Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yj9vr2VnE10QnxtDsz-n2QVr0i4.roa
File: yj9vr2VnE10QnxtDsz-n2QVr0i4.roa (raw, json)
Hash identifier: oY4OEejijqth0Kn/mWSI257F9MR4bW3yyLCjseFCr/g=
Subject key identifier: CA:3F:6F:AF:65:67:13:5D:10:9F:1B:43:B3:3F:A7:D9:05:6B:D2:2E
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 0196383BE1247925BB499F7B86CF8E3C9B10
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yj9vr2VnE10QnxtDsz-n2QVr0i4.roa
Signing time: Tue 15 Apr 2025 06:56:10 +0000
ROA not before: Tue 15 Apr 2025 06:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214359
IP address blocks: 185.239.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:3b:e1:24:79:25:bb:49:9f:7b:86:cf:8e:3c:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Apr 15 06:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3f6faf6567135d109f1b43b33fa7d9056bd22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:c4:01:1c:5d:37:4f:10:60:3a:5a:4d:dd:
54:7d:8f:a0:3b:63:c7:4b:32:72:a4:3e:3d:5f:d8:
38:2c:1f:71:59:7f:b9:d3:1a:1f:58:03:02:89:8f:
08:33:27:05:d1:b8:d0:26:f1:f4:89:93:98:5c:61:
7b:22:19:2e:42:a1:32:62:e1:11:54:42:b0:e0:44:
4e:2b:e5:9f:ff:32:2c:87:9b:0f:08:23:3c:bb:04:
63:54:05:46:c7:76:37:fe:e3:59:41:34:18:7a:fa:
74:e4:fd:39:d7:b3:25:30:d8:88:ab:86:47:88:39:
a4:5f:5c:9d:88:02:30:19:f6:4e:6e:fc:99:9e:23:
b5:10:f5:f6:54:dc:8d:50:34:bd:ba:fb:40:06:30:
87:55:21:9a:58:81:b3:8a:8a:6c:94:b6:2e:ad:00:
d3:f6:50:32:e8:ba:52:13:2a:55:54:9c:cc:dc:e6:
53:2d:24:23:0c:dd:3b:49:5f:65:a3:cb:95:91:ad:
1f:fa:67:8c:5b:5a:33:ba:a1:ed:ab:86:7c:f5:b3:
c5:ad:2c:3d:00:37:18:e4:d2:9d:df:1c:fa:6d:2b:
f7:4f:09:ab:cd:cf:1a:8d:93:40:70:f6:21:bf:9c:
24:a6:a3:02:e9:82:9b:3e:dd:97:b7:a8:0b:87:90:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:6F:AF:65:67:13:5D:10:9F:1B:43:B3:3F:A7:D9:05:6B:D2:2E
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yj9vr2VnE10QnxtDsz-n2QVr0i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.178.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:2b:a4:28:2d:ab:cd:41:3a:47:bf:97:f0:f1:ac:2c:79:47:
76:11:9d:be:e3:43:67:a0:b3:e6:ba:9a:bd:d0:d2:5f:ca:8e:
14:65:8c:c4:7b:c0:76:bf:68:d7:dd:a7:2b:99:c4:a7:10:d5:
e0:b4:58:27:61:80:30:4d:cf:09:b7:0d:27:db:9e:da:2f:9b:
21:b0:b1:f7:3c:11:97:b7:90:53:c3:28:06:18:33:75:74:79:
f9:78:ed:d0:28:a6:84:ce:03:b2:6a:37:1f:b7:89:b8:eb:3d:
7a:bf:3c:ae:4d:55:ef:1f:7c:52:45:1d:3b:b4:a9:15:62:02:
bd:2e:00:71:f5:7d:1e:7d:44:b0:fc:87:da:7a:2f:07:ae:31:
ee:ee:bc:2f:dd:14:4f:85:4f:39:a6:ca:d2:f8:4f:37:44:69:
8b:03:4c:3b:02:f2:e5:4d:49:9d:57:70:d6:f6:e9:11:87:02:
ab:34:16:26:42:9f:b5:42:bb:ed:8f:3a:6a:f8:bf:70:d7:77:
52:ba:37:ef:e9:62:4a:53:70:02:1a:88:b7:16:6f:41:4f:f5:
0c:01:d9:6b:f2:36:90:6d:1b:11:8b:63:e2:80:0b:3b:3e:f1:
8d:95:f5:f0:7e:56:db:52:24:bd:9c:0a:b0:71:ce:32:28:25:
6e:4f:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:07 2025 by rpki-client