Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa
File: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (raw, json)
Hash identifier: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=
Subject key identifier: C9:D8:C4:36:DA:5C:45:C4:E6:55:C5:86:F6:8C:90:C2:9D:CD:69:0D
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01942143CC9C336087834B62EFFC21389BD3
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207398
IP address blocks: 185.16.83.0/24 maxlen: 24
2a10:3500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cc:9c:33:60:87:83:4b:62:ef:fc:21:38:9b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d8c436da5c45c4e655c586f68c90c29dcd690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:d1:00:1b:f6:61:66:af:a4:7c:89:ac:91:
a9:e3:e3:49:17:28:51:0d:09:c6:07:69:8d:53:ac:
49:9b:1e:cb:ea:6a:1d:fe:8e:3b:50:f6:ec:db:06:
be:bc:62:4b:75:f6:2e:51:19:54:73:d4:4b:d6:01:
09:50:fc:05:b4:ae:72:77:40:d9:03:07:87:27:9d:
59:20:d2:e8:4d:e8:66:ec:d0:2f:5d:f7:f5:90:cd:
f8:b7:3b:dd:74:bf:b4:82:20:03:24:6e:11:f5:14:
fc:c2:de:3b:c8:38:03:2a:17:7a:00:c1:19:8d:5c:
44:95:83:33:47:b8:ae:bd:70:61:47:c9:34:d2:16:
ad:33:14:89:0b:43:7a:66:f0:a0:3a:10:7c:f4:d5:
98:0a:f4:28:87:97:61:40:12:7a:e5:f8:e5:b1:db:
37:3d:00:e1:cb:92:39:e6:c4:6c:b3:e5:06:7e:87:
e4:93:b7:51:1b:49:d6:e5:ff:69:53:cc:f9:fb:cd:
5c:ff:78:a8:94:58:db:22:6f:1f:0e:55:7e:99:b1:
10:4b:84:eb:41:55:00:b1:2e:11:2e:45:6b:7c:31:
85:f3:4f:4e:07:5b:21:c0:90:02:73:12:92:0c:20:
cf:8c:a2:ab:78:8d:21:89:7f:9d:1c:0b:dc:2a:8b:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:C4:36:DA:5C:45:C4:E6:55:C5:86:F6:8C:90:C2:9D:CD:69:0D
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.83.0/24
IPv6:
2a10:3500::/32
Signature Algorithm: sha256WithRSAEncryption
00:2d:2c:1e:77:19:2a:e2:d8:8f:4c:37:f2:08:42:f4:77:53:
ca:29:c1:3e:24:fb:ce:a0:0d:f9:57:bf:39:bc:0f:2f:9b:87:
20:97:4c:d7:40:67:38:9e:da:a5:45:ec:a8:d6:d8:3a:11:5f:
70:66:e8:bc:e3:52:d4:52:f3:b6:d3:43:b9:26:d7:91:ad:c9:
2a:34:e7:53:aa:55:02:b6:f0:eb:2d:af:8e:19:77:fa:a9:e2:
22:fd:e2:9d:f2:4b:3a:f9:8a:00:49:bf:e9:d4:d8:a8:34:23:
02:0d:e4:32:fd:00:e9:87:17:9e:91:e5:78:10:57:c1:15:e3:
48:21:fa:09:9d:42:7d:c2:c7:a6:36:c3:96:87:3b:98:01:3f:
c2:59:3e:6e:87:a5:d1:9f:bf:c2:77:c0:1d:cd:c5:a5:6b:bf:
71:fc:ee:28:34:61:ba:b7:0c:e5:8c:61:20:9e:ab:55:12:c4:
d2:c6:54:84:71:e1:b8:f4:41:30:36:f1:f6:2a:d9:61:dc:2e:
ab:ef:2e:0b:f0:b6:fb:24:fe:00:dc:71:53:3c:e2:2b:56:f7:
5f:f7:23:9b:2a:95:ad:da:fd:29:fd:66:4b:cf:ea:ea:8e:92:
74:b5:46:cc:51:c8:db:83:a3:92:2c:b3:ef:2c:f0:30:1c:6f:
1f:ba:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:03:27 2025 by rpki-client