Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/rytOjYktSxYttWQbNzKnWNHr8kE.roa
File: rytOjYktSxYttWQbNzKnWNHr8kE.roa (raw, json)
Hash identifier: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=
Subject key identifier: AF:2B:4E:8D:89:2D:4B:16:2D:B5:64:1B:37:32:A7:58:D1:EB:F2:41
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0194228DDFF5F02103AF303D873908910F1B
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/rytOjYktSxYttWQbNzKnWNHr8kE.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49363
IP address blocks: 185.13.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:df:f5:f0:21:03:af:30:3d:87:39:08:91:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af2b4e8d892d4b162db5641b3732a758d1ebf241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:b5:62:51:bf:dc:8b:d2:8b:5d:b6:ee:b9:
0d:3a:f4:63:53:31:7e:06:ca:27:6c:66:64:a7:f6:
88:56:ca:91:11:d1:b6:39:99:c2:42:59:da:16:66:
14:7d:9f:15:6a:34:f8:13:00:3b:11:b7:6f:00:50:
35:23:4d:71:3d:2c:0f:9b:6d:36:22:d1:31:7c:e1:
07:3f:f3:c3:3e:d1:a3:99:f0:11:11:3d:9e:bd:bd:
ed:a3:16:b6:2a:ce:f1:cf:ed:4c:82:39:54:2a:6e:
14:69:eb:e1:8a:6a:85:9e:ab:a8:14:29:6d:5f:42:
f2:35:4f:ed:6b:12:cd:ce:e9:38:a4:b7:7b:0e:d1:
1f:72:6f:16:2b:b2:50:43:03:5b:b2:a6:71:23:72:
32:e9:91:53:01:e5:14:f3:39:c9:43:0f:46:23:f9:
2c:f1:0a:83:25:9c:1b:f5:33:07:07:9a:83:50:6f:
7d:c0:f3:f7:7c:ec:6c:7a:59:5c:05:e3:d0:45:b2:
ae:06:63:26:3f:32:0b:71:7f:27:b3:59:e5:8e:22:
8d:0f:62:9d:89:a1:11:26:96:4c:39:5b:98:ea:5b:
0b:7e:54:bc:c4:87:7a:09:a3:39:12:1b:29:11:af:
84:d7:48:05:db:13:aa:8e:60:cd:70:bc:90:c7:5c:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:4E:8D:89:2D:4B:16:2D:B5:64:1B:37:32:A7:58:D1:EB:F2:41
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/rytOjYktSxYttWQbNzKnWNHr8kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.196.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e5:4a:5b:82:a3:31:dd:ba:9b:db:49:86:d0:6c:28:05:0f:
7c:4d:25:89:37:c0:1a:40:60:68:09:25:67:0c:c8:b7:a6:8b:
37:03:cd:df:de:29:f7:33:37:16:15:5a:87:94:91:28:23:db:
db:d4:73:7d:65:5b:fe:81:09:d1:23:a1:4f:c5:3f:21:29:98:
31:16:af:0d:3a:7c:72:6c:81:b2:b5:47:5a:fb:56:5d:61:5c:
cc:75:f6:ca:d4:04:92:6e:1e:8b:ec:e6:7d:e8:bf:ca:bc:76:
91:7b:c1:9b:b0:21:ba:93:77:65:5f:55:ad:2f:3d:26:f0:67:
66:5d:20:ed:02:1f:5d:36:ac:e4:ce:27:f8:d9:ae:93:3b:16:
c2:f1:8d:94:c4:11:29:55:bd:d3:33:d2:fb:68:cd:32:91:74:
66:16:ef:0f:9f:8f:a9:c0:1b:dc:dd:53:a7:d1:77:dc:b9:5e:
a7:f4:3e:f0:a7:3b:16:f4:43:67:2c:2b:b0:ae:53:8f:a2:05:
5a:e6:fd:89:02:94:5c:81:8a:71:50:9f:3a:c3:a2:48:66:e7:
9a:80:24:42:04:0a:28:2d:c6:82:0b:f4:46:99:06:cf:13:73:
09:7e:84:7b:70:19:89:2a:66:d7:50:cc:9c:b3:c5:c9:c4:22:
bb:2b:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:22 2025 by rpki-client