Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YigM9o9WosdlNmKNFPaCvchCGo0.roa
File: YigM9o9WosdlNmKNFPaCvchCGo0.roa (raw, json)
Hash identifier: xkx+ruNfOx7M5yNL/4wo/8N4PkUoXOd7NfubHbmmg4o=
Subject key identifier: 62:28:0C:F6:8F:56:A2:C7:65:36:62:8D:14:F6:82:BD:C8:42:1A:8D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222023438721B9013AB3FCCBEED74A84
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YigM9o9WosdlNmKNFPaCvchCGo0.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58073
IP address blocks: 185.214.10.0/24 maxlen: 24
188.215.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:43:87:21:b9:01:3a:b3:fc:cb:ee:d7:4a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62280cf68f56a2c76536628d14f682bdc8421a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:2c:eb:35:42:e1:fe:f4:17:86:de:c3:9b:
5b:01:68:25:49:9a:5d:4f:51:bb:50:2a:cd:04:b0:
1b:0a:a3:b8:cf:a5:0f:51:f6:54:17:42:8e:e5:f3:
9c:51:c7:a1:3a:dc:a8:eb:c1:7c:8e:51:09:d8:e4:
cc:e1:fc:34:96:b9:49:d9:74:fd:19:37:be:6e:a1:
11:f4:79:e0:af:ee:42:dc:51:d6:dc:cd:a9:cd:f4:
c9:c5:dc:ed:2b:5c:c3:35:25:b9:48:16:f5:0a:a2:
6a:9f:54:c1:4b:a3:18:b6:c4:00:ae:fd:5c:bc:ea:
74:86:bb:ad:d5:66:d6:44:ab:4c:03:33:50:b2:4c:
67:65:14:01:a5:31:fe:5b:58:8b:77:d9:e0:88:28:
7c:46:38:16:2d:6d:54:77:aa:ec:e5:26:4f:89:ae:
b6:c0:47:d9:cd:9a:c3:a3:f1:16:0e:36:9f:bd:ec:
ce:8f:82:15:30:44:8c:60:4b:3f:b7:e2:4c:87:7b:
f4:62:96:fc:cf:99:56:ea:68:77:3d:7d:e4:cb:73:
7a:9e:bb:b5:c9:f4:fc:93:33:ed:48:f7:40:05:c2:
0a:f9:91:22:15:0d:9e:e4:83:9d:fe:46:3d:27:07:
c6:2a:28:84:1c:41:12:5b:48:90:0d:44:c7:c4:ff:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:0C:F6:8F:56:A2:C7:65:36:62:8D:14:F6:82:BD:C8:42:1A:8D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YigM9o9WosdlNmKNFPaCvchCGo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.10.0/24
188.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:d8:bd:bf:ca:b0:4e:85:01:67:25:31:da:d2:5f:41:ef:
a5:35:78:13:06:c0:8c:0c:5e:54:b7:5c:54:c1:c9:7f:f7:52:
88:08:43:c7:f7:0d:e3:b0:f6:55:3d:08:58:83:cb:0f:65:08:
d7:3d:d7:50:11:ca:bf:5a:9c:bc:3e:9d:da:9a:67:8a:50:38:
73:72:e2:49:88:a8:4a:40:68:af:e7:a6:f3:ca:6e:cb:23:a2:
c5:18:0b:46:d7:ff:27:b3:1e:f0:de:2a:29:e6:f1:87:77:ee:
7f:74:1c:b1:cf:37:3d:d5:e0:a6:4c:62:a2:b1:7b:df:64:ea:
ce:90:4a:cc:c9:ec:c1:95:f0:be:3b:4f:bb:2f:e2:c7:58:cd:
62:30:b8:5c:ae:58:92:91:e0:cb:ee:cd:53:cf:26:47:88:24:
74:17:71:61:10:3f:3b:45:fd:d0:b2:27:a5:4d:b9:38:d1:21:
a0:01:0f:79:58:43:fb:2c:87:15:55:49:92:66:67:e3:09:5a:
1d:53:9e:b5:f6:50:e3:bf:22:ba:ef:c2:ac:69:11:cd:08:51:
3c:2e:db:1c:fa:87:76:5d:db:2e:1a:e0:bc:c4:8c:2a:cb:68:
a8:83:ea:89:5b:92:af:75:c9:e3:dd:ef:63:2b:60:c0:6d:82:
a0:e4:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:37:27 2025 by rpki-client