Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/jyBvJ0cOfKi9WwiQt60pyraI-oY.roa
File: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (raw, json)
Hash identifier: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=
Subject key identifier: 8F:20:6F:27:47:0E:7C:A8:BD:5B:08:90:B7:AD:29:CA:B6:88:FA:86
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019421B1F6919C3613E43D8ACA6B7C19CA18
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/jyBvJ0cOfKi9WwiQt60pyraI-oY.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.65.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f6:91:9c:36:13:e4:3d:8a:ca:6b:7c:19:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f206f27470e7ca8bd5b0890b7ad29cab688fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:76:d3:39:34:ea:0d:62:59:29:2c:0f:53:
f9:3d:b1:02:17:20:de:f6:b6:ea:d4:71:95:48:48:
6c:48:a0:b0:74:7f:73:a4:f0:3c:e4:bc:cd:84:bc:
c6:e0:bd:c2:78:04:d4:d1:8e:2b:a5:08:eb:12:bd:
41:54:c0:44:11:4a:2e:be:d2:d1:5b:ac:a8:1e:fb:
e2:ed:9a:a0:8a:4d:62:09:5e:ad:d8:c1:3a:8c:cf:
a9:fb:97:51:9a:00:87:e0:ab:5b:85:e2:4e:53:05:
cd:29:78:12:af:51:3c:57:ed:25:ba:2f:ae:e5:bb:
e0:9a:4e:13:93:0c:84:9c:2a:26:e2:11:e2:14:1e:
84:60:12:d4:98:6c:01:d7:01:b4:57:12:ff:59:fb:
1c:35:64:96:73:00:b7:31:45:1a:a2:ef:e4:24:7f:
fa:7f:5b:fe:ff:57:a3:87:11:e1:63:c1:57:0f:4e:
2d:ae:ef:06:e6:80:e2:ed:a7:fb:77:f3:b2:1d:3c:
73:99:6d:38:4a:de:8c:4b:55:d1:c0:db:a4:4c:b4:
67:dd:32:61:0c:80:dc:36:d0:78:c1:48:e5:fc:b2:
fe:9d:fe:ab:9f:4f:08:e9:86:2c:de:82:6e:2e:56:
96:e6:03:99:14:ad:23:0c:29:f7:f7:bd:18:64:a3:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:6F:27:47:0E:7C:A8:BD:5B:08:90:B7:AD:29:CA:B6:88:FA:86
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/jyBvJ0cOfKi9WwiQt60pyraI-oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.252.0/24
Signature Algorithm: sha256WithRSAEncryption
78:11:91:a1:16:f7:6b:a6:09:cb:05:2e:4b:ea:ef:c1:06:fd:
7e:e2:bf:33:41:98:90:e2:c5:e2:20:dd:57:eb:3e:fd:c2:f1:
4e:36:98:51:d1:ba:ce:37:32:5f:58:3a:44:2b:51:c6:06:a6:
99:78:a4:86:bf:2c:4c:dc:73:e6:03:d9:fe:be:9b:9c:58:6a:
a7:1b:8a:f4:57:68:2d:90:18:2c:ba:06:1a:d8:aa:44:bc:8a:
55:f5:f8:e7:22:98:3d:16:08:37:4b:0d:72:55:a4:7d:67:95:
5b:4e:ad:5f:55:fb:f1:51:69:14:6c:fd:30:93:33:2e:77:4c:
12:c3:9f:9d:48:1b:1d:59:3f:3a:97:3c:ad:a7:1e:85:96:94:
e6:49:a1:9c:ec:88:ab:07:92:45:1e:8f:10:c1:ed:97:75:d0:
5c:42:63:70:41:32:f6:8c:04:98:a9:8c:06:cd:44:8e:3d:c3:
fb:9e:07:6e:bf:a4:15:a3:c7:83:ce:a5:49:d6:b0:1a:fe:9e:
8e:c7:e1:06:1f:4f:b6:97:a8:6a:4b:a9:41:cf:59:31:03:36:
b9:b6:fe:92:e4:c3:81:6c:56:14:bb:5b:2f:6b:08:b9:3f:cc:
2b:89:84:26:8a:ba:2f:3b:ca:32:90:3a:41:a6:0a:a4:05:68:
8e:ce:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:29 2025 by rpki-client