Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/YJHXZeNag-cu70_fJht-ZOpxnGk.roa
File: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (raw, json)
Hash identifier: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=
Subject key identifier: 60:91:D7:65:E3:5A:83:E7:2E:EF:4F:DF:26:1B:7E:64:EA:71:9C:69
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019421440072FE871A37A02CDA6316F876FA
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/YJHXZeNag-cu70_fJht-ZOpxnGk.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42221
IP address blocks: 185.87.0.0/24 maxlen: 24
185.87.1.0/24 maxlen: 24
185.87.2.0/24 maxlen: 24
185.87.3.0/24 maxlen: 24
2a05:bd02::/31 maxlen: 31
2a05:bd04::/31 maxlen: 31
2a05:bd06::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:00:72:fe:87:1a:37:a0:2c:da:63:16:f8:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6091d765e35a83e72eef4fdf261b7e64ea719c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:3c:fb:c0:13:bb:31:77:76:ba:c4:ec:e4:
e2:c3:1e:8d:4c:8b:fc:15:80:be:18:d3:53:48:fc:
51:8c:ab:5e:ee:73:40:15:39:b3:87:52:3f:e1:9a:
2e:d9:a2:dc:30:62:a6:07:cf:c0:7d:a6:c4:bd:b5:
ed:41:c0:f7:5b:de:00:63:c1:c4:4d:7f:cd:bb:33:
3e:08:a5:36:c6:d6:ef:84:4d:5e:16:d9:3c:a5:89:
a2:ef:9d:53:84:d3:9a:02:40:0e:e6:e5:6f:76:31:
29:63:ab:96:e0:c8:c3:7b:16:b7:01:1a:f4:7e:35:
c1:15:ce:93:dc:e6:63:b4:6e:ea:bd:a2:9f:fd:15:
07:fc:56:df:b6:ed:8e:d8:1e:a4:85:82:ff:f1:2b:
39:be:cf:05:d1:1e:48:2c:a5:0f:8c:01:93:b4:19:
d1:7a:e5:37:75:eb:b1:02:78:0e:23:88:b9:09:60:
ba:e4:f8:ea:a0:51:7f:92:e5:0c:9a:01:9c:42:1b:
17:44:3c:fd:45:92:dc:35:a1:8f:fd:48:ce:54:2b:
86:2b:88:b3:c3:88:b9:57:75:3f:7b:7a:ee:87:71:
19:2e:e9:5a:32:60:92:79:eb:c0:c2:c3:bd:32:0b:
47:78:f3:a2:92:19:f2:1d:e6:c0:91:49:ba:5b:2a:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:D7:65:E3:5A:83:E7:2E:EF:4F:DF:26:1B:7E:64:EA:71:9C:69
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/YJHXZeNag-cu70_fJht-ZOpxnGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.0.0/22
IPv6:
2a05:bd02::-2a05:bd07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:fc:c8:2c:e8:1b:1d:1f:dd:16:92:6d:19:9f:b5:43:3b:a6:
17:fd:32:f3:e8:6e:b7:af:d1:a4:49:12:1a:32:cc:fa:d2:13:
96:1c:d5:0a:91:ed:ca:23:17:63:7f:ec:54:1d:e5:bb:af:52:
97:74:ed:62:d3:d2:d9:63:76:b7:6b:da:c1:42:75:18:7b:6a:
71:09:1f:6e:be:f7:aa:c7:01:bc:12:11:8e:c3:27:0b:fe:14:
d4:9d:22:fe:e9:95:49:7e:45:09:71:c7:97:c2:d4:82:bf:9a:
ec:1f:21:20:74:ad:45:af:74:b1:8d:3c:07:42:ca:10:28:a8:
a0:a1:cb:f7:0e:90:2f:c2:18:8c:06:58:cc:a9:41:55:33:b7:
a8:3d:fb:bd:c4:5d:95:87:8e:c4:46:27:1c:84:fa:68:e0:9d:
96:66:81:a8:72:d8:80:b5:1e:26:5c:3b:27:a5:a9:6c:85:f5:
2e:f2:90:98:c4:d1:53:34:18:56:44:be:c8:96:38:3e:7e:a1:
b4:5e:c8:1b:12:8d:de:c7:4a:04:2f:de:d5:50:c3:81:ba:d3:
d2:e8:80:99:ad:ae:5e:2c:fd:4a:93:a7:4f:6c:43:3c:b2:09:
e2:38:97:b5:56:71:90:87:37:33:ee:5a:a6:2f:aa:31:49:c8:
90:e1:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:39 2025 by rpki-client