Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/ytRifUfzPmLAaJXJ2__CJPys9bo.roa
File: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (raw, json)
Hash identifier: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=
Subject key identifier: CA:D4:62:7D:47:F3:3E:62:C0:68:95:C9:DB:FF:C2:24:FC:AC:F5:BA
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA56943FBF147499B3064FB5BA8D7B
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/ytRifUfzPmLAaJXJ2__CJPys9bo.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211504
IP address blocks: 178.175.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:94:3f:bf:14:74:99:b3:06:4f:b5:ba:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cad4627d47f33e62c06895c9dbffc224fcacf5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:9b:68:ba:c9:4e:ba:ea:cd:be:2b:8a:ec:
01:d8:e7:70:8a:86:9d:95:ac:38:0f:28:7e:6b:41:
6b:53:6c:ef:23:86:6d:59:f6:b2:44:48:a2:35:9c:
c2:b9:cb:c7:e5:a2:f0:c6:a0:b5:9b:3d:88:d4:20:
df:73:1c:62:63:6f:ca:18:c3:89:ad:9b:16:3a:d5:
09:e1:d3:cc:6a:c8:4c:1c:49:09:db:cc:a7:a1:3d:
cf:04:be:d1:73:8f:5b:13:00:f0:39:58:e9:c1:ec:
09:3d:09:a0:06:59:c9:fa:55:7d:b6:80:78:40:30:
73:d7:8a:53:8c:2a:dd:82:c0:a8:1d:98:15:2e:0d:
37:ea:02:ef:bf:09:01:87:4d:a2:62:10:c9:ef:d5:
71:08:ce:7b:b7:cb:e5:a5:89:d4:b5:2b:03:a3:69:
b9:98:49:fb:9b:79:d4:ed:4f:01:96:47:7f:f9:0e:
a0:e7:0d:71:b2:26:e0:c2:9c:ee:06:ce:f9:f0:bf:
6f:26:af:9f:b1:f2:17:e1:db:b8:ae:4d:05:a4:b1:
bd:4b:11:a4:86:c1:c8:41:cc:80:ab:63:05:d1:e4:
be:e7:52:91:e0:01:18:fc:45:99:91:74:99:40:45:
86:43:19:2f:4c:2a:a2:ba:ad:2b:94:76:67:46:c9:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D4:62:7D:47:F3:3E:62:C0:68:95:C9:DB:FF:C2:24:FC:AC:F5:BA
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/ytRifUfzPmLAaJXJ2__CJPys9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2d:37:32:7d:c3:5b:63:8b:29:6c:c0:9d:0b:6f:d7:26:32:
5d:2a:e1:d6:e6:9d:40:1b:4d:fa:c6:9f:bb:3e:0d:c4:6c:cb:
bd:cc:6b:27:54:b5:30:92:2c:91:46:91:da:cf:b7:44:a4:6d:
48:8e:4e:90:94:0c:62:c1:2b:d0:e1:83:3d:66:5f:ef:4f:ad:
92:16:ac:17:07:9a:3c:68:a3:55:ca:69:0f:8a:b7:d5:ca:23:
7e:00:67:55:21:9d:07:c6:46:d4:30:e3:92:a9:4c:d4:be:5c:
0b:79:92:bc:d7:55:5a:00:57:64:5f:75:46:86:6a:2c:cd:4c:
ce:4b:c1:8e:df:7b:0b:09:c8:50:b0:29:56:70:82:66:14:ba:
8d:43:6f:87:14:2e:c7:d9:d9:8b:42:e1:f2:ae:fd:dc:4d:77:
31:80:85:f9:83:46:b0:3f:64:2f:38:2d:d5:64:65:b3:16:f7:
64:1f:a0:2a:97:cd:94:9b:4b:29:8c:80:ab:97:2b:bc:75:7b:
a5:74:20:b4:85:b8:a8:4c:d1:b5:69:f8:54:ef:cd:bf:2e:fc:
96:ea:0b:46:fa:e2:76:1f:b2:26:da:85:6d:15:b3:d0:ca:30:
fc:ed:65:90:29:ea:47:24:9d:ec:00:fd:d2:b8:eb:78:49:d8:
70:04:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:45 2025 by rpki-client