Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yrKrhNOjbz87rJlrSABfFDMslbA.roa
File: yrKrhNOjbz87rJlrSABfFDMslbA.roa (raw, json)
Hash identifier: XK7mKJS336vxUK9KbvBaWc7hedQ0Q5iP09gMaGBRjHQ=
Subject key identifier: CA:B2:AB:84:D3:A3:6F:3F:3B:AC:99:6B:48:00:5F:14:33:2C:95:B0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F54C617682A29AA4D86B73357D0D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yrKrhNOjbz87rJlrSABfFDMslbA.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 23
185.244.105.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
185.254.16.0/24 maxlen: 24
185.254.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f5:4c:61:76:82:a2:9a:a4:d8:6b:73:35:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cab2ab84d3a36f3f3bac996b48005f14332c95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:47:ec:1b:39:e7:44:90:a2:e1:54:83:06:
7a:55:b9:a0:8f:08:11:b8:f7:fb:9d:19:c0:86:8f:
5a:f6:50:14:9c:b5:c0:83:d1:34:ef:63:f0:10:04:
a0:d6:ee:77:c0:e8:b7:51:85:a8:62:44:c6:26:92:
1a:a8:51:63:96:c6:7f:3e:88:fd:03:59:73:f2:f3:
4a:3b:10:8f:bd:2e:50:21:a4:ad:b1:ab:17:16:6d:
c7:a7:31:7b:24:06:96:ea:60:ac:32:b0:89:aa:f9:
fb:63:4c:73:60:41:f9:f1:79:80:58:b2:32:5e:7f:
42:11:ac:dd:01:df:28:f2:c1:6f:f3:5e:8a:3d:0f:
39:b2:93:1c:c4:c6:f3:e7:0e:4c:6f:9c:13:5a:5f:
c0:6e:77:07:4b:80:1a:3b:8d:b7:bf:3c:00:d5:bb:
ce:89:f9:d2:96:81:e6:27:90:22:a1:3d:d7:e7:9c:
aa:ef:db:c6:e0:55:1f:23:fb:34:75:b9:f3:4c:3d:
9b:e2:7d:c6:c8:28:e2:e9:c4:82:db:a2:54:63:31:
3f:06:a1:63:d9:16:97:b0:12:bf:f6:0f:ee:c2:af:
8b:64:01:b8:e6:ae:00:1c:5f:0e:11:8f:bc:3f:e7:
61:e5:bd:c3:5b:8f:88:0f:3e:7d:67:cb:73:9c:36:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:AB:84:D3:A3:6F:3F:3B:AC:99:6B:48:00:5F:14:33:2C:95:B0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yrKrhNOjbz87rJlrSABfFDMslbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.105.0/24
185.246.236.0/22
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:6a:73:c0:fd:fc:3c:fe:e3:3d:c1:33:ad:7c:51:31:fe:06:
7f:73:2c:75:51:6c:75:c6:cf:55:17:f5:dc:9a:90:18:3e:64:
31:ac:65:72:6b:a5:7e:67:eb:5b:03:18:e5:3e:27:a8:9f:22:
7c:6a:2b:b6:8a:db:e8:dc:90:4d:2c:83:20:29:2c:00:a9:67:
9c:51:ec:6d:96:bf:98:76:9c:72:54:e1:21:1e:6e:67:ac:32:
0d:bc:01:e6:42:fa:3f:f2:f5:1b:1b:32:a3:d5:79:86:48:73:
18:a2:9e:7d:9d:61:13:fb:64:10:6e:d0:43:1b:bc:b5:36:3a:
8d:79:d8:ca:80:ba:47:38:9d:18:2e:4d:cd:68:ce:93:06:cb:
59:f0:7a:c5:8b:43:32:65:3b:55:80:2a:14:2b:04:b4:dc:0e:
04:74:17:be:eb:21:4a:a3:44:5c:2d:f7:14:24:5f:fc:32:a3:
17:65:0d:e0:fc:ca:fb:c9:50:b2:d2:7c:22:18:59:9d:fb:11:
dc:cd:b6:2a:6f:27:64:ae:e7:05:d9:68:b6:b6:a8:91:19:fd:
4f:65:dc:fe:4a:c9:63:c3:ba:e0:1e:9f:f4:9e:6f:05:0b:76:
4e:c8:68:16:9b:8f:ec:c7:7d:a8:bc:f2:d7:42:58:04:fd:00:
02:da:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:41:13 2025 by rpki-client