Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/ypZztjZlxetD-72tfNr-C4vUMMo.roa
File: ypZztjZlxetD-72tfNr-C4vUMMo.roa (raw, json)
Hash identifier: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=
Subject key identifier: CA:96:73:B6:36:65:C5:EB:43:FB:BD:AD:7C:DA:FE:0B:8B:D4:30:CA
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 019420D6250E325491033922AE44D48BEBEC
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/ypZztjZlxetD-72tfNr-C4vUMMo.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 185.59.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:0e:32:54:91:03:39:22:ae:44:d4:8b:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9673b63665c5eb43fbbdad7cdafe0b8bd430ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:eb:5d:e8:8a:1e:bf:e8:47:20:3f:ed:a0:
56:aa:da:60:23:2a:1d:b4:85:b8:78:a2:e7:13:05:
d4:93:88:a8:63:51:b5:65:e1:4b:2e:87:a0:da:8d:
a2:a0:57:2d:93:70:a9:5d:f2:46:de:28:35:c7:b4:
da:f3:0e:af:f0:2c:39:53:08:2d:ae:f8:c8:ce:6f:
04:a1:3f:3d:c2:07:c4:3d:a5:fd:cd:9f:ec:a6:1f:
54:fd:24:1a:a1:14:43:2f:e1:02:80:d0:05:9c:37:
89:1c:24:5d:08:f1:9f:62:98:b4:37:c7:e7:e5:21:
de:5e:bf:f0:c9:e5:de:b9:76:d0:98:0f:09:6f:5d:
bd:48:28:87:16:d7:cb:cf:54:03:d5:f9:eb:03:56:
d4:16:75:f7:47:15:fa:27:48:de:2e:03:8e:84:8e:
72:4c:48:08:dc:28:12:8f:d8:e0:93:7e:01:0f:82:
20:aa:34:41:3b:09:13:94:16:cf:e8:a4:d5:fe:67:
3b:5c:29:86:cd:96:7c:80:57:6c:3e:ab:e2:dd:a5:
c4:06:fe:96:a8:9f:ca:a7:ca:0d:b7:f9:a2:25:b1:
b9:a4:71:a9:13:93:d4:7a:61:10:ce:68:b7:c0:cf:
5a:6a:d4:ab:ab:9b:fe:3b:3d:14:f1:c9:2b:4d:de:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:73:B6:36:65:C5:EB:43:FB:BD:AD:7C:DA:FE:0B:8B:D4:30:CA
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/ypZztjZlxetD-72tfNr-C4vUMMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.156.0/22
Signature Algorithm: sha256WithRSAEncryption
94:af:04:33:8c:f7:6a:24:6d:7f:d9:c3:41:0d:a1:d1:06:0e:
3c:df:a2:4b:be:46:99:46:86:be:ac:cc:a3:ff:c9:a9:b0:15:
62:ec:1a:b1:38:88:32:c6:03:89:c0:2d:18:ef:cd:35:55:6d:
6b:f0:9b:9b:bd:f2:fa:25:9f:49:9d:9d:1a:55:96:13:93:a4:
8b:e4:a1:d1:0a:b3:ec:10:22:50:0f:0c:f6:c5:2b:f7:fb:81:
bb:a1:c9:8d:c0:e8:84:38:c3:1d:56:0b:16:f8:4d:07:e7:2b:
72:42:c9:9f:87:dc:20:c9:f3:5a:11:aa:65:1a:50:8b:cd:56:
b2:75:4c:4d:be:c3:1b:0d:bf:4f:4e:d3:c7:d7:b3:33:51:a1:
c5:fb:a8:ee:e6:a4:2a:73:07:ac:c4:7d:50:30:68:22:e1:ec:
fd:dd:4f:d3:61:79:ff:87:18:0b:98:b4:c9:30:97:ec:3f:15:
00:08:e8:53:b9:13:e3:20:54:be:4f:05:b8:b4:65:4d:f1:06:
ad:6b:c7:d2:8e:f3:45:20:f8:97:9e:65:89:f4:90:90:3f:ba:
bc:ea:1d:fe:24:b3:07:8c:79:b8:74:7e:bf:83:79:86:f0:0b:
6e:8b:05:40:7c:d2:d2:1c:a5:5d:9f:40:81:13:a5:79:54:79:
59:da:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:00 2025 by rpki-client