Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa
File: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (raw, json)
Hash identifier: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=
Subject key identifier: C9:31:6A:3B:9C:62:68:80:D2:08:93:49:FD:95:2A:6C:A4:B2:A5:D4
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E7BD71B09F2617F2386EE13D52B8
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206435
IP address blocks: 185.126.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e7:bd:71:b0:9f:26:17:f2:38:6e:e1:3d:52:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9316a3b9c626880d2089349fd952a6ca4b2a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:44:7e:8a:6f:5e:dd:88:fe:84:89:42:6d:
32:d8:4a:71:97:36:25:a7:dd:22:58:d0:95:91:45:
7e:43:af:8f:64:c8:67:a5:d2:17:33:10:a7:c1:f5:
b4:36:82:ba:f8:6c:35:6f:91:f8:cb:34:23:64:54:
70:22:a9:04:e3:69:40:f4:b1:e6:eb:3e:53:db:e7:
34:91:96:53:b0:4b:c0:95:e0:55:6e:1d:b8:fe:40:
12:6a:49:16:94:3d:5e:8d:fe:66:94:4a:df:f6:1a:
16:d6:1e:2c:c6:a4:2d:cf:1f:b5:3f:0e:cb:48:7f:
34:ba:67:2c:7a:ab:d0:52:86:dd:98:39:3d:a4:34:
ac:6a:05:a0:ce:1b:c2:e0:2a:9a:0d:86:8d:fc:8a:
bc:1f:aa:40:57:fe:0c:4f:1d:16:33:fb:dc:3a:05:
8a:05:dc:d1:b9:dc:52:dc:d0:4a:45:4e:0b:60:92:
d4:26:4e:2c:4e:8f:ff:eb:9b:54:d1:f9:ae:d5:3f:
92:85:5f:23:aa:52:13:14:dc:85:3c:a2:52:0a:cc:
43:f5:3d:f7:8b:7a:0e:6e:51:f4:bd:8c:c0:ac:78:
21:32:b3:20:26:8e:5c:31:82:cc:32:c5:d1:c3:04:
a3:78:b4:fc:ae:f5:07:08:79:54:0e:14:dd:c6:87:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:6A:3B:9C:62:68:80:D2:08:93:49:FD:95:2A:6C:A4:B2:A5:D4
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.180.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:59:d0:9b:6c:57:ae:4e:39:57:12:29:b4:57:b8:bc:7b:
a2:50:aa:cb:d0:fd:ea:d8:37:27:00:d4:21:97:3b:f7:82:ef:
d1:e2:99:0e:84:15:b3:22:e0:59:0a:be:56:38:5d:1f:3f:c2:
17:28:82:64:b0:8c:0c:c0:ba:b3:22:23:32:82:81:8a:ac:ce:
e3:a3:46:e3:e7:a2:29:30:d9:6d:a5:27:38:8f:c1:f6:60:50:
a5:26:a2:bf:54:23:a5:be:08:7e:a0:f2:39:03:09:52:03:a5:
19:02:e2:86:d8:0f:c8:4d:57:66:70:30:5e:9e:ed:d0:38:37:
1e:4e:e2:2e:ae:04:09:01:bd:4d:51:cb:5f:0e:bd:51:38:dd:
51:11:c9:e9:25:0e:50:24:a9:e6:22:2b:57:ce:e7:58:7f:85:
50:dc:eb:7d:65:6e:88:24:26:e7:bf:cf:fc:2e:87:40:96:a2:
0a:da:d5:2b:88:49:4f:b1:9c:41:e5:8c:eb:4d:83:1f:d8:d9:
9a:d4:da:3e:b5:61:ba:95:fe:10:82:0e:8e:5d:80:3d:39:82:
cb:7b:da:b9:a0:11:0e:ce:b9:72:54:16:ce:b0:73:75:c8:b1:
e1:7f:bc:90:79:38:0a:ed:58:60:11:ae:47:9e:57:40:93:7c:
c9:c2:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:01:51 2025 by rpki-client