Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YIDqcEHNJqbeligVOf7eRPCyh90.roa
File: YIDqcEHNJqbeligVOf7eRPCyh90.roa (raw, json)
Hash identifier: Evf6we6qCccN8Es/nMKI/W4RpOMwY/QukfA1VnrFRoM=
Subject key identifier: 60:80:EA:70:41:CD:26:A6:DE:96:28:15:39:FE:DE:44:F0:B2:87:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195F74C567C3243002C69BA36571C0455A6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YIDqcEHNJqbeligVOf7eRPCyh90.roa
Signing time: Wed 02 Apr 2025 16:18:49 +0000
ROA not before: Wed 02 Apr 2025 16:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 266500
IP address blocks: 185.164.57.0/24 maxlen: 24
2a13:18c6:5584::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:4c:56:7c:32:43:00:2c:69:ba:36:57:1c:04:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 2 16:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6080ea7041cd26a6de96281539fede44f0b287dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:ee:34:c1:06:ca:98:19:56:db:4c:e9:ad:
7d:3f:b3:0a:40:a5:83:0d:9e:97:bc:b1:a7:b2:c8:
09:85:9d:90:12:41:2e:89:04:1d:c1:43:e4:85:4e:
84:a7:3e:1a:bc:a1:d3:9a:b1:f2:fa:b4:ec:cb:ff:
43:8f:c7:24:2b:f9:76:56:1b:45:35:34:c7:42:d7:
ff:0f:d6:bf:73:8c:e3:16:c9:6d:37:f6:ee:b7:b2:
7f:20:fb:01:84:96:28:ec:28:56:4a:aa:d6:d4:68:
fa:05:07:15:69:8b:32:b8:a0:1d:a8:3e:59:d5:00:
6c:2f:7e:f4:eb:9d:99:15:28:2d:bb:24:f0:39:13:
d5:ba:84:e0:8a:30:f5:c4:47:19:4e:40:63:e0:d3:
0b:2c:38:d5:0d:88:03:c5:50:42:02:f6:b0:94:fd:
3d:6a:1a:cf:ec:8f:7c:5f:43:73:08:b1:e1:18:a8:
81:0e:7a:a9:39:10:ad:78:23:19:9d:2a:20:7b:bf:
73:07:b2:56:c9:70:d8:9b:05:b0:d4:86:fa:3f:e4:
f7:c3:70:fd:2a:1f:e4:7a:08:6a:de:96:9d:84:65:
6d:bd:dc:66:14:d4:d0:11:3c:c8:3e:d3:22:7f:5a:
dd:cd:66:e5:63:54:69:aa:27:1b:7c:50:37:e9:36:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:EA:70:41:CD:26:A6:DE:96:28:15:39:FE:DE:44:F0:B2:87:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YIDqcEHNJqbeligVOf7eRPCyh90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.57.0/24
IPv6:
2a13:18c6:5584::/48
Signature Algorithm: sha256WithRSAEncryption
c4:bf:9f:7a:47:36:3a:c7:ea:b2:9c:e6:80:ce:29:a6:22:7e:
96:61:5a:ec:77:46:0e:60:b8:a1:ee:72:ab:2f:7d:82:92:a2:
50:bb:8d:b7:1f:db:9c:ed:88:dc:47:46:01:d0:f6:cb:d9:f5:
df:52:10:9c:b8:9d:13:ca:16:c8:f6:1b:69:2e:c2:cb:5c:e9:
b7:50:3c:73:8f:b7:89:2b:d3:5b:e0:9f:4c:3f:5a:ab:88:ad:
aa:41:dc:3b:de:e6:a6:a3:9b:44:53:3e:d7:96:ad:3c:8c:50:
d2:c3:f4:4e:7d:74:75:00:3b:70:7f:02:e8:14:24:56:e6:aa:
7c:0f:97:16:14:19:a2:06:90:fa:4c:43:b3:28:44:94:99:f5:
e9:96:cf:65:18:fd:50:f0:be:4c:51:93:a6:3d:73:7b:fe:47:
9b:c1:1e:ca:ea:49:d6:1b:8c:62:d5:0c:bb:72:97:df:b3:9d:
8a:2a:2b:7d:df:8c:79:53:95:96:d3:70:0f:9e:6b:da:bb:ac:
83:cf:88:8d:95:ec:fb:da:91:51:74:3a:ef:cf:78:ab:47:ca:
f5:88:84:d8:55:f4:3a:76:80:d9:02:87:47:1e:6f:6a:35:22:
ec:c3:c4:7d:1e:a6:00:ac:f5:59:f8:95:54:35:25:0f:52:f1:
53:d0:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:57 2025 by rpki-client