Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa
File: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (raw, json)
Hash identifier: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=
Subject key identifier: 60:30:61:C5:7A:3F:F2:67:27:99:D2:C9:7E:12:3E:6B:87:B0:15:08
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019428275038AA546FEA3FDCB1F19925B274
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa
Signing time: Thu 02 Jan 2025 17:54:12 +0000
ROA not before: Thu 02 Jan 2025 17:54:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204080
IP address blocks: 185.115.104.0/22 maxlen: 24
185.115.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:50:38:aa:54:6f:ea:3f:dc:b1:f1:99:25:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jan 2 17:54:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=603061c57a3ff2672799d2c97e123e6b87b01508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:16:31:cc:4c:9f:be:de:41:d4:f6:3e:aa:
b2:eb:4d:b2:dc:64:63:59:93:bb:8f:b9:06:7a:d8:
74:77:da:b9:c1:af:25:ca:ff:4c:ea:70:82:c1:db:
2d:6f:c9:d3:37:d5:33:31:ee:18:da:72:be:db:58:
ec:17:63:00:41:8b:22:74:90:59:e2:38:8f:7e:f2:
49:61:fb:e9:7a:14:2a:47:9e:af:43:8a:e8:6d:ff:
c3:2d:c5:5b:54:bf:08:c1:d8:27:12:84:c5:6c:1f:
ed:26:90:5e:5d:ce:e4:11:90:7c:2e:48:dc:ce:c3:
06:45:82:0e:fd:f7:8b:1e:4c:12:8d:c7:21:40:58:
42:ed:5f:05:18:db:99:28:9e:71:b7:54:6a:af:55:
45:b8:92:ae:ce:3c:ba:b8:b4:28:1d:7a:35:66:c4:
bd:ff:d8:74:08:6f:c6:4a:6f:1b:de:ea:4d:48:ae:
7c:08:10:2e:0d:43:16:85:4f:f0:71:fc:9b:18:0f:
44:7b:98:34:82:95:e9:88:2a:62:99:e2:55:68:d4:
9d:83:eb:81:ec:13:33:cd:6c:3f:e5:0a:ba:d8:47:
17:1f:5c:b1:f5:1d:91:5c:72:f4:3e:a7:2f:8f:c5:
a4:ec:ea:12:a7:36:d5:0b:65:43:8e:a6:3b:8c:37:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:30:61:C5:7A:3F:F2:67:27:99:D2:C9:7E:12:3E:6B:87:B0:15:08
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:53:10:e3:6b:9b:55:f3:22:54:8c:3e:cf:f2:38:ca:80:88:
f9:2f:19:2a:dc:46:ac:ac:f4:9c:a6:18:df:a3:69:15:1a:43:
95:2e:76:f1:e9:5a:91:8d:52:93:f1:9a:17:35:f7:60:ae:08:
01:ab:31:bc:c1:51:fe:33:80:f4:d9:5b:e7:91:72:9d:1f:cc:
68:19:42:80:78:c6:67:b5:ab:72:8f:62:77:ac:c9:e9:5c:e3:
5f:fb:4b:d0:27:7e:2f:18:f4:27:71:cc:74:86:ae:aa:f9:5f:
8b:c6:0a:71:b1:1d:94:ab:b3:54:c1:60:1e:c5:03:cc:ba:b1:
4d:97:e7:04:54:26:2d:29:c4:d5:99:3c:c5:be:9e:d5:a2:fb:
48:03:06:cb:56:5c:0a:f2:3c:07:3a:2f:f2:cf:6a:62:99:9c:
29:52:97:43:07:3a:3f:93:b8:65:84:e2:d1:b4:ca:68:58:ca:
00:34:84:cc:7d:9d:d0:3f:8a:d7:b8:c1:62:c9:27:d6:d2:68:
86:e3:89:4a:c6:35:cf:0b:72:33:19:59:be:11:b3:cb:11:dc:
a5:a6:23:00:cf:9e:f1:57:c7:4f:e1:a9:a3:d8:e5:76:48:2e:
79:46:87:30:16:d0:15:c6:80:05:fd:fd:ee:62:5b:33:ab:fc:
b2:ca:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:17 2025 by rpki-client