Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa
File: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (raw, json)
Hash identifier: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=
Subject key identifier: C8:09:B5:95:5F:D2:F1:64:14:F7:15:18:4B:3D:31:85:2E:56:58:59
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019426D9D3F58A0E45BA0596C27A39DA164C
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:f5:8a:0e:45:ba:05:96:c2:7a:39:da:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c809b5955fd2f16414f715184b3d31852e565859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:d7:91:a3:f2:33:fc:63:df:f5:02:42:f5:
67:cf:ca:16:88:c7:37:cf:db:66:94:82:92:6e:04:
43:85:de:ea:51:8b:f7:3c:c6:e0:a4:32:45:2e:da:
79:70:10:47:6f:8f:66:e3:ec:a4:ad:2e:c7:36:63:
dd:c1:9f:de:44:88:e6:0d:0d:05:d1:89:85:3c:2d:
7e:f8:4b:61:f8:ab:d0:05:ae:35:cd:4f:8d:2a:24:
f6:92:95:fe:91:b0:a9:e6:75:c1:af:15:7e:e4:08:
0f:45:89:10:e2:84:8b:97:3e:2f:47:3f:8f:7f:d7:
a0:ec:04:2e:1e:d2:a6:ab:1e:bd:17:22:43:fb:58:
ae:c5:a5:f0:a9:b1:a8:ad:7b:b7:02:2d:de:20:e9:
54:c3:c6:33:8a:e2:81:20:6f:33:90:b0:23:a3:a7:
44:e3:ba:06:e6:c3:e9:e8:08:8e:10:eb:16:02:85:
2b:a2:1c:1e:97:86:51:b7:56:f9:7f:f9:2b:2d:ed:
08:46:35:61:65:1f:09:09:d5:ca:ac:ec:df:be:03:
f3:e5:fa:f5:a2:78:af:e0:ea:f3:f8:ca:55:69:be:
19:3c:48:00:aa:b6:45:6c:f0:4a:b2:51:ce:5b:8d:
3e:7a:d9:d9:dd:3a:04:05:2c:de:1c:b4:ff:45:3a:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:B5:95:5F:D2:F1:64:14:F7:15:18:4B:3D:31:85:2E:56:58:59
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:1a:9a:80:57:97:dd:22:bd:99:18:13:7d:75:8e:61:bd:d0:
ee:7e:ce:f7:7d:dc:62:6a:18:51:40:9c:11:ce:54:0b:0d:87:
d2:1a:8c:b7:10:f6:d2:83:77:94:d2:57:4d:12:5f:44:95:22:
e4:ec:e0:b5:45:a4:46:98:63:02:31:f4:5d:ae:37:f4:48:e6:
28:1e:6c:52:11:2c:e2:dc:44:12:9e:59:2d:34:b7:b3:e3:1a:
8e:88:c0:07:45:15:23:f9:cc:28:d6:45:83:fd:f8:c2:1b:c7:
dd:f3:e7:4c:b1:18:ab:cf:40:62:3f:1f:80:02:38:3c:8d:2b:
3a:c1:26:4d:79:fb:67:c2:e0:f5:7f:8c:de:65:ac:f1:27:1c:
09:ef:b2:42:1d:9a:21:f6:15:b6:84:31:fa:02:40:44:be:05:
e8:69:76:1b:be:90:ee:01:81:2c:c2:3f:7b:6f:08:a8:60:3e:
fe:e6:5b:cb:3e:b7:b8:75:6b:3b:22:f2:76:d0:f6:dd:68:f2:
ac:7f:9d:88:9c:88:ae:af:8e:75:eb:95:57:00:54:ba:7c:3f:
7a:7f:cf:7e:f6:f3:87:93:d4:60:0d:69:d8:11:31:4c:50:7a:
4d:e5:aa:a7:c6:8a:85:50:0e:ef:fd:49:d6:bc:ea:f5:05:b3:
ab:eb:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:44:22 2025 by rpki-client