Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ya8trGCL644z-VHQPggSk9_LO-E.roa
File: ya8trGCL644z-VHQPggSk9_LO-E.roa (raw, json)
Hash identifier: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=
Subject key identifier: C9:AF:2D:AC:60:8B:EB:8E:33:F9:51:D0:3E:08:12:93:DF:CB:3B:E1
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0194274874A4126CACAC739BCEAE20D79F5C
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ya8trGCL644z-VHQPggSk9_LO-E.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51945
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:74:a4:12:6c:ac:ac:73:9b:ce:ae:20:d7:9f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9af2dac608beb8e33f951d03e081293dfcb3be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:db:79:04:78:83:07:6b:67:33:5d:bc:ff:
3b:8e:ca:fb:74:61:80:e3:8f:c7:c3:fe:4b:c6:56:
cb:10:a4:7b:ba:90:96:bd:cb:80:a7:97:5b:4a:02:
88:9e:0f:ba:41:f4:47:7b:e3:9b:65:c9:f7:8e:ed:
1c:a2:9b:b7:11:c6:a7:20:fe:d5:c4:23:cb:ca:38:
22:42:d1:7e:e6:af:69:fc:7c:25:c0:90:4b:46:0d:
d1:53:ab:90:9a:72:02:23:df:41:d7:0b:94:f7:a5:
b4:6b:a4:5d:58:d9:7d:f5:65:a2:d3:cf:55:0d:04:
2b:1e:42:c3:84:3c:5c:fb:42:48:64:0f:d4:b3:f7:
e9:c5:9c:cc:0b:00:d6:96:47:5f:30:69:44:7e:5d:
82:36:8c:e8:f0:72:73:23:b7:e3:57:9d:59:7b:ea:
3f:ed:00:b9:9f:78:16:45:07:cc:fe:d6:ef:e9:b2:
a3:48:91:6b:12:c8:20:d0:08:03:ed:ec:b3:f3:f2:
75:12:76:3f:8d:9f:82:cd:6c:f4:0e:79:19:d8:c5:
0c:33:1e:1d:93:7b:f2:45:0e:04:62:c6:d2:ce:20:
69:15:99:48:73:68:fa:fe:79:bd:65:31:15:7e:de:
81:25:f2:cb:9d:af:35:53:e4:0f:2b:7a:72:82:53:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:2D:AC:60:8B:EB:8E:33:F9:51:D0:3E:08:12:93:DF:CB:3B:E1
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ya8trGCL644z-VHQPggSk9_LO-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:53:cf:42:11:03:57:a1:44:b1:d1:66:18:96:2e:35:72:e3:
e0:06:21:5b:ec:bb:b8:86:a1:6d:78:af:17:3e:3a:cc:79:ab:
a1:59:ea:9c:f8:4c:51:a4:6e:a0:6b:5c:18:db:6f:1e:32:ee:
03:76:4e:aa:c9:e2:bd:d4:46:05:c5:a0:f5:2f:39:72:cc:5d:
ae:87:ab:ae:ff:9c:c2:f3:95:e4:e2:a1:1e:b3:50:9e:66:a8:
f0:3a:29:09:28:53:af:32:f8:92:99:24:de:84:d9:16:fd:4a:
84:2c:14:7e:7e:23:5a:fb:6b:99:66:d8:36:75:36:99:19:a9:
be:76:78:6c:e0:8d:33:05:4e:66:c5:6c:96:5e:7f:c3:94:d8:
20:04:6f:61:e6:45:d5:b5:cf:64:93:fe:87:94:b3:bb:8a:5f:
f4:31:98:74:92:a7:0a:48:2b:0f:f3:57:a7:79:bf:0c:3b:66:
39:35:5d:89:75:b9:f8:8b:f0:db:7f:94:ac:18:4f:fc:7a:b1:
13:ac:da:2f:d6:15:7b:24:2b:47:ab:8c:30:61:13:09:12:71:
53:48:28:64:98:0d:21:a4:a8:f1:d8:cf:c2:69:90:ae:26:94:
3c:7a:ee:10:61:c3:4d:d6:c6:08:d8:ac:55:21:21:c6:74:54:
d0:85:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:39 2025 by rpki-client