Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/YHCQmZQSLzGov9OQrOkdfN0GjNg.roa
File: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (raw, json)
Hash identifier: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=
Subject key identifier: 60:70:90:99:94:12:2F:31:A8:BF:D3:90:AC:E9:1D:7C:DD:06:8C:D8
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 0194228DFCFDC2CB373825610F2B36419F86
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/YHCQmZQSLzGov9OQrOkdfN0GjNg.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210917
IP address blocks: 185.234.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fc:fd:c2:cb:37:38:25:61:0f:2b:36:41:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6070909994122f31a8bfd390ace91d7cdd068cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:af:80:21:54:02:02:32:d2:fa:1d:de:4a:
dd:6a:dd:73:42:08:a2:06:71:1a:b5:02:40:ab:48:
fa:88:fd:fa:31:45:4c:df:a2:3b:29:71:0b:f3:b9:
40:4c:0c:87:b6:e8:b3:13:af:fd:7f:38:40:b4:76:
47:2d:2f:ed:c8:8d:9a:6e:63:a7:dc:eb:cf:78:5f:
31:f2:26:3c:9c:19:5b:e8:12:7c:e8:ba:fb:5d:04:
9d:65:e6:72:40:12:11:1e:8c:69:d1:97:05:c2:f5:
c1:7d:7c:f2:78:d8:f3:67:74:d9:13:f0:90:e6:02:
20:2a:57:50:be:ae:c0:7c:ef:6a:d2:59:df:cb:ec:
7a:e1:97:8c:12:7c:b9:2f:b9:55:03:3a:3e:86:b6:
1c:df:a9:dc:f3:f0:c4:93:a7:89:7e:55:e4:6a:7c:
d3:e2:f9:11:c6:2a:3c:28:5a:c7:46:3b:9f:2a:a4:
5c:09:0e:70:ff:56:9d:93:06:fb:1a:36:c8:26:26:
de:bd:6f:3d:20:ae:57:ee:7a:34:4e:e8:af:fe:3d:
58:46:14:e7:89:5a:73:f5:47:ff:fd:34:ae:59:e4:
29:b6:a6:69:b1:70:69:45:29:2d:5f:f1:5d:a4:d7:
6c:07:a1:f7:c6:28:0a:56:8d:5f:67:aa:a6:84:b1:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:90:99:94:12:2F:31:A8:BF:D3:90:AC:E9:1D:7C:DD:06:8C:D8
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/YHCQmZQSLzGov9OQrOkdfN0GjNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.110.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c4:33:af:c3:22:30:fa:1a:f1:58:24:50:86:ae:3d:a9:02:
1c:81:a2:5a:1f:95:91:fb:be:6c:ab:a2:e7:05:9c:68:5a:c5:
46:3b:de:4a:3a:71:24:2b:31:dd:8f:43:1c:13:2a:fa:d1:3c:
1a:6b:a6:d6:7d:06:8f:9a:d7:ed:fc:5b:e8:16:71:af:eb:d9:
cb:2a:66:05:64:6d:b5:42:24:28:df:a0:82:f1:3f:31:07:f9:
a9:1b:03:d1:01:d3:01:47:10:ca:6d:b7:d4:ff:9a:16:c0:97:
9c:91:13:21:47:c3:d8:c0:53:c6:5a:33:a5:80:2a:05:6b:b8:
c3:09:06:0f:c3:71:da:ba:51:16:ac:6f:c5:29:b0:f2:3e:a6:
70:ea:38:6a:d9:d8:7c:b6:7d:68:51:98:fb:bb:6e:ef:12:88:
0b:6b:2c:e6:12:76:fd:28:2c:d9:81:b8:44:4c:6d:0f:c2:f1:
74:a3:21:d3:a0:47:e7:16:9a:02:b4:ea:eb:50:25:0a:2d:d0:
ba:ed:13:62:06:e0:91:c3:20:94:9b:16:ed:25:c5:e6:98:9e:
b9:0c:77:63:c0:ad:15:52:1f:90:58:5f:5b:67:ca:a5:8b:65:
78:ff:00:fd:11:15:d9:ba:e5:d6:7e:5f:e9:ba:c7:2b:04:04:
07:fc:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:47 2025 by rpki-client