Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/jyXlzPIqEHOaXGYn3ez0Ia_uLVY.roa
File: jyXlzPIqEHOaXGYn3ez0Ia_uLVY.roa (raw, json)
Hash identifier: SWYMAeonazzK/Yru/wa+zvdzph8kWKt5zcc/4UaUzpk=
Subject key identifier: 8F:25:E5:CC:F2:2A:10:73:9A:5C:66:27:DD:EC:F4:21:AF:EE:2D:56
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 0194FA6E569BDCBDCCF07BD51A8DC6D21FDA
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/jyXlzPIqEHOaXGYn3ez0Ia_uLVY.roa
Signing time: Wed 12 Feb 2025 13:52:02 +0000
ROA not before: Wed 12 Feb 2025 13:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202708
IP address blocks: 185.142.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:6e:56:9b:dc:bd:cc:f0:7b:d5:1a:8d:c6:d2:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Feb 12 13:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f25e5ccf22a10739a5c6627ddecf421afee2d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3b:3b:c7:b7:62:51:d4:95:75:e2:ea:a4:ca:
2f:21:1e:08:bc:c3:a2:85:46:32:da:ad:d0:98:7e:
a7:af:88:e6:2b:59:8d:28:7f:8d:02:ca:0c:51:f8:
d5:98:76:53:d0:28:11:ba:96:4f:93:01:71:9b:75:
04:fb:87:10:e8:ad:2c:b1:33:67:3e:99:60:40:37:
81:5e:fd:df:17:be:cf:31:37:4c:f5:47:9d:a9:68:
bc:ea:a7:1d:d2:d3:9f:c8:6e:80:34:fd:24:eb:9a:
1f:df:27:66:6a:b5:7d:70:76:b7:5f:d5:a2:a9:bb:
04:8a:f6:41:61:c8:5a:bd:bb:c7:39:da:e6:96:4c:
42:b1:d5:f7:28:fa:96:db:8a:4e:09:81:1f:fd:cb:
c8:9a:76:ee:97:c9:bf:81:6b:c1:95:e6:b7:eb:92:
30:18:ee:0e:01:d6:17:79:75:35:d6:bf:ae:50:97:
80:bc:c1:19:af:e0:79:8e:e2:00:45:7f:c1:d1:61:
1b:93:57:03:70:04:75:5b:97:69:97:16:e4:40:8d:
a5:05:21:ed:73:cf:45:72:c6:24:38:70:01:b8:24:
18:6d:45:08:c2:6c:ed:96:50:3e:65:34:d9:36:e0:
6f:fa:39:10:2a:97:9d:af:d8:30:73:f6:e4:b3:1a:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:E5:CC:F2:2A:10:73:9A:5C:66:27:DD:EC:F4:21:AF:EE:2D:56
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/jyXlzPIqEHOaXGYn3ez0Ia_uLVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0c:33:f6:23:14:14:f6:37:ba:9f:6c:2b:a7:df:29:45:1d:
8b:fe:17:01:b3:43:c2:17:e1:5f:9f:ff:64:c9:b5:ee:48:b7:
0d:10:2d:ad:41:97:a7:e1:8a:e8:f2:a1:12:d8:aa:2b:62:a5:
97:ca:75:54:b4:77:be:50:9d:6d:aa:ec:46:9e:ca:3c:1f:71:
de:2d:fe:bc:21:63:48:28:3b:fc:04:c7:0d:3f:4c:ac:b5:9c:
d6:b3:8b:88:7e:e1:4a:2b:44:a2:b8:20:c1:d1:96:2f:1d:1c:
3c:8b:ec:90:22:62:d0:1f:5f:20:14:66:1a:1b:1b:f8:1d:2a:
db:b7:3b:f6:11:15:d3:ea:3e:b3:6f:b0:0e:3a:99:c3:6b:3b:
0f:71:2a:27:aa:4b:5e:5b:1a:2a:fc:80:1a:44:ad:51:fe:88:
9d:ca:6a:10:40:5f:28:96:49:48:0d:fd:f6:87:0f:a2:2d:ca:
4b:33:84:57:3d:eb:83:da:06:6e:f4:48:61:ca:2f:9d:d0:ba:
b5:11:65:4d:bf:a9:3b:1c:66:83:d6:99:c2:58:03:77:4e:dc:
d4:1e:41:8c:04:22:a3:47:85:c8:c7:e3:c0:93:1a:a7:9e:35:
49:5c:25:78:18:62:5b:19:dc:86:1b:ef:11:3b:65:c0:95:28:
5b:e2:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:17 2025 by rpki-client