Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/YS8fn_l74imFCNkcNVvUSOlCEEc.roa
File: YS8fn_l74imFCNkcNVvUSOlCEEc.roa (raw, json)
Hash identifier: 8POCWM71NgjblaW0PGPjWaKSeiuviZ9/gLwwgo+p/hg=
Subject key identifier: 61:2F:1F:9F:F9:7B:E2:29:85:08:D9:1C:35:5B:D4:48:E9:42:10:47
Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial: 0195ECD0EC352660728A78C0A08A17F89236
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/YS8fn_l74imFCNkcNVvUSOlCEEc.roa
Signing time: Mon 31 Mar 2025 15:27:49 +0000
ROA not before: Mon 31 Mar 2025 15:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59889
IP address blocks: 185.186.148.0/22 maxlen: 22
2a0b:7d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:d0:ec:35:26:60:72:8a:78:c0:a0:8a:17:f8:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Validity
Not Before: Mar 31 15:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=612f1f9ff97be2298508d91c355bd448e9421047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:83:18:e2:1f:fe:2d:5c:b6:ab:58:5f:a4:
b1:01:df:8c:04:54:ec:73:96:a1:8c:9e:ab:a8:b5:
32:f1:a4:49:90:e5:7c:27:b2:d3:0e:55:84:a4:04:
38:95:a4:21:dc:31:77:87:7f:81:ef:48:fc:63:ae:
88:ae:fe:d3:51:83:eb:a5:a3:3d:fd:93:59:4a:d4:
ee:45:f3:f3:5b:07:44:e3:99:52:e1:eb:26:b9:0b:
68:0a:dd:d7:84:40:eb:d8:11:0e:c5:79:55:44:de:
3e:c1:6c:8e:92:63:5d:34:e1:81:7c:15:a8:24:92:
b1:58:2a:6a:ec:97:67:61:a7:34:eb:ae:0a:56:d0:
12:f5:e8:f0:db:53:2d:3d:62:54:ec:64:82:65:aa:
ab:e0:33:b6:61:eb:95:df:7d:25:c9:67:c7:1f:49:
a2:f1:39:84:45:60:05:e7:30:9f:4b:c2:3e:c8:70:
5a:99:25:57:50:2d:68:e6:74:6c:80:be:f9:5a:9c:
08:40:1e:c1:f9:21:02:bb:18:fc:b4:ef:22:b0:3d:
55:3c:4a:0f:99:7d:33:53:82:c3:fd:39:73:48:0e:
7d:c2:9c:54:0e:5e:7a:1f:ab:38:90:61:48:11:23:
cc:d5:0c:28:1b:1e:8b:8f:51:61:4c:50:f7:ed:21:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:1F:9F:F9:7B:E2:29:85:08:D9:1C:35:5B:D4:48:E9:42:10:47
X509v3 Authority Key Identifier:
keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/YS8fn_l74imFCNkcNVvUSOlCEEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.148.0/22
IPv6:
2a0b:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
87:fc:bb:35:eb:2c:4c:50:86:31:1d:80:8f:a5:eb:02:5e:d0:
5e:20:35:9d:c9:51:7f:23:e6:a5:33:10:26:89:c4:03:b7:d2:
77:85:dd:30:dc:2f:46:99:af:ca:c1:c2:6b:ec:ff:f8:d6:08:
fc:ab:0d:ae:6c:fa:d7:a2:66:03:69:08:fc:07:9d:14:20:46:
3d:6e:9f:82:40:1e:a6:6d:fb:7d:d9:3a:bc:3e:bd:c3:40:5a:
ba:b4:d5:d3:e9:4a:55:ab:f4:1c:dc:32:83:7d:fc:2a:21:d7:
90:12:30:d1:29:95:3d:41:88:ba:0b:ec:6b:aa:86:b4:3e:2c:
87:31:31:40:73:2d:b9:52:68:22:3d:a1:5d:59:24:c5:0a:f3:
8c:02:3f:91:81:79:20:71:b7:21:36:d4:93:11:c7:56:03:91:
64:6f:6a:ba:4f:0e:32:a1:9f:92:76:47:b1:10:5d:13:b8:ee:
25:55:b9:f7:3e:5d:29:8a:f6:23:11:87:89:7d:0b:03:3b:88:
08:4d:69:46:41:da:0a:6a:e4:5d:0e:4a:a2:bc:93:d8:5f:ed:
4f:fe:e9:f6:7f:30:04:67:1d:79:7b:86:62:c3:5d:0b:63:95:
1f:da:51:dc:75:db:02:f3:7c:df:64:4b:f4:76:a9:9a:84:5a:
94:cf:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:22 2025 by rpki-client