Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa
File: yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa (raw, json)
Hash identifier: XOXs8qRUtBdFjA6Dpn1zPYBHYPckC8k/wFskDMsHcgE=
Subject key identifier: C8:8E:AC:19:42:C2:B6:F1:E6:70:DC:A1:94:8D:C8:6F:DC:E8:26:1F
Certificate issuer: /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial: 01963067A007413BB0B53059C158C0C6A962
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa
Signing time: Sun 13 Apr 2025 18:26:59 +0000
ROA not before: Sun 13 Apr 2025 18:26:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215308
IP address blocks: 185.175.11.0/24 maxlen: 24
2a0d:187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:67:a0:07:41:3b:b0:b5:30:59:c1:58:c0:c6:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Validity
Not Before: Apr 13 18:26:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88eac1942c2b6f1e670dca1948dc86fdce8261f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:f2:e7:3b:75:59:49:df:54:6b:e1:7d:63:
30:1a:ac:b2:37:64:f1:27:2c:d2:ed:45:a7:b9:e0:
fb:7e:03:f4:9c:53:f4:7e:09:fc:b6:47:9d:6b:9d:
26:21:9f:d2:67:13:bf:74:d7:20:04:3e:62:3b:36:
46:11:ed:ae:09:2e:f2:f4:26:97:ec:7e:ad:10:93:
62:f2:9a:a2:1d:db:2f:79:80:4c:6b:f0:cc:b4:e7:
92:5d:d8:6a:4e:4e:9a:ef:c1:d1:fd:fb:c4:93:75:
f1:bf:2b:77:5d:c6:81:9e:6c:7f:15:cb:c0:ad:2c:
2b:c2:43:84:99:f3:d6:d5:c3:cd:91:ca:0d:c9:73:
04:31:92:74:83:e5:1f:de:74:c6:77:aa:1a:dd:18:
20:ac:4c:6d:e2:51:41:79:1a:6e:c1:f3:e7:58:98:
f6:16:7e:a2:64:86:55:9a:f7:d6:3f:fe:f0:55:9c:
65:7e:4b:3a:92:0a:a0:2e:f9:c5:90:05:f0:79:16:
70:71:94:9f:99:64:2c:37:9f:90:90:83:ef:4e:58:
2a:a4:f4:68:63:ba:d0:4d:24:2d:fe:f0:f4:a3:50:
d8:2e:1a:69:a3:60:1b:75:20:72:27:cb:3e:5b:d0:
56:2a:be:7d:7b:47:00:c5:76:f2:8c:d2:bf:b4:99:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:AC:19:42:C2:B6:F1:E6:70:DC:A1:94:8D:C8:6F:DC:E8:26:1F
X509v3 Authority Key Identifier:
keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.11.0/24
IPv6:
2a0d:187::/32
Signature Algorithm: sha256WithRSAEncryption
5e:37:79:cd:02:d5:d0:a7:f9:a1:44:fd:a3:a1:00:29:d6:b4:
32:00:64:15:d2:82:57:e8:23:c1:ba:52:3b:a8:b4:d0:bf:13:
2f:e0:a0:8d:81:8b:e3:6c:cc:c8:cd:e6:cc:e9:34:cb:dc:67:
88:4c:b5:6d:d2:6e:c1:57:53:d2:14:44:de:af:a5:39:04:70:
9b:5f:ab:19:08:a0:dd:44:e8:42:35:26:8b:ba:ab:b7:5a:c4:
03:73:0c:b8:3c:f0:35:1e:1a:01:75:89:a5:e5:79:5c:52:87:
bd:e1:6e:76:96:7f:55:0e:7e:23:d7:ff:6f:0c:e9:95:a1:19:
49:65:db:a1:bc:1f:cd:b8:3b:25:b5:02:78:87:a5:24:5d:14:
0b:2f:b5:5a:e5:9f:65:2c:e3:97:db:9d:1d:ea:93:05:92:d2:
9e:01:6e:e0:a8:a3:b3:05:ae:81:ef:f0:4b:8c:9d:fa:eb:e7:
17:23:04:28:9e:b1:a6:f9:8a:a8:78:fa:be:04:81:ec:eb:8e:
db:18:98:c3:61:b9:4d:54:dd:6d:a4:95:9a:cb:54:7d:16:df:
83:c5:c6:a7:5a:86:65:8c:84:e9:ad:b4:2f:72:d7:5c:25:cd:
3e:37:49:e3:15:d6:d4:e9:ea:59:b0:9f:14:56:36:96:88:0b:
9f:9b:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:53 2025 by rpki-client