Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ywmRdz3QQ075sogl-Hv1NFuoucM.roa
File: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (raw, json)
Hash identifier: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=
Subject key identifier: CB:09:91:77:3D:D0:43:4E:F9:B2:88:25:F8:7B:F5:34:5B:A8:B9:C3
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019426D9C9210E80CD5F9725B98D7C67FF8E
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ywmRdz3QQ075sogl-Hv1NFuoucM.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.49.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c9:21:0e:80:cd:5f:97:25:b9:8d:7c:67:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb0991773dd0434ef9b28825f87bf5345ba8b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:ee:7a:e7:0a:8d:3e:14:dc:3d:19:3b:79:
a8:b8:2c:9a:87:ad:14:4e:0c:92:73:cd:5e:5e:2f:
ef:2b:cc:99:c7:ec:37:34:be:17:e3:a8:94:3b:2a:
b9:2f:44:ee:04:af:94:c4:8d:c4:18:8e:ee:01:45:
39:73:69:a9:d0:5c:fe:a9:e2:0a:5b:9b:4f:21:46:
87:d3:6f:8d:66:1b:52:0c:98:80:93:03:4c:ed:aa:
97:40:cb:57:54:fd:39:6c:1d:5a:d3:5c:e1:cd:51:
d2:27:74:fb:70:5c:78:09:4d:14:8f:15:3b:d1:12:
c3:b1:53:d0:ee:a4:32:c9:f4:a5:87:54:1c:b0:c3:
14:fc:61:d4:56:8e:4a:a5:ec:6c:5a:73:8b:40:8f:
20:13:de:c5:bd:16:ea:3e:2a:02:5b:35:eb:5c:9a:
57:3e:ec:9e:a2:06:e9:c0:ed:b9:54:6d:7e:d5:23:
0e:79:b6:14:40:1e:ed:91:7f:f7:f5:8e:07:13:64:
77:56:6f:e0:a9:1c:f3:59:0c:01:2b:2e:08:c9:be:
a2:39:3c:5e:16:b4:45:21:7b:43:e6:3a:49:12:ec:
c1:4d:23:3e:e4:b3:d5:b8:92:fc:3c:73:6a:19:ac:
fa:fa:20:fb:74:20:6e:6d:55:89:88:4d:9b:96:bc:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:91:77:3D:D0:43:4E:F9:B2:88:25:F8:7B:F5:34:5B:A8:B9:C3
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ywmRdz3QQ075sogl-Hv1NFuoucM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e0:0d:b1:b5:c1:28:d7:a6:7d:9e:82:61:9d:35:99:0c:47:
94:40:bc:9b:c9:f0:1b:c3:4b:9c:09:a4:c2:1d:fd:91:a5:bf:
21:78:ac:65:eb:f2:1f:8f:fa:79:09:1a:68:b3:2f:bf:79:ea:
64:3d:e4:14:77:37:a5:f7:e4:c2:44:03:15:57:0c:57:fb:6e:
d1:5e:01:f4:06:3d:1a:77:32:e9:cb:8a:73:4c:88:c6:10:81:
9f:a8:fa:ae:48:16:d4:cc:b9:01:2b:67:69:66:9a:9d:db:9b:
92:ee:ae:fe:2c:c8:13:17:75:04:62:71:2b:21:19:18:28:43:
78:c5:ad:52:70:43:5d:82:75:2e:6c:f1:56:89:15:16:b6:93:
bd:d8:0e:78:07:1a:13:66:5c:7a:d2:ef:11:ba:58:47:52:9c:
d1:ac:8e:5d:cf:63:f3:a6:f7:fb:a9:f4:f6:67:eb:18:89:87:
ae:67:07:27:a3:9e:74:79:0c:ff:0f:bb:7c:e9:ef:a8:20:60:
a5:f1:c2:81:af:9f:1a:86:d2:b9:d6:a2:a9:6e:3e:40:96:a6:
35:50:83:87:0c:81:77:fd:cb:1a:a0:58:b2:e5:c7:d4:18:63:
69:5d:95:d8:65:1f:a8:c6:7c:d9:72:5e:40:1c:00:14:9b:d7:
03:57:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:44 2025 by rpki-client