Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa
File: yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa (raw, json)
Hash identifier: qiOINY/cn8YEDAmuQTaGlkCP5P8Lvc8wEzD+/y83uA4=
Subject key identifier: C9:E0:44:30:AD:16:3A:06:1D:30:52:02:27:CB:D9:FD:C5:8E:99:ED
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C60728BCD6CBD869E9B4BCCE934E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48628
IP address blocks: 185.161.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c6:07:28:bc:d6:cb:d8:69:e9:b4:bc:ce:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e04430ad163a061d30520227cbd9fdc58e99ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:9e:a7:7a:fd:49:a1:98:7e:3c:89:52:e6:
f9:6a:91:0e:74:01:f7:e3:9d:7c:e7:ce:fb:59:df:
d5:57:a5:d5:82:d3:dd:cb:c9:0f:28:25:a1:25:38:
d4:22:92:4c:70:90:1e:2e:34:5b:86:06:c5:14:40:
b4:dc:7a:72:10:27:cf:3b:d2:df:67:82:a3:b7:db:
d5:f8:2d:66:c3:c1:c8:40:52:a4:f2:14:c1:51:0c:
de:eb:38:e8:24:35:00:1e:26:81:03:e5:86:d9:93:
37:fa:62:e6:fe:3e:9e:08:33:7c:e8:02:1c:f5:4c:
05:4a:ee:2c:1f:49:40:c8:74:c7:1f:10:d6:0f:97:
e9:fa:3f:ce:1c:c1:5e:71:d6:2c:c7:96:79:f8:57:
c5:55:e4:b8:c4:f4:dd:af:e7:c4:6d:05:80:51:91:
62:12:33:bc:57:08:47:17:6d:20:96:a6:a2:e4:d0:
68:98:28:d8:fa:36:c2:10:43:07:a3:29:1f:5e:7d:
f4:25:af:0b:1e:ad:dc:79:71:17:3e:1c:ed:75:50:
f9:95:34:f3:b3:7a:cb:ef:01:8c:58:54:cb:fe:e8:
cb:07:36:02:a7:c6:d1:8d:27:c5:78:8d:16:2e:d7:
20:97:05:44:63:15:35:ca:7d:dd:86:ab:4a:5d:8c:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E0:44:30:AD:16:3A:06:1D:30:52:02:27:CB:D9:FD:C5:8E:99:ED
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yeBEMK0WOgYdMFICJ8vZ_cWOme0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f2:3c:d3:86:ae:05:ca:f9:34:e7:65:26:35:8b:44:69:82:
46:76:cf:81:2e:9e:72:84:79:c3:22:98:6a:1f:83:5d:fd:61:
c5:d3:29:c8:0b:24:f4:12:51:5b:3e:f4:9e:f4:ad:95:30:18:
d7:8e:2a:93:dc:4d:3d:e9:73:5d:69:c9:71:51:66:8f:4c:f8:
8c:94:e6:54:03:ce:d6:c5:47:ef:4e:79:79:27:c6:d0:b7:fd:
b2:e3:37:ac:ec:9e:64:2a:57:00:93:1e:36:82:3b:66:72:72:
ef:45:27:b9:70:26:49:8d:89:c6:53:70:3f:c6:a3:4b:48:59:
80:8d:0b:45:c6:75:03:20:59:ee:5d:4a:35:67:49:a5:b5:4f:
2e:fe:96:65:ff:e9:67:4c:2a:9e:8c:a6:7c:f5:c5:c0:18:6d:
86:46:ee:53:5e:a3:a6:f1:43:b4:09:e1:1a:cb:1a:34:af:44:
aa:65:f7:1a:3e:cd:5d:d2:4d:c0:14:38:d2:2a:8d:bc:b0:e8:
28:69:d5:4f:7e:20:1a:54:86:b5:2d:ad:98:51:6f:d8:66:11:
69:c8:34:0b:44:8e:bd:5f:78:3a:51:0c:57:40:17:a5:81:d2:
6f:ea:68:9b:69:61:2a:7c:5a:7c:b5:8a:6b:00:21:02:5f:7b:
dc:a7:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:59 2025 by rpki-client