Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/syKB6zisduN4C3cAJozjgCCO0PY.roa
File: syKB6zisduN4C3cAJozjgCCO0PY.roa (raw, json)
Hash identifier: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=
Subject key identifier: B3:22:81:EB:38:AC:76:E3:78:0B:77:00:26:8C:E3:80:20:8E:D0:F6
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0194228E20B2BB53A2698B6BE2988C1BA6B7
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/syKB6zisduN4C3cAJozjgCCO0PY.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39702
IP address blocks: 185.214.232.0/22 maxlen: 22
2a0e:a2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:20:b2:bb:53:a2:69:8b:6b:e2:98:8c:1b:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b32281eb38ac76e3780b7700268ce380208ed0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:36:e9:98:42:7d:d3:5e:84:48:f5:4e:e9:
d6:eb:a4:cf:04:a8:12:46:58:90:20:b6:a9:59:11:
9a:82:75:3b:f1:c3:98:c9:1c:6f:0d:16:53:78:c6:
e0:6f:a4:13:3c:18:9b:a1:dc:ab:1b:09:3f:cb:3e:
93:64:09:44:2d:47:e4:d6:a6:f1:1e:65:c5:34:4a:
d7:00:14:4e:63:65:ae:44:2a:14:76:4e:0d:c9:85:
b3:f8:b9:64:4e:24:a2:9b:04:38:19:78:b4:c0:aa:
c1:cf:72:76:29:80:be:15:81:6e:c5:a7:dc:68:02:
c2:f8:62:80:71:91:c1:c4:d2:1d:23:16:66:42:9d:
25:89:64:74:30:07:39:20:96:8c:e1:cb:cb:df:3e:
e8:f0:87:95:ff:b0:5e:0e:d1:e8:42:6d:7f:d7:5a:
dc:4a:ae:fc:28:83:80:8c:b1:4b:9f:c7:cc:fa:69:
ba:f4:91:03:a0:62:0d:f6:7e:90:f7:d0:e9:25:70:
0f:0f:cb:93:d5:bf:61:97:32:42:a8:c5:7d:7a:a2:
4f:98:df:05:f0:84:67:0c:b1:6c:fe:b8:d9:5b:20:
2b:3e:4d:78:f8:03:4b:39:5c:81:d7:3b:2b:c8:28:
c4:f3:35:75:74:8f:50:5c:56:f2:0c:70:63:e5:c3:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:81:EB:38:AC:76:E3:78:0B:77:00:26:8C:E3:80:20:8E:D0:F6
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/syKB6zisduN4C3cAJozjgCCO0PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.232.0/22
IPv6:
2a0e:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:9d:bf:34:49:d5:ff:c5:68:20:00:e8:98:ee:91:02:a8:21:
f8:a3:ae:33:22:02:24:16:a3:a9:dd:41:d7:ef:70:3e:3c:05:
b2:6f:58:3e:d6:d4:03:44:62:cb:81:a4:12:4d:3c:a8:4b:39:
e2:8b:33:ae:37:4d:cc:e3:18:73:c2:53:26:88:85:d8:02:e8:
6e:a2:e9:13:c0:df:2c:4c:30:a8:63:ee:55:de:82:ce:56:ec:
e0:1f:62:b1:20:1a:89:95:42:dd:6f:6c:24:ce:14:92:1a:38:
79:bc:4a:94:d0:78:71:e4:5e:f2:70:08:9a:dd:2b:62:6d:40:
75:d8:91:fa:91:e1:73:97:56:eb:58:94:58:b2:3d:d6:c6:2c:
b8:a5:c2:d4:d5:ce:b8:fc:bf:fa:ec:f9:21:ff:c8:7f:86:88:
68:75:5f:1b:82:6c:9d:e3:e7:34:53:94:0d:7a:9d:1f:41:09:
4c:51:57:bd:d5:55:48:69:4c:ca:01:63:3b:ad:45:2c:98:09:
6b:bd:2c:bf:fc:cc:7e:32:63:01:7e:e9:8b:41:99:c7:c9:7f:
d1:cf:ef:7d:ca:27:07:17:54:f5:1f:93:b1:c8:7a:51:7f:ca:
b0:0c:dd:c6:c7:4d:53:48:97:40:ec:09:82:9f:ba:be:36:65:
4c:b5:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:27 2025 by rpki-client