Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa
File: C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa (raw, json)
Hash identifier: 0TAu53NWs0YR6cx7TDfJzDZx9gyaFfPOZu8ZpGicQ9k=
Subject key identifier: 0B:96:1E:E8:05:BE:F7:C8:2F:7E:72:A1:DC:12:C9:49:5E:62:A6:86
Certificate issuer: /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial: 0194236A37CC9B7530F53F116476DFF7C282
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205757
IP address blocks: 185.198.52.0/24 maxlen: 24
185.198.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:37:cc:9b:75:30:f5:3f:11:64:76:df:f7:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b961ee805bef7c82f7e72a1dc12c9495e62a686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:d7:5f:1a:e2:ae:c2:6b:15:21:ec:02:4e:
aa:1a:dc:ad:a8:da:d4:ab:21:f6:27:f0:ec:03:fb:
45:a4:28:34:4b:73:54:70:ab:e5:21:93:09:2a:78:
8d:2f:a1:99:60:5a:3f:ed:87:39:ff:b9:09:9c:6f:
17:8a:62:52:00:9f:6c:3f:3d:aa:d5:a6:a0:f6:7e:
e8:67:79:b0:75:98:0a:a1:4d:d6:57:50:e4:a7:b3:
35:85:ee:18:30:d0:8d:6b:d9:27:a0:76:fc:ec:08:
23:59:65:f3:6a:10:df:ca:08:3e:82:2f:d5:23:db:
89:00:a5:2c:ed:c9:a3:a5:71:b5:bf:fa:e7:74:23:
64:f1:56:25:a8:a9:d4:5e:0f:44:da:3a:3c:ae:43:
65:ef:38:1f:54:d8:bc:89:b2:d4:fd:f6:21:57:5a:
23:8c:26:02:d5:7f:bf:b7:ac:a9:98:69:04:b3:db:
8a:af:e8:39:7e:26:2f:71:a5:07:63:66:cc:95:d5:
cd:a1:1a:07:b5:b8:54:9d:c1:6d:ba:81:54:b9:4c:
90:6b:6b:23:c1:c5:64:58:5b:f7:19:de:98:cf:2c:
53:cb:18:bb:26:f4:75:0e:a1:03:78:4b:88:5f:c5:
79:f0:84:d5:47:ae:20:eb:f4:79:02:8b:94:1f:3e:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:1E:E8:05:BE:F7:C8:2F:7E:72:A1:DC:12:C9:49:5E:62:A6:86
X509v3 Authority Key Identifier:
keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.52.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f6:e5:4e:79:0f:0b:bd:43:aa:f1:1f:62:b7:a4:89:88:89:
d8:f9:3a:cd:1c:4a:07:10:f2:1c:c3:de:e2:47:3b:62:ec:36:
4d:78:0a:33:cb:4e:43:73:cc:76:21:3f:6e:4c:76:6c:16:96:
7d:54:2a:6d:fb:73:4b:49:60:2d:06:8b:c5:99:a5:fc:37:8c:
88:c4:22:79:71:a8:54:4d:31:e2:eb:17:b4:94:79:21:bb:86:
e1:85:00:b0:5f:24:58:fb:70:c1:df:be:1e:03:39:97:f5:99:
e3:b5:3d:3a:a9:be:35:78:89:70:69:f2:e2:f9:4c:47:21:f9:
f8:5e:b8:1f:07:f7:3f:a9:23:44:21:12:59:15:89:73:b3:3a:
8d:21:7f:88:53:72:54:ac:1e:26:e7:1c:77:bf:e1:f9:9c:d6:
da:3f:e4:85:fb:16:bb:85:ce:39:1e:29:7e:8d:d6:de:ca:26:
e0:42:8f:18:f0:99:20:07:56:41:82:6a:66:18:3d:ec:29:44:
d6:bd:a5:48:08:6c:d5:96:68:60:da:54:6e:58:b1:9a:2d:cb:
2d:1a:ab:cc:11:3a:e7:c3:81:22:ea:7a:8c:86:62:91:aa:2c:
46:92:b5:e3:55:07:d4:b0:8e:d7:a6:e5:a3:c8:7b:44:2c:50:
c3:45:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:57 2025 by rpki-client