Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/yytkDg390wURQAs45MKB5G-EL9Y.roa
File: yytkDg390wURQAs45MKB5G-EL9Y.roa (raw, json)
Hash identifier: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=
Subject key identifier: CB:2B:64:0E:0D:FD:D3:05:11:40:0B:38:E4:C2:81:E4:6F:84:2F:D6
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 0194228D5BA6520F44C4C8F9C1F40D33E51E
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/yytkDg390wURQAs45MKB5G-EL9Y.roa
Signing time: Wed 01 Jan 2025 15:47:56 +0000
ROA not before: Wed 01 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214813
IP address blocks: 185.195.234.0/24 maxlen: 24
2a03:1b21:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5b:a6:52:0f:44:c4:c8:f9:c1:f4:0d:33:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2b640e0dfdd30511400b38e4c281e46f842fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:a0:35:a3:06:a1:e4:9a:d3:f9:f8:92:90:
1a:2a:10:97:4b:48:b4:e1:f2:82:5c:9f:ce:44:5e:
c7:7d:ce:45:4b:07:86:34:a3:4b:cf:38:67:ed:ce:
98:38:11:58:67:57:ea:fd:51:54:8b:eb:14:2a:39:
3c:fe:a7:9d:78:c0:cb:e3:c8:b4:1e:e7:07:9f:d2:
21:ba:bf:b1:a9:a2:a6:25:93:1c:e9:68:e7:60:8a:
01:76:8c:d4:b5:47:04:db:15:0e:da:b0:7b:57:46:
a1:91:3f:66:7c:6a:d1:6f:66:e3:92:d8:a3:93:99:
36:ca:a8:a0:58:11:ad:1e:c6:04:64:67:03:72:8d:
22:bf:9e:71:82:96:f0:cd:2a:8b:37:a2:68:42:84:
13:4a:e7:a5:e2:05:6c:84:52:9d:eb:ff:fb:86:b4:
49:69:58:66:90:bb:be:57:a4:c0:1c:c1:68:85:c5:
64:0e:de:fb:c7:18:a2:62:f5:e5:14:51:ec:8e:c2:
df:1a:9e:0a:ba:22:7f:57:20:47:45:0f:8b:a9:20:
bd:e8:33:54:99:fc:61:ab:30:11:e6:a8:84:b2:37:
71:fa:de:52:76:be:bd:1b:33:32:b9:e6:b9:55:98:
6c:6f:55:3f:22:3a:12:2f:5d:89:ed:7e:b9:56:30:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:64:0E:0D:FD:D3:05:11:40:0B:38:E4:C2:81:E4:6F:84:2F:D6
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/yytkDg390wURQAs45MKB5G-EL9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.234.0/24
IPv6:
2a03:1b21:1::/48
Signature Algorithm: sha256WithRSAEncryption
02:58:69:35:0c:24:6d:49:d1:73:ed:d8:f2:9f:92:c4:18:ea:
83:48:f1:17:26:35:08:9f:38:32:0a:76:2d:fb:99:bc:d8:b0:
01:22:2e:dc:25:c7:7e:70:74:e4:f5:54:0c:9a:a8:56:c6:ee:
c8:f3:d8:f4:c8:26:18:81:04:f7:a8:fb:dd:0b:50:f5:89:2c:
45:71:42:a7:ef:b6:da:c1:1b:cc:a8:a2:6e:48:d9:3c:4f:2b:
0f:4a:7d:65:3c:2b:a4:54:8d:05:3d:11:27:cd:3d:25:e1:52:
d8:0c:f6:6b:17:ac:2f:75:a4:75:cd:27:a5:16:86:bf:56:06:
e5:74:1b:97:1a:d7:20:2b:31:a4:2f:d6:97:07:3a:ec:3e:ef:
5f:37:1d:ac:e3:0e:a3:ed:ca:0e:b7:97:14:04:df:18:d3:5e:
7c:79:f6:1f:5a:3c:7a:b1:f3:20:dd:e3:2b:f6:62:84:16:e7:
7c:90:c1:e4:82:b3:0c:ec:91:90:49:45:94:6c:20:c6:5e:c7:
25:ce:ef:8f:93:c5:c7:49:25:3d:61:16:0d:07:05:ab:ba:5e:
ed:36:38:1c:d9:6c:55:5f:8e:5b:cb:20:d3:f5:14:07:2c:2c:
f7:6a:1f:74:da:6f:86:97:20:be:b8:0b:f6:dd:58:d1:fd:8e:
e4:29:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:43:00 2025 by rpki-client