Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ySluZLBR5bgTCBj1ducsHezAi8k.roa
File: ySluZLBR5bgTCBj1ducsHezAi8k.roa (raw, json)
Hash identifier: dXTorpQ0tCG8eP8pwGfl928kulX+0a1ukNKUbhavzUQ=
Subject key identifier: C9:29:6E:64:B0:51:E5:B8:13:08:18:F5:76:E7:2C:1D:EC:C0:8B:C9
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282822B0DEF6B64015B6BB5BA3AFBF13
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ySluZLBR5bgTCBj1ducsHezAi8k.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197741
IP address blocks: 85.118.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:22:b0:de:f6:b6:40:15:b6:bb:5b:a3:af:bf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9296e64b051e5b8130818f576e72c1decc08bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:e3:9c:cc:fb:11:62:32:bb:c3:a6:ff:f7:
99:45:3d:45:65:c3:da:94:8d:b1:33:47:48:30:be:
f5:e2:77:bf:a3:62:72:58:d2:11:ba:b8:5f:53:d7:
8c:55:04:f7:98:e5:f9:3e:c8:a9:e7:08:dd:43:64:
83:11:08:b7:9a:ab:e0:75:62:e1:b6:8f:1e:0e:9d:
ca:65:c0:23:da:5a:ef:1e:60:91:cc:69:28:4a:64:
6e:94:ae:1e:99:b6:36:66:56:3b:a1:4b:ce:2c:84:
0c:2c:96:16:b6:9c:77:6d:38:b4:d4:6a:e2:76:eb:
aa:11:89:14:96:9e:85:af:80:e1:22:e2:22:c8:0b:
0a:d5:fd:76:02:54:18:8d:8f:29:63:8b:60:9f:a8:
3b:a6:79:25:84:c0:f9:26:1d:7a:af:08:76:76:56:
b0:e7:03:54:d4:9f:ab:87:46:05:ce:50:39:4d:61:
31:88:04:fe:e3:fe:96:d6:d6:24:dd:eb:af:f3:9e:
69:dd:09:9b:b3:9e:e1:01:aa:e6:b3:c6:4b:34:7e:
a1:77:6a:ad:09:0b:ec:58:95:ad:85:51:3a:34:44:
9b:76:04:79:f5:af:3d:be:82:0c:70:6b:ee:46:3e:
c0:1d:71:f0:19:4d:de:ab:49:7f:49:d6:c1:58:36:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:6E:64:B0:51:E5:B8:13:08:18:F5:76:E7:2C:1D:EC:C0:8B:C9
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ySluZLBR5bgTCBj1ducsHezAi8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:0c:06:3e:5d:42:c0:88:b3:08:6c:7a:13:18:f1:f0:66:
a5:15:fa:20:45:25:50:8b:90:53:8c:f3:1e:73:01:7c:ed:80:
87:f8:2b:33:42:0a:ce:f4:96:17:2e:77:66:8d:19:92:3f:9e:
89:3f:63:73:70:87:2b:7f:30:a1:0a:33:0e:9f:ab:18:95:de:
58:96:ce:81:cc:60:8a:85:f0:5c:ac:b4:64:48:71:ac:30:c8:
96:a9:31:7d:5b:11:26:c4:69:23:52:76:bd:5f:26:74:d8:8f:
d6:8a:80:45:d7:2d:b3:45:40:5d:1b:f8:2e:49:e2:1f:25:3e:
0f:62:cd:20:a1:7b:aa:2b:15:62:80:d7:10:7f:b2:39:8f:34:
a6:21:5b:87:d2:4e:04:17:be:3c:8c:22:5d:36:1b:d3:78:dd:
e4:6a:2e:d5:85:d0:db:e9:20:a6:a9:8e:8b:fc:96:c2:c0:13:
5f:fe:10:af:37:27:a9:21:69:7c:19:0d:d3:10:23:09:e6:a7:
4e:d8:a2:3a:ba:ea:e8:92:5d:8d:15:50:af:c8:89:c8:62:7e:
f4:61:09:f7:22:d2:38:32:34:b0:f9:07:1f:6d:4e:9b:c0:2a:
c9:78:8e:2b:70:9a:ff:ee:d3:69:4e:bb:4f:1f:f8:1c:28:c8:
92:85:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:57 2025 by rpki-client