Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa
File: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (raw, json)
Hash identifier: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=
Subject key identifier: 60:6E:D2:FC:12:9B:61:F5:3A:49:48:D8:3A:8D:50:C1:AE:94:22:2B
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 019425FC26E7B02C60C83FB76EA8A8A558DC
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 185.233.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:26:e7:b0:2c:60:c8:3f:b7:6e:a8:a8:a5:58:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=606ed2fc129b61f53a4948d83a8d50c1ae94222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:3b:52:ab:87:ca:58:f5:41:b9:63:9f:90:
11:51:b7:6c:f4:c5:78:13:39:bd:6b:eb:18:fa:0f:
57:1c:4b:32:2a:14:da:4e:b9:0c:d0:d6:5c:fe:a6:
3d:4e:ec:89:65:00:97:01:01:c1:a5:67:ed:54:e6:
80:6f:23:67:8e:d7:2c:37:e3:e4:37:80:38:96:fa:
8d:25:a9:8b:58:e6:64:89:85:7c:59:db:20:28:33:
5d:f5:ec:57:41:38:00:38:d8:23:8a:69:3c:4f:ef:
10:f7:2c:67:6c:2e:bd:df:71:00:d5:72:1a:7d:9b:
ed:72:af:7c:37:72:78:c7:39:3c:2e:67:68:96:61:
a9:b8:41:ba:32:11:19:4d:44:70:9a:03:ac:4e:3c:
bd:d1:83:12:c1:d7:04:e3:61:41:ed:15:dd:52:37:
3a:f1:8f:24:f4:ec:bf:30:18:8e:78:51:d6:eb:34:
9b:9e:ae:ea:b1:1c:72:07:dc:cd:92:55:3d:40:77:
33:2e:58:f3:95:a8:e5:1a:e2:9c:d5:fe:1c:cc:70:
4f:14:7d:0f:81:b2:a6:d6:19:2a:2c:ee:ba:c4:d2:
14:ae:2a:b9:84:f5:b4:cb:17:bd:04:48:90:06:6e:
1d:0f:00:fd:8f:08:d0:4a:7e:81:68:fe:ce:7a:0c:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:D2:FC:12:9B:61:F5:3A:49:48:D8:3A:8D:50:C1:AE:94:22:2B
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.133.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6d:2c:ba:44:7c:53:2e:8c:d8:15:21:b8:cd:32:3d:6b:94:
52:cb:36:16:c5:c8:2c:2e:d3:fd:9b:8b:df:35:fc:cb:57:8c:
b1:aa:bd:66:b9:fc:23:48:17:3f:19:0a:28:1d:ec:c0:77:45:
58:5a:be:1a:cc:89:67:87:da:21:a4:1f:36:f5:96:5c:43:6b:
a3:40:59:c8:91:ba:77:51:54:7f:8b:a7:3d:5f:16:b6:7b:ee:
6d:23:a2:0c:f2:ca:15:cc:de:cb:52:30:bc:d4:21:60:ac:7c:
08:64:48:b9:73:38:e9:f5:3b:da:67:d4:6a:6c:3c:35:36:f1:
0a:9c:20:7d:b3:a8:91:93:05:c7:a0:0d:76:39:98:7a:90:a6:
ee:ec:09:5d:6f:37:5c:94:69:ba:4c:91:9e:b7:f7:e6:f2:40:
97:1e:7b:3a:85:84:ff:0e:1c:81:f9:f1:80:92:52:72:fd:e8:
7b:2c:5d:2c:91:f6:bc:6a:c8:d7:6c:81:04:95:5f:14:ad:0c:
53:9e:ea:a4:74:ca:54:a9:c4:8f:50:bc:ad:66:94:a3:cf:1e:
7c:bd:72:81:64:54:57:d1:4b:fb:f0:be:1d:88:40:e0:63:7d:
64:84:e8:ee:23:c0:64:a2:08:65:25:6a:58:ea:42:39:2e:b9:
c1:78:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:37 2025 by rpki-client