Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/98yJd6CKF69Dg_9ycsUvR-BETQs.roa
File: 98yJd6CKF69Dg_9ycsUvR-BETQs.roa (raw, json)
Hash identifier: 3Ev+3DyYqmisojiXYuD5v3lmrru0HzcvSLE+oEhCf8E=
Subject key identifier: F7:CC:89:77:A0:8A:17:AF:43:83:FF:72:72:C5:2F:47:E0:44:4D:0B
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019425FD4DFF874C476911CAB5B2DF6F33B2
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/98yJd6CKF69Dg_9ycsUvR-BETQs.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 185.5.147.0/24 maxlen: 24
195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
195.64.124.0/24 maxlen: 24
195.64.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4d:ff:87:4c:47:69:11:ca:b5:b2:df:6f:33:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7cc8977a08a17af4383ff7272c52f47e0444d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:ba:14:91:43:48:30:21:53:9d:55:f3:ee:
d4:c0:4a:4d:85:e7:1d:1e:3b:1a:a6:ea:b5:17:aa:
fc:a5:55:ed:73:be:b7:c1:e0:3d:7a:d0:ac:09:2b:
1a:47:e9:61:fa:51:59:27:0f:5c:ef:8b:78:f1:34:
2d:00:1e:5a:23:3e:2f:fa:19:45:46:bf:bb:6e:2d:
95:5a:4b:d7:ce:1d:0a:9b:0d:02:7f:0a:22:c6:4e:
f6:40:8c:9b:ee:6b:7c:1f:36:82:05:8b:cf:b1:8f:
5e:8d:32:67:95:e1:5b:10:3e:b7:f7:ca:00:75:64:
5f:03:69:8d:96:24:89:f5:9f:2f:fe:ea:c8:37:e2:
ab:44:d5:04:e8:20:86:1f:a2:60:45:96:6c:92:61:
eb:93:d9:37:a2:4d:a2:9e:fe:69:93:9f:ad:26:7f:
37:e6:29:ab:e6:f1:31:59:18:69:fb:80:ce:d9:71:
02:e0:06:75:6d:19:19:43:a9:5e:72:25:74:92:95:
05:d6:ca:e2:4d:63:c0:ac:44:4b:c1:9b:5b:18:2a:
18:7e:57:26:b3:d6:82:42:5d:d5:fb:01:d0:47:26:
c4:4d:47:56:cd:73:f0:1f:74:81:44:03:76:3f:dd:
94:92:73:c3:53:59:9f:d1:c6:02:bd:c2:10:a1:77:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:89:77:A0:8A:17:AF:43:83:FF:72:72:C5:2F:47:E0:44:4D:0B
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/98yJd6CKF69Dg_9ycsUvR-BETQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
195.64.120.0-195.64.125.255
Signature Algorithm: sha256WithRSAEncryption
28:4f:d7:f8:c4:b9:f2:e0:e4:3a:25:c7:32:93:d5:72:63:7b:
5a:da:c5:b8:90:a2:eb:b9:3e:a5:d6:f3:4b:61:83:66:28:04:
59:63:67:f9:4a:88:8b:e9:45:40:66:7c:70:65:5e:7e:7e:36:
9e:db:db:77:57:3b:76:2c:75:e9:f1:78:0e:4c:32:c0:43:47:
01:c8:95:0c:55:75:7d:2a:0c:50:ae:07:b0:0f:18:9c:d8:1c:
33:2c:82:49:e8:24:19:01:ed:12:61:cb:04:81:bb:f2:47:98:
f9:af:ab:5f:93:9a:d3:d5:5c:22:b3:9f:17:db:8f:6c:ce:e2:
ed:67:14:0e:21:b8:3e:ee:af:a1:b6:bd:de:09:8f:37:28:26:
4a:61:f7:c2:54:54:fe:4f:7d:e3:20:87:ea:fd:c9:b2:9a:6a:
df:37:83:37:d7:bc:ed:3e:3e:73:de:43:9b:a7:d6:ba:84:54:
d6:1d:36:ac:92:d4:1f:25:19:7c:2e:86:48:2d:6e:31:a2:86:
61:e9:90:83:40:2c:d8:3f:f5:75:94:e3:bb:3d:46:95:d3:12:
a4:70:55:6d:ee:65:b3:0a:72:c2:62:5a:3c:93:0f:16:12:2b:
ac:4a:0b:94:ef:c8:c1:e0:aa:36:5a:27:05:10:1c:2e:7f:3c:
06:d2:80:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:02 2025 by rpki-client