Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa
File: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (raw, json)
Hash identifier: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=
Subject key identifier: ED:81:8C:CD:E1:12:D4:A9:0B:02:C6:DB:9A:D2:3A:66:3B:CE:F5:0E
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01941F8C5CAC11FB13E8009E2A3DF8B83AD5
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35407
IP address blocks: 185.159.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:ac:11:fb:13:e8:00:9e:2a:3d:f8:b8:3a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed818ccde112d4a90b02c6db9ad23a663bcef50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:52:8b:b7:dd:5b:9b:49:0a:ff:37:4c:33:
a8:44:61:9a:7e:f9:b6:c7:4d:5c:99:25:b0:62:ab:
9d:d1:59:68:1a:20:cb:93:98:9a:8a:90:e6:a9:67:
76:5b:ce:0d:4f:28:94:0c:d1:9a:81:35:cf:07:05:
d6:f4:b8:82:9d:3f:02:17:43:e5:9e:fe:f1:96:96:
d4:32:cf:eb:2c:fc:90:65:69:17:be:c5:2f:55:1e:
09:4a:ce:51:4a:66:1d:8c:7a:27:9a:54:ce:24:41:
70:be:6b:80:03:0b:45:61:06:9b:3c:12:45:0a:ea:
f8:8a:a0:de:56:2a:63:c9:72:fa:c3:b6:7e:b1:a7:
0c:86:ec:09:35:f9:f3:91:29:d8:f7:2c:b8:4f:90:
ea:c5:3f:00:7e:20:6b:54:92:de:f2:dd:9a:62:95:
70:e1:ff:b4:42:0c:8c:8c:c8:66:fc:3a:e0:55:19:
e1:3e:0b:78:e3:ca:42:f6:a7:30:84:c7:08:d6:fa:
ed:f6:6a:1c:96:00:03:0e:28:84:a5:aa:07:de:a1:
f3:b4:7e:9d:5d:19:b9:c8:9d:de:69:23:c7:f0:fd:
8b:ab:3f:94:66:d7:c0:01:b4:b8:c0:2d:19:8e:b4:
27:b4:23:54:04:97:10:f3:ed:80:10:2c:ed:53:fa:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:8C:CD:E1:12:D4:A9:0B:02:C6:DB:9A:D2:3A:66:3B:CE:F5:0E
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.110.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:bb:23:c0:1a:f1:96:4c:12:c4:ae:e8:19:28:7d:f7:db:a1:
26:ec:19:a3:9b:86:3c:f2:b3:9c:20:2f:48:ff:7b:21:7d:69:
63:ff:97:29:88:8e:cd:65:b2:3a:b4:45:9e:81:f8:59:36:e9:
9f:46:4d:5c:72:9c:69:e2:99:c6:41:eb:16:6d:0e:c8:6a:ec:
9f:af:95:f1:9c:b6:94:7c:29:f8:5a:93:fc:5f:fb:1d:e1:7b:
cf:c3:d0:a6:5f:73:89:7b:bd:02:41:07:5d:92:cb:04:3a:7c:
ba:13:85:ff:70:f2:9a:64:5e:8a:f9:51:69:6b:18:48:f8:0a:
dc:f7:78:77:2f:41:e5:9a:4d:6c:b2:58:02:09:dd:0b:7b:0a:
b2:08:cd:82:5d:3a:9c:ff:b0:d0:68:1e:29:6c:dd:69:53:8a:
a4:89:c4:e4:d8:f4:5c:d7:b3:ca:d5:d2:49:2e:26:6c:1c:a8:
fc:1d:f2:55:a0:f9:3a:39:0c:f2:c9:fc:d6:7d:70:d4:88:01:
83:9f:18:e7:58:25:4b:e8:a5:06:d5:7f:6e:3e:f3:a7:19:ac:
00:b1:48:a2:50:f8:80:10:ee:1f:83:68:2b:61:f1:30:15:c6:
55:a5:82:2e:a6:be:b1:fd:77:1a:fe:5b:4f:d9:ae:50:9c:49:
75:9f:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:31 2025 by rpki-client