Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa
File: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (raw, json)
Hash identifier: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=
Subject key identifier: 60:12:D9:18:91:C9:28:7E:03:A1:5F:57:AC:98:7B:2A:B2:C0:63:48
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019421B15EFE8429B6C5E08429BB45434C0C
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa
Signing time: Wed 01 Jan 2025 11:47:39 +0000
ROA not before: Wed 01 Jan 2025 11:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57777
IP address blocks: 185.173.128.0/24 maxlen: 24
2a10:fc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:5e:fe:84:29:b6:c5:e0:84:29:bb:45:43:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jan 1 11:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6012d91891c9287e03a15f57ac987b2ab2c06348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:3f:e4:1c:78:b2:39:5a:59:19:08:2f:01:
9f:6b:c8:24:a7:37:83:d6:27:e4:69:a2:a6:bf:84:
5b:21:fd:8a:be:2e:67:fd:2a:27:09:b3:11:40:41:
a7:4f:66:a9:7e:90:43:75:32:b7:7b:0b:3f:ba:99:
37:00:22:2f:af:5e:1a:a7:8c:b2:f7:a7:36:3a:f4:
e0:44:52:64:23:0e:60:20:c4:c3:a5:ee:b8:aa:22:
82:38:9f:70:d9:b0:7f:b5:fc:d3:df:43:6b:22:07:
1c:2b:3c:a9:c4:10:ca:08:24:39:c2:2d:67:7e:c7:
e4:58:ca:c3:b4:17:60:dc:9a:05:59:8e:cf:b9:47:
31:fb:82:99:12:64:52:16:97:2f:20:07:ff:6a:e6:
a7:8e:52:cf:0f:7c:a6:50:65:67:9d:f8:4a:9c:7c:
cc:ee:94:19:b6:ac:fe:1e:93:6b:76:b0:a7:0e:27:
20:ad:ee:e3:c4:60:13:41:37:ad:f8:1b:a9:4f:54:
25:39:e4:cb:ab:d9:2a:71:7f:88:4d:77:5a:31:00:
3f:63:a9:0a:45:01:b2:94:0a:86:6d:27:c9:ab:8d:
ed:cb:2f:30:ce:6a:3f:8e:ee:e7:14:40:94:b6:f1:
b0:93:0c:7b:95:bd:f4:2e:6a:00:93:f2:87:b6:72:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:D9:18:91:C9:28:7E:03:A1:5F:57:AC:98:7B:2A:B2:C0:63:48
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.128.0/24
IPv6:
2a10:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
5c:6a:b5:f7:92:27:b6:03:5b:a4:72:1e:5b:02:7e:45:b5:ea:
bc:8f:49:44:4c:d7:6a:fd:ab:21:47:34:2f:24:17:f4:20:ae:
99:f7:65:c0:d2:39:8a:c2:51:72:9b:63:96:6e:01:46:03:09:
15:78:cb:2e:9e:a5:c0:85:85:11:4b:17:b2:36:99:3d:ac:91:
18:4f:91:63:20:bb:89:c9:34:37:b4:4e:db:e1:1a:36:54:f7:
83:96:1e:94:a9:2c:22:a2:f5:c6:c8:86:97:8a:d7:32:ea:58:
6c:13:f4:17:d2:53:cf:72:a4:93:71:dc:96:c4:82:ec:f9:ac:
b8:3f:40:0f:a7:33:02:02:8c:5e:c2:33:b4:cd:a3:6a:de:06:
08:6a:d2:96:42:96:e2:4a:7c:11:eb:13:5c:65:71:2a:c5:94:
23:d1:7e:72:88:77:d8:86:85:e2:f8:d6:e2:d5:de:03:fe:10:
6c:3a:7c:4a:cd:4b:ef:79:30:6c:3a:8a:c6:2f:0e:56:82:be:
7a:6e:d6:d3:33:82:ee:69:e7:fb:63:c2:63:a9:4a:f4:f5:6f:
41:9f:4b:3a:9e:90:0b:4d:7a:07:9f:9b:72:af:73:ec:59:c4:
81:60:00:16:48:35:09:15:e4:96:51:d4:bb:47:47:79:60:e0:
4b:b7:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:53:10 2025 by rpki-client