Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/yuuro4DZVKBcq4qfaMzuK_H9btI.roa
File: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (raw, json)
Hash identifier: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=
Subject key identifier: CA:EB:AB:A3:80:D9:54:A0:5C:AB:8A:9F:68:CC:EE:2B:F1:FD:6E:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 0194258FACB0620853B03F6645DCEA763997
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/yuuro4DZVKBcq4qfaMzuK_H9btI.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60138
IP address blocks: 185.56.92.0/24 maxlen: 24
185.56.93.0/24 maxlen: 24
185.56.94.0/24 maxlen: 24
185.56.95.0/24 maxlen: 24
2a04:da40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:b0:62:08:53:b0:3f:66:45:dc:ea:76:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caebaba380d954a05cab8a9f68ccee2bf1fd6ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:5b:47:55:c4:9c:e1:bb:aa:49:c6:33:e2:
25:af:25:06:4a:e4:da:2d:a6:d3:54:ff:c7:95:53:
5e:a7:1a:16:71:1c:fc:8e:1d:ab:cd:68:ff:12:22:
9b:f4:ba:23:40:22:34:eb:68:d6:4e:48:e9:17:cd:
e3:3c:a2:43:c3:b4:3f:90:13:f2:25:52:7e:89:1f:
33:f5:31:96:3c:42:e8:c3:be:c8:ba:d5:6c:a6:3e:
9e:33:d0:83:92:c9:20:ff:58:b1:b6:91:72:7b:cd:
5e:9f:2f:b7:39:d4:19:35:05:eb:4c:6b:59:ec:d3:
09:d5:6d:98:4c:5f:96:23:2f:57:f3:a2:f2:57:61:
f4:0a:c2:fc:73:bd:72:e1:08:1e:4f:21:ab:47:6c:
db:8f:70:9b:fa:fa:04:43:3e:98:5e:a8:10:24:fa:
36:22:a4:49:82:69:c5:06:a0:fb:1f:76:24:9b:1d:
c4:ed:1a:e1:cd:c1:62:6f:5d:2b:59:36:b9:fb:b0:
d1:1e:e7:28:cd:31:0a:73:4b:7a:86:0a:f6:dd:0c:
ff:4a:fa:93:fc:18:f3:d0:de:05:0c:3c:b6:6b:67:
bf:3a:8a:12:db:df:da:15:99:92:80:86:80:25:64:
7b:7f:75:17:ac:6a:47:a9:19:df:30:b3:b4:45:96:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:AB:A3:80:D9:54:A0:5C:AB:8A:9F:68:CC:EE:2B:F1:FD:6E:D2
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/yuuro4DZVKBcq4qfaMzuK_H9btI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.92.0/22
IPv6:
2a04:da40::/29
Signature Algorithm: sha256WithRSAEncryption
59:ba:05:43:bc:7e:e2:94:75:f0:89:32:5e:e7:70:1f:31:53:
da:05:51:75:50:c1:d8:36:9f:ce:55:f4:b7:77:4f:54:cc:15:
c2:b5:91:1d:76:8f:75:89:2a:c9:12:53:d7:53:0e:98:a0:da:
71:5f:6b:bc:1d:c9:cb:8c:16:51:93:65:d0:5b:f1:1e:4e:7e:
17:32:44:b4:3a:6f:ba:a7:54:a6:d9:9c:19:41:15:0a:c8:5c:
e1:34:f4:d5:a4:4c:7b:bc:86:fd:c4:c7:5c:bf:b7:f6:3f:8c:
d7:54:7b:36:03:d4:a4:64:bc:65:bb:25:3f:0a:27:bc:9b:23:
44:82:8e:dd:65:e3:e9:39:df:02:fb:65:7d:c5:9b:53:7e:39:
43:e5:1d:26:d2:c5:f5:b7:e3:35:16:c0:ac:72:4e:76:55:57:
ff:41:dd:7d:1c:4d:ad:bb:de:27:51:a1:ce:d3:a0:5f:1e:81:
09:2b:e5:7f:4e:29:bf:9f:d8:02:66:33:70:74:81:3a:61:d8:
b9:77:1e:e5:d6:ae:7e:8b:ef:70:57:aa:09:57:11:b0:11:40:
75:de:40:c8:4f:f9:98:80:e1:fd:7b:69:57:19:6b:94:35:38:
71:74:36:75:7b:a1:6a:c0:86:ff:8e:8e:ab:10:e6:de:a2:3b:
e0:7f:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:21:44 2025 by rpki-client