Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/dylc3WZzrjgV2VB-T70ps5y7_v8.roa
File: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (raw, json)
Hash identifier: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=
Subject key identifier: 77:29:5C:DD:66:73:AE:38:15:D9:50:7E:4F:BD:29:B3:9C:BB:FE:FF
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 0194228D264FA6977BFB72804C29AE73DDBD
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/dylc3WZzrjgV2VB-T70ps5y7_v8.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 185.255.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:26:4f:a6:97:7b:fb:72:80:4c:29:ae:73:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77295cdd6673ae3815d9507e4fbd29b39cbbfeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:fd:a6:33:b3:03:ed:df:3b:4c:c8:43:a5:
2f:50:44:83:d6:42:5b:92:58:e2:29:c3:d6:7f:51:
81:cd:7f:bd:a5:9e:d0:6f:ff:7a:ec:a9:ff:21:b3:
7c:39:df:d9:20:cd:cc:fb:82:34:bf:0a:c8:ce:aa:
84:c1:1f:d2:64:90:99:44:81:e9:55:38:37:b5:b5:
3a:ed:19:c8:fa:05:ce:1b:f4:16:51:ac:cc:f9:3e:
15:44:ab:32:14:85:e7:8b:a3:a0:b0:76:4c:76:a6:
ac:e9:07:3e:78:ec:55:82:19:21:c9:30:28:1d:71:
da:de:c7:e9:27:7c:66:46:e7:fc:f6:e1:d8:96:cf:
27:41:b5:47:94:7a:57:b4:d8:8d:be:ee:48:36:d4:
e6:f7:86:43:06:5b:4c:35:6f:d9:2b:b7:7f:e4:17:
9b:5b:ce:a6:21:ad:9a:e3:f4:19:1a:de:cd:d7:13:
e4:ce:36:61:7e:1a:28:30:89:21:80:83:87:de:95:
f1:df:aa:17:cf:a0:31:64:10:cc:80:4e:07:f7:51:
71:82:be:ee:04:3d:c6:86:f9:e2:7a:5c:76:c5:67:
5c:53:25:7b:a0:83:42:c3:51:80:54:57:43:24:75:
f1:83:c3:f4:11:7f:7f:49:3d:86:83:51:60:c1:02:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:5C:DD:66:73:AE:38:15:D9:50:7E:4F:BD:29:B3:9C:BB:FE:FF
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/dylc3WZzrjgV2VB-T70ps5y7_v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:32:3f:6c:94:87:83:0c:1a:2e:d7:e3:82:f6:76:a1:28:
5d:56:4f:6d:52:64:2e:ae:42:69:3a:fc:42:d8:9f:5e:17:a8:
5d:a6:04:14:6b:5b:ff:18:35:fc:28:47:38:98:b8:10:a2:1d:
31:7b:6c:6f:5c:34:d3:22:99:d0:23:b6:d3:5c:90:e3:47:f7:
dd:07:a8:00:15:f3:f7:95:25:cb:2d:12:4a:0e:7f:23:fb:00:
94:c3:34:03:0a:c8:48:8a:00:0b:25:52:08:ef:d7:56:7e:0a:
32:30:0a:76:3a:ab:ca:4a:74:8d:da:ef:47:d2:ac:b6:e3:06:
a2:8a:2f:90:40:e4:80:ff:a4:ce:e7:8b:0e:98:22:b0:29:8c:
3a:5c:82:b7:e7:d1:cf:af:bc:93:1c:a8:12:23:f8:39:5c:20:
33:ec:be:e8:2b:84:5b:4e:dd:c4:ba:f6:92:c4:1b:62:55:0b:
43:93:49:80:8c:97:8b:af:26:d2:b4:11:a0:2e:71:81:47:22:
24:e6:73:5f:04:40:51:63:3c:fe:31:a2:4f:5e:da:16:e0:9a:
24:ab:72:1a:61:94:25:42:d6:11:25:91:5e:c5:b4:4a:de:22:
ce:f7:75:b4:55:1c:22:cf:0e:3c:56:77:66:ce:9e:d7:08:96:
77:74:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:44 2025 by rpki-client