Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yAFpHfXvTgf2kt57kHV0AlkLCGs.roa
File: yAFpHfXvTgf2kt57kHV0AlkLCGs.roa (raw, json)
Hash identifier: fWzyEW9+dZmUfBGAhvVn9yo5gfqfhV/bIaR1FtKKJPA=
Subject key identifier: C8:01:69:1D:F5:EF:4E:07:F6:92:DE:7B:90:75:74:02:59:0B:08:6B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A47AF78828AC2EBDECAA164B3FBE3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yAFpHfXvTgf2kt57kHV0AlkLCGs.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131477
IP address blocks: 185.188.5.0/24 maxlen: 32
185.255.152.0/23 maxlen: 32
185.255.153.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:af:78:82:8a:c2:eb:de:ca:a1:64:b3:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c801691df5ef4e07f692de7b90757402590b086b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:9f:76:32:74:82:4c:02:05:c5:81:a5:1f:
c2:38:b5:2c:5c:c2:ca:ef:8d:fd:2e:3b:26:14:55:
47:54:35:cc:c9:f8:28:d7:cd:a3:09:78:58:e7:68:
bb:87:b2:6f:59:84:94:af:13:33:d6:aa:d0:9b:39:
f0:a6:de:57:ac:44:be:4d:ca:6b:e3:be:9b:56:6c:
94:80:0c:2c:3b:58:60:70:cf:94:9e:e1:22:92:16:
36:2a:52:95:f0:aa:c2:74:9d:62:6c:fe:dc:cd:7c:
a9:2f:a5:a2:31:f5:e9:ce:6f:bb:d8:ea:b4:be:8f:
cc:4c:d9:93:b6:f2:df:f1:12:26:b6:a0:3d:06:dd:
8e:da:e2:4c:10:47:f6:91:5e:49:f7:79:52:29:a3:
da:1e:8c:58:dc:db:ee:0a:67:76:c5:44:1f:16:42:
ff:91:88:6a:aa:28:61:0c:db:7f:04:32:d8:f4:85:
9d:5a:da:c7:58:28:9b:a0:b5:cc:2b:ab:31:d4:13:
e6:68:a1:0b:16:8d:10:7d:9c:b0:9a:87:ea:18:46:
8b:16:a5:21:f0:a0:20:ad:50:07:07:a7:fd:ea:02:
50:b1:93:23:b4:79:10:c7:38:c4:8a:d7:f9:02:4d:
dd:fc:28:9d:11:09:a0:66:cf:cb:51:7e:69:03:df:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:69:1D:F5:EF:4E:07:F6:92:DE:7B:90:75:74:02:59:0B:08:6B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yAFpHfXvTgf2kt57kHV0AlkLCGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
185.255.152.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:81:7f:07:c2:9e:9f:3f:f9:c9:dc:52:15:7b:64:9e:4b:2d:
a8:ac:12:de:ad:47:0f:ac:02:93:3e:56:02:e2:d7:4f:59:d3:
6e:2d:0d:42:34:0b:58:e7:bd:2e:89:1f:3c:3b:89:cb:cb:12:
b1:b6:d3:60:59:c4:b8:69:e2:db:6a:3f:28:89:12:66:90:9e:
e4:b0:a7:1e:2a:62:44:ee:8f:03:2b:39:68:e9:b8:d7:ff:a4:
30:35:d0:1c:5d:06:42:41:a9:d6:c0:18:8b:73:83:c8:3e:a3:
8c:4c:6f:06:89:93:13:41:97:41:af:4b:a4:07:11:b4:42:db:
1b:ad:c4:63:86:90:bd:bf:0e:5f:60:ec:9a:e9:83:37:48:0d:
5f:73:24:21:5b:01:00:c2:2a:2b:cb:ac:35:37:82:c9:09:e9:
e3:b8:17:b7:0d:e8:27:f9:f6:0e:67:c2:1c:1c:2f:d0:47:bf:
fb:28:d2:fa:68:24:7d:44:da:3e:bc:59:71:30:65:33:69:30:
cc:dd:8d:1b:90:ec:de:e8:70:c1:66:68:fb:0a:5e:2e:38:06:
09:3e:f6:16:cf:a5:63:f4:d3:16:63:95:1d:b7:2d:e2:57:b5:
a7:ad:58:4f:5d:30:4c:61:5c:39:62:cf:2a:af:ef:db:21:61:
48:d3:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:56 2025 by rpki-client