Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/yYTpoAfaYghmHruP3VvWvB4Z38E.roa
File: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (raw, json)
Hash identifier: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=
Subject key identifier: C9:84:E9:A0:07:DA:62:08:66:1E:BB:8F:DD:5B:D6:BC:1E:19:DF:C1
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 0194236A1C4544904F35B6075EAE9824ACA9
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/yYTpoAfaYghmHruP3VvWvB4Z38E.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196755
IP address blocks: 85.119.188.0/22 maxlen: 22
185.164.156.0/22 maxlen: 22
188.66.8.0/21 maxlen: 21
2a0c:10c0::/29 maxlen: 40
2a0c:10c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:45:44:90:4f:35:b6:07:5e:ae:98:24:ac:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c984e9a007da6208661ebb8fdd5bd6bc1e19dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:11:0c:3e:43:ef:58:8e:44:02:d7:bf:59:
95:60:44:2c:6c:18:f6:cf:6b:ed:67:00:e5:7c:e1:
6c:dd:d3:6d:23:78:bc:f6:6a:f0:07:34:99:ce:29:
51:9b:3a:ce:87:6d:b7:ec:e9:df:87:fb:4f:67:de:
9c:7d:ad:ba:71:44:9b:e3:ad:32:b8:ec:aa:ea:15:
6e:41:14:53:09:aa:cc:64:50:c2:2e:bc:19:db:31:
2c:80:ce:cd:73:f6:c2:df:d9:71:70:e2:b3:d0:91:
2e:5d:f9:d6:61:01:cd:fb:27:e6:c2:f0:c0:59:66:
ba:cb:34:c1:eb:02:9e:d1:3f:4f:a7:52:32:6f:45:
5d:f6:57:35:88:68:d1:29:8c:4b:3c:e7:0a:2c:45:
9d:b6:32:1c:a7:6d:f4:b0:3b:c8:cc:4d:fc:6a:d3:
dd:bd:8f:4e:a3:3f:c5:53:9a:1f:f1:f9:5d:a1:71:
aa:c3:8e:24:b8:fc:13:6b:53:36:48:cb:ce:94:e4:
70:0e:a8:e2:5d:84:b7:30:09:28:3c:a0:c4:e8:e5:
0f:2a:e7:63:c1:a1:af:43:1d:38:e6:f9:4e:37:0b:
d8:e4:88:35:2e:b9:24:c0:f8:a7:1b:fd:ed:8d:6d:
f8:89:bc:3f:8a:f4:69:61:84:05:d8:23:e1:49:09:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:E9:A0:07:DA:62:08:66:1E:BB:8F:DD:5B:D6:BC:1E:19:DF:C1
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/yYTpoAfaYghmHruP3VvWvB4Z38E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.188.0/22
185.164.156.0/22
188.66.8.0/21
IPv6:
2a0c:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:eb:dc:ad:a8:19:9b:df:da:b9:d5:95:73:e4:ea:0e:fc:62:
6f:51:18:f1:ff:94:e6:5c:b7:3f:18:ac:c5:ef:b8:dd:be:22:
7a:68:e8:f5:e7:ae:23:28:a6:64:fc:ac:0b:a7:24:90:75:b1:
7d:17:b8:41:77:95:86:14:ee:e2:ae:d9:00:68:ab:f7:e7:2b:
f2:00:7a:7f:fe:f4:63:6d:81:b0:9b:ee:4c:03:51:bc:c0:b3:
03:a6:f2:91:31:04:c9:cf:8c:46:f7:13:96:63:2d:56:f9:70:
0f:a6:24:d1:7d:59:68:bd:14:53:32:13:ba:1d:a5:61:fe:c6:
7d:20:89:f6:45:2a:d5:21:86:21:16:f1:67:ca:64:1c:85:55:
f9:10:24:8f:26:2a:ad:8e:33:76:50:6a:74:f9:43:db:f1:0a:
dc:a7:07:04:15:ee:6f:41:60:9d:a1:3e:2e:f4:da:87:bb:e1:
7e:5b:cb:46:80:b2:c9:78:41:69:d9:e5:b3:09:e3:ec:bd:28:
79:dc:90:bd:56:e1:ee:7f:5d:d5:ca:6a:a7:c9:c6:4b:fe:fa:
48:05:c1:9c:c2:b8:75:8d:00:ed:05:d2:28:03:3f:20:80:89:
b1:84:2c:e8:e7:6b:62:cb:c5:a4:0d:99:8c:41:14:c0:65:7f:
cf:6d:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:43:02 2025 by rpki-client