Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/_YoOTD4iLAO7_l4DScmyMvRtaX4.roa
File: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (raw, json)
Hash identifier: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=
Subject key identifier: FD:8A:0E:4C:3E:22:2C:03:BB:FE:5E:03:49:C9:B2:32:F4:6D:69:7E
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 019421444563FB963B2686C9CA042DE22C4F
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/_YoOTD4iLAO7_l4DScmyMvRtaX4.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201237
IP address blocks: 185.81.20.0/24 maxlen: 24
185.81.21.0/24 maxlen: 24
185.81.22.0/24 maxlen: 24
185.81.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:63:fb:96:3b:26:86:c9:ca:04:2d:e2:2c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8a0e4c3e222c03bbfe5e0349c9b232f46d697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:e7:f4:e5:a3:2c:25:1e:50:1e:62:77:3d:
82:a7:5a:f8:10:aa:8e:7e:e5:52:e8:2f:b6:ab:9d:
51:e6:27:51:13:44:a7:fb:43:79:2d:dd:2f:7c:4b:
6f:8d:7b:0b:b1:0c:d7:80:c5:24:39:76:25:1f:78:
d0:7a:9e:ba:e5:b4:0d:2c:f9:f7:4a:55:dc:8b:6c:
00:a5:70:17:d9:85:b0:55:73:07:d4:46:bb:91:90:
f8:71:c3:e8:6c:cc:72:02:a1:eb:b5:f0:f7:90:de:
ca:fa:ed:9e:78:2e:6c:c8:94:84:24:f4:3f:df:8b:
1c:96:a7:a0:b8:10:7e:aa:62:a1:f1:17:26:d0:ce:
42:45:16:91:ee:ac:82:f4:70:81:6c:81:7e:89:99:
54:87:97:1f:fc:98:b7:48:2f:fc:93:83:60:83:2b:
a8:14:54:af:a9:bf:2d:bd:91:fa:56:e9:56:6b:ea:
15:1a:e2:5f:d6:2b:ef:be:c4:67:86:a5:71:60:94:
82:0d:f6:26:54:16:68:e4:2e:cb:b0:f6:5c:1a:8e:
68:ad:b7:10:60:f3:82:59:bc:f5:d0:b3:bc:c1:86:
04:e7:4b:86:20:d7:d6:f8:60:44:f9:e6:b0:f7:2c:
f3:44:eb:dc:69:97:a7:87:dd:d1:a3:41:14:a9:86:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:0E:4C:3E:22:2C:03:BB:FE:5E:03:49:C9:B2:32:F4:6D:69:7E
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/_YoOTD4iLAO7_l4DScmyMvRtaX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:f9:a8:90:2a:6f:7c:de:4a:d9:f5:d9:73:d3:d4:8a:3a:f8:
d2:5a:eb:39:49:86:01:7a:36:ed:11:51:30:33:d4:b0:99:5d:
09:c3:2a:9d:36:23:0d:20:b5:f7:50:93:36:5e:2c:7a:66:56:
0b:dd:44:77:17:4b:cd:39:7a:1d:5a:7e:62:8e:9e:c4:eb:ba:
78:09:e8:27:4f:46:a2:27:07:83:a0:f6:bc:1f:96:24:87:c6:
09:ee:93:ee:f3:26:ea:e6:18:44:55:aa:fc:f5:e7:b5:a8:2e:
8c:71:f0:e1:f4:d3:b3:5a:f5:ce:3e:44:66:58:f0:f9:79:e0:
f6:b8:cc:b8:85:e9:54:c1:06:53:57:db:f7:2e:2d:21:e2:7e:
78:f1:12:d2:b7:56:db:27:3f:fe:31:72:de:c1:8e:07:d0:ee:
4b:ae:d9:20:c6:2b:be:8a:54:25:b1:9d:89:8f:06:26:d0:48:
98:22:65:fb:fc:f7:55:38:8c:6a:fd:64:24:36:1f:f6:eb:93:
20:af:14:cb:e0:42:e2:31:8e:6f:f4:af:4d:92:8a:47:63:8a:
c4:a4:3e:a8:48:4a:7c:ac:c6:35:23:df:a8:72:10:40:8a:7c:
a1:72:f2:d9:73:23:1c:23:a7:30:85:54:cc:cf:80:13:2c:63:
c5:ae:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:04:34 2025 by rpki-client