Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PYarkvhhrELJASDkSGUWx2e21hY.roa
File: PYarkvhhrELJASDkSGUWx2e21hY.roa (raw, json)
Hash identifier: xmuH6IN9eYFayD8YivAvRaEiAwWdn3vj6MzlGgu2+xI=
Subject key identifier: 3D:86:AB:92:F8:61:AC:42:C9:01:20:E4:48:65:16:C7:67:B6:D6:16
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F6A220CB8DD3A239048027B5560A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PYarkvhhrELJASDkSGUWx2e21hY.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216141
IP address blocks: 185.186.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:a2:20:cb:8d:d3:a2:39:04:80:27:b5:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d86ab92f861ac42c90120e4486516c767b6d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:77:20:8a:d3:5f:9b:ed:9f:35:84:9a:45:
27:7c:bc:9d:f9:ca:fd:75:0c:fa:a4:7d:79:2d:a0:
de:26:11:80:5e:44:d7:8d:79:8a:ec:63:3d:b1:38:
8a:c2:db:18:8f:fb:24:90:76:a9:c0:00:e6:cf:9f:
90:cd:9e:8a:10:a2:6e:20:da:8e:ab:14:34:5b:19:
aa:ad:a4:72:1e:d5:ed:03:0f:3c:70:53:0a:c1:be:
b7:38:11:f5:18:7d:ed:35:32:85:22:0b:d0:ed:64:
5f:07:ff:ca:e0:6c:30:09:f6:00:23:f3:80:21:e5:
b5:b8:3a:71:53:2a:06:e6:92:3e:92:ec:ab:e2:18:
72:dd:b7:57:8f:3a:96:0d:8d:85:02:27:33:42:8b:
c6:11:87:37:c1:1e:64:f4:4a:ee:77:0c:76:a7:25:
85:95:ae:e8:fe:75:f8:d8:61:9e:78:fe:f2:9f:65:
f9:60:c6:bb:13:e9:26:5a:46:af:6c:98:ad:fe:34:
43:2c:e6:22:14:82:73:82:ba:64:e5:aa:d0:ea:b3:
e6:27:3f:94:61:7d:0c:76:33:68:88:63:a7:de:8a:
ac:76:25:c0:33:d9:7f:ec:ca:bc:8a:c6:8b:a7:8a:
2b:8b:69:e6:a2:63:55:12:1f:af:40:2c:2c:9e:69:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:AB:92:F8:61:AC:42:C9:01:20:E4:48:65:16:C7:67:B6:D6:16
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PYarkvhhrELJASDkSGUWx2e21hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e9:07:de:22:19:67:f0:b3:36:af:c2:68:01:84:90:9e:18:
a2:e1:ec:53:ae:6d:c3:63:b2:77:1d:52:6b:61:61:52:bd:c0:
50:6f:33:8a:7e:1e:d2:fe:71:0f:cf:6f:6f:5a:d7:99:e0:01:
62:08:bd:46:29:f7:0a:84:72:39:d8:33:af:ce:23:96:73:91:
e8:c0:eb:c0:df:d5:d9:7a:d3:6e:03:d7:63:85:eb:cc:bb:ca:
03:24:d7:90:a0:c0:f7:4b:17:9b:e0:a8:00:ba:2c:4f:a1:33:
64:25:44:fa:fb:bf:3d:01:eb:1d:38:4b:cb:25:b4:d2:69:5a:
f3:73:87:06:d3:23:ab:ac:a9:ad:04:71:5f:6c:0c:75:a0:be:
53:d7:eb:27:e4:a5:60:73:00:d2:1b:ac:f7:e0:9c:90:d4:8d:
0d:81:b8:77:51:16:4a:d2:b7:23:10:e8:a5:09:eb:2b:6b:d9:
01:20:9c:63:52:09:24:74:67:63:3a:fc:3b:4b:39:1d:7f:32:
42:be:df:c7:21:03:8e:0a:de:da:8e:3f:2a:c0:58:16:34:a6:
4f:cf:c8:b7:b8:fb:d5:8f:fa:a1:85:c8:b0:81:78:8b:93:26:
95:ea:c6:da:26:cc:e2:34:3f:77:96:e1:f3:0c:ff:4e:7f:f4:
41:12:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:44 2025 by rpki-client