Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/yzENspSptK5NyVWj5Yy0li0xAx0.roa
File: yzENspSptK5NyVWj5Yy0li0xAx0.roa (raw, json)
Hash identifier: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=
Subject key identifier: CB:31:0D:B2:94:A9:B4:AE:4D:C9:55:A3:E5:8C:B4:96:2D:31:03:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 01941F8C18D5114ACA4A39CF18FA8597FD9B
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/yzENspSptK5NyVWj5Yy0li0xAx0.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203752
IP address blocks: 185.125.60.0/22 maxlen: 22
2a03:94a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:18:d5:11:4a:ca:4a:39:cf:18:fa:85:97:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb310db294a9b4ae4dc955a3e58cb4962d31031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:3a:35:d1:28:6a:92:d8:dd:bd:7b:7c:f5:
15:66:44:99:e0:ac:34:af:c5:7b:8d:f3:4a:df:29:
04:f1:60:02:bb:88:ce:0e:6b:7a:a6:70:7c:fa:28:
4f:68:ad:26:04:68:10:9e:7c:e5:c5:3e:38:cf:ea:
f3:d5:46:1e:5b:00:15:d8:c4:4b:53:ff:7a:3e:cc:
fc:5c:55:68:05:ab:d6:c4:cf:55:59:f7:ed:b2:ed:
c7:e8:57:10:2b:e5:ef:40:de:53:3f:f0:9f:27:3a:
cf:96:3b:d2:3c:72:6a:da:e6:c8:30:c1:77:b8:83:
00:d2:f5:14:3d:6b:b0:a8:1f:9f:ef:6c:ff:b3:e6:
19:11:c4:2b:97:93:9a:51:4c:1c:f2:0c:7e:7f:4b:
8b:71:d8:22:4c:92:c8:b3:37:05:bd:01:4d:3f:34:
fa:83:35:2a:67:66:cb:e1:ba:e1:92:d6:53:8f:36:
0b:52:36:0b:2f:38:1b:1e:c4:5b:ba:6f:23:c9:fe:
cb:d1:e0:5a:dd:d8:dd:53:e0:87:3d:e9:24:58:20:
85:1c:5d:52:e6:c3:ee:18:a5:4a:3b:a8:96:70:ba:
8b:c8:c5:d2:35:97:18:42:9c:bb:07:ef:cf:9c:1d:
e5:74:d4:54:ed:b5:19:98:f7:de:f3:bc:dd:49:cf:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:0D:B2:94:A9:B4:AE:4D:C9:55:A3:E5:8C:B4:96:2D:31:03:1D
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/yzENspSptK5NyVWj5Yy0li0xAx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.60.0/22
IPv6:
2a03:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:6d:7e:40:f2:98:a8:af:fc:28:29:3c:e6:da:d6:f5:2d:d1:
d5:8b:98:57:6b:d1:ce:4e:e3:c4:0c:8f:88:24:ef:1c:9d:fb:
54:36:4c:2c:ac:6d:f9:bd:c4:88:24:65:a0:c1:8c:5a:7d:70:
34:0b:1a:18:9f:d8:93:21:15:95:0e:be:d2:ca:0a:38:32:76:
4b:b3:e1:98:7c:e0:c8:e6:15:c7:f4:3a:e0:a9:6c:ab:d7:42:
f4:31:d0:54:23:e9:ab:57:83:d5:7e:8d:16:03:b6:86:35:e7:
b1:00:a9:71:ea:1a:46:77:44:92:cf:94:89:fc:a5:13:ae:12:
f5:da:17:2b:18:fc:99:fd:2b:ee:8e:cb:b9:42:05:c5:46:be:
35:69:b1:4e:4c:46:95:42:74:4e:f5:60:9e:59:5a:b4:be:67:
15:99:0c:d6:27:0e:ac:17:09:07:38:01:97:d2:a8:f4:ef:82:
86:81:4c:48:66:00:39:36:ec:f5:2c:90:d7:0e:33:b6:a2:f2:
52:62:f7:af:94:b7:ab:5d:e1:08:a6:77:92:c5:aa:4e:84:dd:
60:07:d3:38:ec:95:34:fa:5e:4d:76:c5:52:60:e6:19:42:ff:
f9:5d:36:64:62:c3:d1:5a:d5:b3:0e:f9:cb:38:bd:0e:a6:40:
99:fc:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:39 2025 by rpki-client