Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yJUk9LmJLtXMulpkpu-dnJpYBa8.roa
File: yJUk9LmJLtXMulpkpu-dnJpYBa8.roa (raw, json)
Hash identifier: cqI9OqrEP5eOwAXW0TgsmLYXpXcNYAlr67aM3o/wrYs=
Subject key identifier: C8:95:24:F4:B9:89:2E:D5:CC:BA:5A:64:A6:EF:9D:9C:9A:58:05:AF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B2555E74299304E6BB4F183AFDC331
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yJUk9LmJLtXMulpkpu-dnJpYBa8.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8630
IP address blocks: 85.142.156.0/22 maxlen: 22
195.209.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:55:5e:74:29:93:04:e6:bb:4f:18:3a:fd:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89524f4b9892ed5ccba5a64a6ef9d9c9a5805af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:7e:f2:36:4b:94:17:fc:66:91:f1:84:b6:
b1:79:db:39:d1:cc:e2:ab:a0:7d:b3:85:cc:a4:36:
36:8d:1b:ff:4e:eb:76:f3:5a:9e:c7:14:19:55:e4:
c5:d6:fa:cd:a2:9a:b2:db:f2:61:0d:05:f0:4f:05:
c1:23:3d:a6:4b:61:83:c1:fb:be:83:63:67:3b:12:
97:15:58:db:5e:58:ba:4c:5e:6d:1d:e9:56:aa:d2:
0f:62:5c:7b:21:52:16:9a:5d:1c:e3:96:6b:b3:7f:
45:d7:94:52:60:c4:c4:93:9b:5d:78:ba:8c:85:45:
1c:3f:0f:1e:d2:ad:98:d4:75:36:76:88:58:06:42:
a5:00:5f:5f:c6:1e:e8:7a:c7:af:74:a5:33:a4:1f:
85:3b:1e:f7:19:63:8f:35:d3:7b:e4:73:ab:28:b5:
12:45:43:43:7c:0b:bc:18:8a:13:bb:b9:1a:54:68:
ea:85:9d:24:ae:4e:31:5f:c4:53:d7:c5:a5:58:98:
c8:9a:88:d7:6e:aa:29:0a:94:0f:37:85:bf:88:e2:
a9:42:2d:e3:04:85:db:b6:e1:29:05:e8:e8:cf:50:
9d:2a:70:a0:0e:47:d6:92:e6:82:3e:42:b3:f6:c0:
df:eb:d4:03:56:12:e3:08:30:3c:44:2c:72:8f:6b:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:24:F4:B9:89:2E:D5:CC:BA:5A:64:A6:EF:9D:9C:9A:58:05:AF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yJUk9LmJLtXMulpkpu-dnJpYBa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.156.0/22
195.209.250.0/23
Signature Algorithm: sha256WithRSAEncryption
48:62:a3:2d:4b:d6:cf:77:5a:21:b2:09:da:53:ae:0f:fd:63:
22:78:ed:44:81:05:55:ad:53:63:18:cd:73:8d:41:9b:69:fd:
83:ef:5b:bf:4a:14:f4:2e:53:8f:ef:5e:59:2c:32:be:29:3c:
40:eb:f5:6a:65:f8:53:0f:eb:e5:a9:c1:0b:45:b3:ed:b2:fc:
2c:b3:1b:b2:f8:83:1e:f1:a5:1b:77:fa:d2:b8:e6:dc:63:04:
92:4a:d1:35:a3:c4:00:8e:20:13:d5:26:6a:2e:dd:5e:35:2b:
4d:91:6f:77:be:2c:df:65:99:3c:3b:ff:5d:76:c7:2c:d5:ee:
1e:d0:81:bc:38:39:cc:c7:07:32:a7:25:5e:80:7b:13:d8:83:
0f:af:8c:3a:4c:20:81:5e:be:44:fe:93:16:a5:e4:ea:b6:65:
6e:14:a8:b5:90:be:4a:19:4a:82:2d:11:57:80:75:ac:75:52:
4d:79:a8:34:7a:14:9c:9f:71:70:48:03:36:3b:3c:03:57:94:
c5:f5:96:b5:e8:b9:51:4a:94:8f:63:89:d1:8f:47:43:26:89:
c6:e7:88:34:24:ad:d9:d8:cf:5f:ad:dc:e5:0e:15:2b:60:cc:
3f:6e:9c:b8:90:a4:96:e0:97:2c:4a:b3:97:51:94:d1:ce:f2:
74:ed:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:33 2025 by rpki-client