Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/5aYNWnqt5MGeMuyfI5maKIJbJY4.roa
File: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (raw, json)
Hash identifier: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=
Subject key identifier: E5:A6:0D:5A:7A:AD:E4:C1:9E:32:EC:9F:23:99:9A:28:82:5B:25:8E
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0194228E263A74162EBBAF4A0FE851542FC6
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/5aYNWnqt5MGeMuyfI5maKIJbJY4.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 185.214.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:3a:74:16:2e:bb:af:4a:0f:e8:51:54:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a60d5a7aade4c19e32ec9f23999a28825b258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:65:b9:e9:89:60:ec:92:7f:87:a4:58:01:
34:47:17:fd:85:da:c6:21:86:83:89:a1:57:f4:a8:
57:29:c0:b3:29:0a:12:94:5e:9b:8f:eb:1a:fd:5c:
c5:b3:90:b0:11:c1:cf:ed:d1:5e:9a:be:4e:73:ab:
19:e5:43:ed:0c:7f:d5:af:2e:2f:48:ef:31:0e:c0:
52:d2:b2:ba:ed:cd:d8:ed:ca:c9:11:2e:74:a8:28:
f5:34:a0:41:50:20:a2:54:42:44:93:69:f3:01:ec:
c1:6b:86:1e:42:53:a0:bd:2e:13:0a:3e:25:21:2e:
bc:61:7d:26:3f:7a:9a:96:ba:b4:af:82:67:55:48:
0b:cb:3c:37:1e:b0:14:84:d6:72:a4:ea:db:91:04:
49:f2:65:60:30:8d:87:33:08:e9:53:9d:fa:57:5b:
40:63:5b:97:e6:1d:3e:2d:0a:3b:22:da:96:99:c3:
87:8d:07:6a:05:bf:3c:1c:bd:86:2c:18:6e:00:53:
34:26:48:0e:22:8a:3d:ba:b3:62:53:9a:f7:f9:e4:
6b:1b:f1:ea:29:d1:9d:8d:b7:73:af:30:f2:1a:2c:
37:76:43:93:58:e2:4d:08:89:0a:eb:cd:61:1a:d4:
0f:a8:c1:a2:fc:ee:ec:26:93:5c:5b:8d:de:a2:91:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:0D:5A:7A:AD:E4:C1:9E:32:EC:9F:23:99:9A:28:82:5B:25:8E
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/5aYNWnqt5MGeMuyfI5maKIJbJY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7e:97:7a:4d:0b:16:1e:59:7b:11:fb:2a:77:92:78:77:b3:
21:00:80:a7:bb:67:4a:14:b3:c0:2b:97:5b:ad:7f:f8:ee:96:
65:25:4f:33:5f:c4:e8:78:c4:5e:0d:46:ee:47:e3:9a:3a:4d:
10:57:ea:e0:9d:d8:35:13:95:6c:07:f6:2c:fe:7d:fc:27:d8:
74:d7:48:0d:5c:34:53:83:51:f3:5f:2d:4c:5f:e0:55:9e:81:
03:e5:40:81:67:df:ab:47:d3:25:7f:c3:03:b8:5f:37:5f:18:
a5:5d:11:bc:4a:7d:7b:c2:64:23:fb:d0:32:2d:03:9c:d0:32:
f8:1a:19:f3:97:ae:94:3f:34:71:7c:e8:af:24:62:59:d3:87:
4c:a0:14:f6:97:fd:c4:81:5b:39:48:d0:06:a8:29:72:45:ab:
5b:e4:c8:c6:c7:04:b8:ec:ff:d3:2c:3f:c1:68:0f:f0:c6:d5:
02:b3:f8:45:8d:12:7f:b3:87:9a:4a:c7:c0:d6:e4:bb:e5:43:
5b:52:bf:66:d7:6a:ac:78:ec:47:b6:d7:c2:ac:83:d3:24:e9:
02:64:1f:f1:1f:87:45:20:4b:e0:0d:0c:d5:e7:cd:d3:c7:92:
30:a5:1e:f2:02:9e:a6:ad:ce:98:7e:7e:c3:c3:0d:c8:c8:a9:
92:fd:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:58 2025 by rpki-client