Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa
File: ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa (raw, json)
Hash identifier: wMiYBEmRQakoObcIju3eVEr8bEdfvqRbzn+KIxKAXDc=
Subject key identifier: CA:C4:EB:3D:56:55:C5:76:F6:E7:E4:6C:52:30:00:B1:59:BD:16:1B
Certificate issuer: /CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Certificate serial: 019423D72CBE808FC4C3FD7D8AE53EE2B4A8
Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200844
IP address blocks: 185.94.52.0/22 maxlen: 22
185.94.55.0/24 maxlen: 24
2a04:4ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2c:be:80:8f:c4:c3:fd:7d:8a:e5:3e:e2:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac4eb3d5655c576f6e7e46c523000b159bd161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:46:81:5f:68:a2:71:17:c6:e4:a4:01:6c:
86:9e:d9:71:23:72:c7:28:5a:e9:a4:37:a8:dd:17:
35:a6:91:19:49:53:39:94:16:aa:ad:3b:df:b1:ef:
76:0c:fe:2c:c1:4c:b5:ee:4d:04:1d:ce:40:9f:f8:
e3:4e:e5:37:bb:6f:0a:5c:57:b1:3a:ab:3c:4b:2c:
d4:db:8e:4a:2d:52:38:bf:9f:c8:18:7a:56:f1:4d:
b3:8c:2e:01:50:d0:15:03:9d:e6:04:48:e5:27:3a:
8c:01:af:12:78:b1:8e:8e:b1:c1:e9:f6:77:9b:f2:
03:e6:11:b9:b9:e1:76:0a:cd:c9:a5:02:38:ee:3c:
b9:f1:98:7b:30:06:8b:86:fb:88:02:10:f5:69:f2:
b2:59:c1:a0:01:11:3d:30:41:28:54:ef:68:7e:08:
ad:7a:ae:9c:19:c7:62:4b:a7:6c:0b:25:9a:92:7f:
79:50:fa:3e:e5:9c:f7:04:47:31:56:c3:c7:33:ab:
0f:25:a8:20:99:ed:d7:01:c8:b0:6c:55:1a:47:6e:
69:f2:1e:70:83:4d:82:dd:6e:91:ae:ee:60:ce:cc:
3b:b7:fd:1f:4f:28:b7:83:72:f8:82:dd:cd:1a:d9:
3e:4d:0f:be:c3:8e:84:e8:b7:e5:c0:ee:fc:57:0f:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:EB:3D:56:55:C5:76:F6:E7:E4:6C:52:30:00:B1:59:BD:16:1B
X509v3 Authority Key Identifier:
keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.52.0/22
IPv6:
2a04:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:52:7f:2b:0f:7c:88:9c:b0:18:03:18:d7:53:89:36:c0:c6:
1c:85:da:17:d8:0d:d0:7c:30:88:71:2b:8e:13:05:e0:01:58:
86:c6:e8:c4:01:68:83:88:ca:b3:8c:f8:61:e0:dd:bc:03:9f:
ba:29:11:65:c7:8b:a4:04:13:f3:35:5a:93:f1:b2:a9:9a:c8:
3f:6e:b5:8c:6b:d8:35:d3:c9:a3:95:81:8f:94:c7:d0:2a:41:
3f:30:74:4e:57:0a:f8:c8:5e:75:cd:a9:17:9f:b6:5a:35:8d:
1b:71:3d:42:f1:1f:56:0d:d9:9b:3a:30:a5:d4:2e:87:43:8a:
6f:95:d0:63:d0:18:35:d1:d8:e8:f0:db:f9:c6:36:31:6f:c2:
11:83:a6:a4:11:bb:7c:eb:85:30:56:c9:63:70:ba:a1:05:2e:
40:39:0d:a6:62:84:87:34:de:f6:2b:87:a2:36:8a:94:a9:7f:
73:63:30:7a:aa:96:70:57:3c:c6:3f:9a:75:e3:21:bb:18:5e:
32:f4:07:0a:5c:8f:27:56:44:15:9b:e4:87:c2:c9:e9:b4:17:
c8:c2:e7:a3:a0:5d:7a:7c:6f:df:f3:e1:4a:f6:cd:72:84:33:
3a:70:6e:25:74:e0:b5:96:dd:61:b0:3e:b0:b2:36:bd:ea:d1:
53:e0:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:58 2025 by rpki-client