Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/YxXoiEyb2ngb3lOp29zabqLOpVQ.roa
File: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (raw, json)
Hash identifier: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=
Subject key identifier: 63:15:E8:88:4C:9B:DA:78:1B:DE:53:A9:DB:DC:DA:6E:A2:CE:A5:54
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01944B50E19B539535180192B075FA659876
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/YxXoiEyb2ngb3lOp29zabqLOpVQ.roa
Signing time: Thu 09 Jan 2025 13:46:19 +0000
ROA not before: Thu 09 Jan 2025 13:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.56.234.0/24 maxlen: 24
2001:67c:ff0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:50:e1:9b:53:95:35:18:01:92:b0:75:fa:65:98:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jan 9 13:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6315e8884c9bda781bde53a9dbdcda6ea2cea554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:2a:fd:6f:c0:1e:57:74:27:67:f7:71:f7:
b4:09:4f:90:fa:f4:be:87:d5:5a:63:41:c4:91:df:
9b:35:26:f4:cf:60:34:c5:b5:68:68:dd:ea:30:de:
cf:8a:4a:e5:12:fe:15:29:79:b6:62:f1:14:1e:f1:
6d:a4:b0:b7:d0:ad:17:21:22:62:86:6d:46:8c:76:
d1:f9:04:5d:66:4c:01:22:5d:64:73:24:d2:a9:d4:
08:cc:1d:85:05:6f:f7:db:13:69:3f:8b:00:9e:56:
ae:e5:38:87:e8:7b:70:ce:ce:21:f8:fd:bc:e5:27:
ca:72:01:1b:9b:c6:8a:2f:d1:23:db:27:a7:0f:9d:
ad:24:c7:24:f8:ce:da:0a:45:1b:39:96:9a:41:cc:
1b:56:6e:e6:d7:27:b6:4e:06:95:86:3c:1c:a3:d7:
cb:34:af:8a:41:7d:95:42:0c:b3:26:dd:d1:6c:b8:
83:7a:5c:3d:a3:ec:5b:16:aa:e7:aa:84:5c:8f:80:
68:da:1a:d7:b5:51:8b:68:cf:d9:c9:9a:48:69:62:
87:aa:2d:9d:a9:97:8d:c0:f2:82:3f:0d:0e:f3:d2:
34:68:54:e4:37:60:fb:2b:9a:ac:f7:6b:4e:23:18:
ec:7a:f9:30:87:64:dc:06:9d:99:bf:9e:d3:67:c1:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:E8:88:4C:9B:DA:78:1B:DE:53:A9:DB:DC:DA:6E:A2:CE:A5:54
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/YxXoiEyb2ngb3lOp29zabqLOpVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.234.0/24
IPv6:
2001:67c:ff0::/48
Signature Algorithm: sha256WithRSAEncryption
80:8f:9b:70:dd:56:a1:92:60:e9:d1:70:d6:d1:cf:9d:09:da:
ff:3c:b9:20:38:2b:a7:eb:af:e1:b8:56:1a:06:63:45:0f:6c:
68:54:61:5a:43:49:34:6f:7c:f6:81:60:45:3a:71:a4:4a:82:
2e:41:7b:10:bc:33:89:86:59:45:ed:11:f1:1c:f3:26:10:fb:
22:97:01:08:7b:3b:67:59:eb:a6:20:6d:a7:cd:86:dc:70:4c:
fe:e6:3e:b9:a9:83:7f:ee:16:b3:cc:d5:09:d6:7e:88:16:fa:
bf:98:94:fc:51:fd:3c:8a:9b:ad:d2:ec:50:97:a3:a4:4b:f1:
6b:ac:67:12:5f:36:ab:38:76:3a:28:8d:4b:3c:10:f3:16:13:
2b:fa:61:c6:ff:64:bf:88:c1:66:ca:08:b1:e0:29:55:ee:62:
49:3c:f6:88:b5:31:f4:52:d1:67:5e:f1:9a:a3:a9:c0:7d:c2:
4d:2f:97:d7:38:70:18:48:fe:a9:4a:47:1e:b8:b7:04:c7:76:
07:a4:9b:70:94:4c:6a:1c:f3:e8:f1:78:c4:b2:e3:f3:f5:c8:
2a:db:1d:62:80:fd:43:d9:da:1c:85:f8:75:e6:15:7b:e9:16:
8d:1c:a8:04:14:1f:d8:75:66:08:96:78:57:b3:f2:4c:c8:8c:
3b:ca:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:21 2025 by rpki-client