Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/yetABbyl2MadBOs3otjwQ2Snhiw.roa
File: yetABbyl2MadBOs3otjwQ2Snhiw.roa (raw, json)
Hash identifier: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=
Subject key identifier: C9:EB:40:05:BC:A5:D8:C6:9D:04:EB:37:A2:D8:F0:43:64:A7:86:2C
Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial: 0194221F748858545A1E3B36680B08C7FD86
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/yetABbyl2MadBOs3otjwQ2Snhiw.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210431
IP address blocks: 185.140.175.0/24 maxlen: 24
2a12:7380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:74:88:58:54:5a:1e:3b:36:68:0b:08:c7:fd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9eb4005bca5d8c69d04eb37a2d8f04364a7862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:88:6b:b3:02:99:b4:a6:d8:ad:d1:1f:18:
a6:1c:d9:62:77:97:d0:ad:a4:af:e8:31:12:32:d1:
6c:7b:c4:d2:b3:b4:30:4f:f4:f5:09:50:1b:61:34:
ba:f3:ae:bc:76:fb:83:a7:b2:89:42:46:2f:43:a7:
63:93:e4:ae:0b:13:46:44:01:4a:90:48:e9:31:34:
b4:15:03:e4:2e:66:12:28:dd:4d:51:55:56:16:8b:
63:59:97:7f:26:69:c7:dd:c1:fa:30:9d:00:7a:f7:
3a:30:7e:82:bb:d4:ec:9f:ff:e6:03:24:66:30:c5:
6e:e6:9a:d5:6c:0f:3d:eb:8c:57:3b:01:ca:f9:df:
47:47:49:cb:58:da:69:a7:20:17:72:52:2b:a7:4e:
f7:77:b2:87:ad:85:54:77:5c:d3:97:5d:7b:26:97:
f7:b0:57:e3:0d:f6:d9:45:af:a6:e4:3f:f6:2e:9a:
df:1e:9f:93:84:f2:54:a2:51:55:71:12:17:91:42:
53:55:b1:e5:4d:fb:e2:21:f9:7c:50:30:8f:bb:a9:
90:75:12:29:26:96:d2:e3:69:b2:9b:50:20:3d:cb:
0f:5e:7a:93:4d:90:03:b4:07:d8:e3:2b:3b:2d:66:
60:4b:55:a8:f9:ea:46:69:b8:8c:03:70:64:69:05:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:40:05:BC:A5:D8:C6:9D:04:EB:37:A2:D8:F0:43:64:A7:86:2C
X509v3 Authority Key Identifier:
keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/yetABbyl2MadBOs3otjwQ2Snhiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.175.0/24
IPv6:
2a12:7380::/32
Signature Algorithm: sha256WithRSAEncryption
73:7c:06:77:b3:7e:e7:3a:40:01:7b:a5:79:df:2a:31:2e:7c:
5b:4b:06:28:04:eb:bd:39:87:f1:06:48:58:e6:28:11:e3:3c:
eb:97:64:d5:9c:9a:0f:7c:65:01:3b:fb:e0:c3:45:0f:c0:db:
15:7c:a3:46:fe:2f:d7:1f:dd:8b:67:a7:f2:d6:cf:5a:09:2c:
67:b9:b8:b5:f8:23:f9:c9:0c:33:90:a2:b7:4f:f6:ee:16:72:
80:84:d6:9b:21:6d:1e:1e:3e:c5:7b:0d:89:6c:8a:78:e2:96:
59:22:bf:0b:00:53:c3:d6:d9:90:f0:18:35:3b:bb:df:a9:c0:
cb:d2:ad:48:39:8a:2c:02:53:39:6b:61:08:c0:1a:a8:28:1b:
5a:bf:3f:bb:2f:16:dd:82:ae:8a:be:d0:d9:01:7c:b4:86:96:
52:a2:a2:76:6e:41:70:7c:47:6e:80:7d:7d:77:16:ca:34:bc:
6b:4d:62:3e:db:33:11:0a:4d:1a:15:13:cd:e8:06:b2:fc:41:
5e:c2:35:1f:97:06:81:28:7c:6f:76:87:9d:6d:73:19:09:cb:
1c:59:c8:b9:a7:6b:17:b2:1a:01:17:98:77:74:25:c5:89:f9:
dd:80:48:6c:11:88:22:c3:9b:95:47:dd:d1:c6:51:c0:e1:ea:
e3:f2:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:04 2025 by rpki-client