88:
11:bc:62:66:26:63:1f:65:18:d9:03:fa:75:5d:b0:2c:4e:c7:
b1:70:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:53 2025 by rpki-client