Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/yj99MOmgQbzvoc18YD5uSOARIoI.roa
File: yj99MOmgQbzvoc18YD5uSOARIoI.roa (raw, json)
Hash identifier: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=
Subject key identifier: CA:3F:7D:30:E9:A0:41:BC:EF:A1:CD:7C:60:3E:6E:48:E0:11:22:82
Certificate issuer: /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial: 019424B3F1787C3062A388663CC6331AC47F
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/yj99MOmgQbzvoc18YD5uSOARIoI.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51952
IP address blocks: 185.183.196.0/24 maxlen: 24
185.183.197.0/24 maxlen: 24
185.183.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f1:78:7c:30:62:a3:88:66:3c:c6:33:1a:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3f7d30e9a041bcefa1cd7c603e6e48e0112282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:74:95:ab:a0:d3:46:13:09:13:b4:39:1f:
ef:a4:11:71:27:70:e7:8b:c8:ee:56:16:98:c3:01:
30:8b:45:24:ab:e0:41:f4:1f:2a:50:f9:d3:bb:63:
88:c4:32:47:20:50:e6:97:3b:05:be:13:d9:d5:28:
5c:17:2c:0d:44:ca:41:8f:af:b4:29:e0:bf:ac:95:
86:b4:04:c2:e3:14:83:aa:30:67:9b:1b:1c:58:a3:
0b:e0:16:49:07:19:1e:f8:a5:c2:6f:fb:f0:11:99:
f7:5d:01:d4:f0:f4:60:d9:06:c9:b6:2c:22:62:5f:
b6:87:b4:68:91:b1:59:4f:6f:32:fd:bc:d0:f9:5c:
2d:87:c6:fc:18:3d:d0:42:c1:e8:fc:e4:38:3f:4e:
39:81:38:e7:c9:1e:59:9c:e9:7d:65:53:fa:72:48:
3d:50:eb:e3:bd:2c:34:e5:fc:df:59:8f:2c:4e:80:
fa:9f:2d:46:f8:90:ea:af:46:23:70:bf:32:59:ee:
bb:66:97:6b:9b:58:35:03:b2:49:9e:dd:a5:1f:90:
f3:d8:ba:c4:6b:ca:06:9f:3e:0d:5c:30:01:80:d8:
59:55:12:e9:85:2d:11:51:c8:19:ed:5c:ef:dd:e6:
4b:74:c3:f5:45:62:34:c6:de:be:a9:76:5d:6d:ce:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:7D:30:E9:A0:41:BC:EF:A1:CD:7C:60:3E:6E:48:E0:11:22:82
X509v3 Authority Key Identifier:
keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/yj99MOmgQbzvoc18YD5uSOARIoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.196.0-185.183.198.255
Signature Algorithm: sha256WithRSAEncryption
a7:af:5e:62:2e:80:87:18:ce:63:47:51:e8:48:80:84:16:b6:
db:fc:47:04:6e:73:99:c6:50:98:dc:87:6b:17:14:16:ea:0f:
c4:16:e2:b2:9b:f2:42:1f:40:83:44:09:1d:e6:4f:5a:f7:a3:
4d:dc:cf:11:32:58:3c:a5:2d:41:74:ce:01:90:b8:ba:9d:8d:
52:10:a4:54:39:5d:8a:de:8b:5f:8d:86:d5:b0:9e:21:ba:c3:
d5:f9:ba:0b:5d:9c:56:e8:56:b9:2a:89:d0:31:b9:59:7c:28:
06:4f:a7:18:90:9e:67:1d:a8:2b:09:ab:4a:28:1f:1b:84:bf:
73:47:24:6e:54:20:6b:5f:9e:c0:ec:2c:1f:21:d7:80:b1:6d:
e6:a8:de:0f:94:91:94:b4:8b:41:cf:a2:5e:1a:b5:65:16:e3:
73:40:f0:ec:d7:c3:ba:91:48:ee:80:a4:86:16:dc:0a:6b:65:
4d:1e:f0:fe:44:8d:0b:2c:76:70:80:b0:84:ef:f4:c7:ee:35:
eb:87:b1:7a:5f:53:68:1c:c7:0c:f9:d5:50:a4:9d:20:74:0b:
42:dc:1b:e6:82:28:3e:15:5d:62:b5:1a:21:de:5b:df:8a:04:
87:c6:b8:44:9d:3f:ad:ed:8f:64:9a:d6:18:85:68:94:53:6c:
d9:5f:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:44 2025 by rpki-client