Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y-MCa-vEqmt4xxaUlqT7LceK8FI.roa
File: Y-MCa-vEqmt4xxaUlqT7LceK8FI.roa (raw, json)
Hash identifier: QMpu0Ot8vsNMlM0g3bTI+gPcuoPB9dQGGk16RENVrjs=
Subject key identifier: 63:E3:02:6B:EB:C4:AA:6B:78:C7:16:94:96:A4:FB:2D:C7:8A:F0:52
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452CC5DE608F5CB90AA7C8B7C2C335
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y-MCa-vEqmt4xxaUlqT7LceK8FI.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201211
IP address blocks: 185.164.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2c:c5:de:60:8f:5c:b9:0a:a7:c8:b7:c2:c3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63e3026bebc4aa6b78c7169496a4fb2dc78af052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:00:1f:8e:55:3b:5d:96:ff:e4:e0:cb:ea:
4e:04:16:4e:c9:f1:ba:12:63:3a:5a:fc:5a:a6:68:
2f:d6:1a:71:42:17:50:82:5d:2c:5a:e0:9c:4f:46:
56:18:f5:3b:6f:52:0e:8d:4d:4b:53:f6:0d:b9:9f:
f6:d5:3a:75:ea:cc:dd:e5:77:ed:a1:ad:da:14:a7:
ef:4d:45:ca:ba:90:a3:ec:72:2f:14:2d:82:b4:77:
0e:8e:19:02:11:99:04:9d:ac:fb:61:54:0a:8b:52:
cc:0a:bf:0f:c8:46:7a:93:56:45:28:e5:90:e7:ad:
53:4f:3b:01:46:2b:41:5e:d9:60:01:87:2f:ab:df:
31:54:72:14:c2:c7:97:3d:12:49:5c:18:6a:1b:2e:
c6:d7:23:9b:b7:4d:c4:61:65:a7:8e:e7:62:d3:d6:
fc:4e:9b:67:67:f3:5d:16:97:36:34:5b:b5:3a:f1:
45:e0:e3:eb:3f:3a:b2:f8:d7:55:c3:51:62:ec:6d:
63:04:9c:04:15:18:0f:42:eb:8f:75:71:56:1b:d8:
26:b1:c4:f0:a4:85:f8:9a:66:7c:a1:dc:4a:3d:6c:
ee:7c:8e:ad:7a:2e:2c:76:76:2c:20:65:07:fa:03:
21:9b:4b:a5:0e:f7:34:c2:31:9c:0e:a3:6b:e8:f0:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:02:6B:EB:C4:AA:6B:78:C7:16:94:96:A4:FB:2D:C7:8A:F0:52
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y-MCa-vEqmt4xxaUlqT7LceK8FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.174.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fe:a6:91:16:da:5a:8d:fb:03:f8:11:92:b9:41:a0:c4:27:
e8:55:aa:c9:b7:0c:0c:dd:ca:d5:2a:eb:2a:f8:65:f5:ad:f3:
a4:e1:9c:f9:8f:ca:f6:e8:dd:23:79:02:d3:62:4f:b7:37:3a:
df:03:66:55:ea:02:a1:a9:7a:14:c1:30:46:a7:94:83:49:fd:
09:ca:2d:c1:2b:c8:48:8f:a7:8d:ba:5a:00:c4:8e:53:e3:a4:
86:35:87:82:f7:87:d7:28:85:27:a2:a9:1a:3a:75:7b:f9:3f:
fb:20:5b:31:74:cc:f6:b9:f8:c7:f4:49:36:2c:a9:c8:4f:c5:
5a:16:a0:e8:66:5c:1c:2b:2a:79:69:34:92:6b:25:72:9c:6b:
0e:6d:29:63:46:1e:94:1c:76:e6:3e:55:87:b2:97:e8:74:70:
e1:d9:ef:6e:51:c6:1c:a4:e8:81:dc:69:c7:f0:af:83:a1:9e:
5a:13:cc:40:93:b2:90:ad:80:90:08:55:70:d5:54:95:23:be:
4c:a2:9d:55:fc:fb:6d:79:99:29:97:37:0e:2b:8d:84:a4:43:
30:38:53:9e:bb:1e:1d:dc:68:a9:18:2b:2c:fb:43:ee:70:d8:
ba:70:b6:be:76:a9:57:1b:f7:f0:6b:55:ef:20:8e:c2:84:14:
81:b6:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:02:04 2025 by rpki-client