Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa
File: YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa (raw, json)
Hash identifier: BC3v0Dl3cG1aikvL7OWlvbHbeypg204fJkwz+Gf4ia4=
Subject key identifier: 62:E6:75:83:2D:ED:94:EA:1D:78:9D:06:9C:BF:15:0C:6A:3A:E4:E8
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143CAD70C1E4815634D4E6B32145AC4
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60539
IP address blocks: 5.160.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ca:d7:0c:1e:48:15:63:4d:4e:6b:32:14:5a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62e675832ded94ea1d789d069cbf150c6a3ae4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:2b:ab:32:62:6e:e3:56:d1:29:56:7a:f3:
95:bb:df:a3:51:2a:20:6f:31:ef:bc:8e:8a:37:3b:
69:37:13:f3:3e:17:1e:b2:11:bd:2d:24:2f:0f:5a:
30:4a:98:09:31:f0:66:e7:96:3c:f8:6c:69:57:53:
bc:f0:df:aa:68:b4:82:59:9b:de:4e:90:b8:9f:f1:
7e:69:3c:82:72:73:02:eb:b8:2f:dd:3d:a2:20:54:
34:08:7a:54:06:d5:de:59:7f:83:14:6e:8e:17:95:
5b:fc:27:52:94:db:15:e1:e0:18:59:7c:fd:b1:fb:
43:08:62:d8:43:82:f4:a0:b0:e1:fa:d0:ba:bb:19:
b6:c3:2a:68:4b:88:6f:e8:7f:db:c1:52:38:28:3f:
60:7c:9a:ae:4f:67:c6:ae:00:4a:73:ed:18:5e:40:
1a:ed:58:13:71:36:c4:99:de:56:5e:e2:75:14:dc:
0b:e4:cd:43:5e:cb:ed:d0:7e:4c:53:8f:78:1d:bd:
a7:7d:67:e9:5b:b7:d9:7f:9b:13:bc:bd:af:9c:45:
b5:28:20:76:4e:38:ec:cf:58:a5:b7:f7:54:38:b9:
92:56:bd:64:d8:39:2b:65:ab:69:c8:b9:27:23:4d:
25:6f:af:2c:8b:c4:6e:5b:8b:bc:44:c0:c3:18:d4:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:75:83:2D:ED:94:EA:1D:78:9D:06:9C:BF:15:0C:6A:3A:E4:E8
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/YuZ1gy3tlOodeJ0GnL8VDGo65Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.111.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b7:ce:4d:80:e1:f4:96:31:8c:54:63:64:9c:e6:65:d1:58:
77:0d:c9:de:1b:f2:ca:36:85:f2:99:23:15:be:d2:bf:06:98:
7f:33:7a:46:16:c4:94:65:63:42:bf:f3:53:72:5e:f4:10:00:
0d:bd:1d:cc:71:e0:6a:ff:b7:8f:ff:66:4e:06:b0:82:8e:58:
3b:84:55:6e:33:5a:fe:04:5f:19:33:c9:59:54:bd:a5:d7:6f:
1c:58:12:86:cd:07:ef:82:14:4c:44:9d:f1:fa:72:b6:cd:39:
b4:c4:58:61:f2:3b:85:dd:f9:ad:97:59:ca:76:68:ce:82:42:
87:08:9d:26:c9:13:ac:c9:ef:11:91:8e:14:cd:fc:5e:47:1e:
38:73:3b:bf:db:58:be:8f:e4:1f:c6:f6:dd:7b:3e:4b:d9:bc:
8b:77:40:a3:f0:f9:7f:4a:c1:6f:84:04:b7:f0:78:ec:c0:ed:
37:59:0b:8a:5f:b7:17:7c:f1:d5:c2:3e:3d:e5:19:f6:48:98:
f4:0f:8b:eb:61:f0:2d:77:17:4a:ef:f2:d1:08:0b:e9:aa:5f:
99:23:8f:df:e8:70:70:ab:af:55:15:9f:9f:0f:2e:ba:94:ab:
f3:7f:f3:2f:74:31:aa:22:3c:cb:8c:92:f8:07:8d:eb:bf:88:
81:b9:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:56 2025 by rpki-client