Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yg5JITAUr9nYSKxGfOS5IGqhNV0.roa
File: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (raw, json)
Hash identifier: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=
Subject key identifier: CA:0E:49:21:30:14:AF:D9:D8:48:AC:46:7C:E4:B9:20:6A:A1:35:5D
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C9D835D207F3C85B6581A8755626
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yg5JITAUr9nYSKxGfOS5IGqhNV0.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203668
IP address blocks: 185.155.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c9:d8:35:d2:07:f3:c8:5b:65:81:a8:75:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca0e49213014afd9d848ac467ce4b9206aa1355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:d4:be:3a:df:9f:6b:f1:93:06:e7:83:11:
1b:e4:68:f7:26:d4:94:61:9d:b8:99:db:20:2c:f6:
7e:78:c7:5c:0c:be:a6:eb:45:13:91:3d:e5:34:45:
be:dc:71:f6:ae:62:c6:e2:2d:44:bf:08:55:84:7a:
92:3c:ce:de:d6:ac:5b:f0:56:02:87:4a:f8:46:03:
4e:f0:11:04:26:47:cf:a4:d4:9e:fc:c9:30:79:04:
d0:8d:59:2e:fc:c5:26:52:ad:57:e9:05:f3:d0:9a:
3e:6b:42:89:e1:14:c2:c3:b1:4b:d9:ad:06:64:b9:
42:49:22:b2:16:4a:51:75:01:b0:1d:07:a9:97:2b:
5d:57:32:f6:34:5c:b9:f1:1a:ee:d0:c9:fa:a3:f3:
bc:2a:a1:f2:7b:0b:85:ce:ab:16:8d:ff:7a:eb:65:
f3:82:89:18:c7:ae:2b:5c:20:66:23:70:4d:15:4b:
49:5a:9b:1f:8f:40:06:98:ef:af:b7:aa:7e:f8:04:
9a:b6:2d:9d:16:05:fc:05:dc:72:b2:89:43:02:0b:
03:2b:1d:cc:59:89:81:ec:e8:c8:43:aa:ba:1c:f8:
71:c8:82:aa:5b:1d:88:4d:96:e0:7c:8c:c0:62:ef:
cd:7e:1f:aa:c9:ed:d5:89:27:73:4f:3f:34:55:e2:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:49:21:30:14:AF:D9:D8:48:AC:46:7C:E4:B9:20:6A:A1:35:5D
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/yg5JITAUr9nYSKxGfOS5IGqhNV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.114.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2e:45:86:11:9f:7d:cf:3b:69:0c:19:99:3b:f2:2a:3b:dc:
0a:4d:ba:fc:39:75:0c:8f:56:1c:d2:d6:d9:12:2f:a0:d5:6c:
28:c5:6d:97:1d:e2:31:1f:99:4e:38:5a:bb:40:ab:25:f8:1f:
cd:2f:db:fc:4c:4b:43:b5:a9:c5:e9:a1:1a:59:85:d2:39:69:
98:67:64:f4:94:05:ec:ac:a6:9d:16:28:35:0a:c4:07:f2:95:
ce:96:cb:56:2b:16:7c:a2:ca:20:df:61:f6:35:1c:fa:5a:fd:
de:f4:e9:91:46:99:b1:66:48:72:6e:f7:f0:0f:82:1b:d1:19:
aa:5e:d2:44:d4:4f:8a:69:b6:b4:07:8c:4a:86:1d:aa:73:d5:
ac:3c:e7:15:28:7e:5f:0c:10:93:e7:9c:4c:2a:e9:01:4d:3a:
6f:e2:87:38:d1:6c:c0:49:a4:8e:36:b5:b0:aa:3c:11:14:e1:
ab:14:64:3b:7d:06:f8:7f:07:06:16:79:22:bc:01:2d:3a:f6:
82:04:7f:5d:f8:87:6f:22:7b:4b:64:3b:b8:5e:23:09:c5:ea:
4d:be:29:e9:ac:b9:a5:22:38:6a:c6:18:07:ba:81:61:0e:b9:
38:6f:39:47:ee:cb:b3:1c:76:fb:f0:e8:f6:00:21:ea:ef:49:
75:5a:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:10 2025 by rpki-client