Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YlZhXbhxhW7DWd16qqwC1PGvWbA.roa
File: YlZhXbhxhW7DWd16qqwC1PGvWbA.roa (raw, json)
Hash identifier: a/kq2wVJ1FHgwt3r+887OM85lUj/O+wNaXUR1nOz1EM=
Subject key identifier: 62:56:61:5D:B8:71:85:6E:C3:59:DD:7A:AA:AC:02:D4:F1:AF:59:B0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220119A08CED92D944773708EDD4001
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YlZhXbhxhW7DWd16qqwC1PGvWbA.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 14.102.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:11:9a:08:ce:d9:2d:94:47:73:70:8e:dd:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6256615db871856ec359dd7aaaac02d4f1af59b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:27:33:32:76:88:83:e5:b2:20:e7:e2:80:
b1:9a:b9:0a:f8:c0:b0:23:62:b4:d8:ac:d7:0a:56:
47:2e:ff:64:fb:c8:55:41:6b:21:a2:cb:b7:c8:5d:
14:d6:ba:28:92:9e:da:e6:79:79:f5:0c:e5:4d:cb:
70:54:c8:6b:5b:42:e0:71:3a:e8:69:be:f8:33:6f:
b7:39:32:bd:39:da:ce:af:70:22:a6:70:e4:bb:6b:
c7:9e:e4:5a:a9:52:76:e3:4f:d2:8f:81:f1:5b:04:
74:5d:30:10:f9:a7:20:01:31:6a:18:14:3e:14:a2:
99:86:6a:94:93:3b:60:8a:45:4d:9a:d4:cd:d5:38:
52:c7:27:24:64:9f:d4:06:eb:4a:d0:a2:36:20:40:
d8:da:e7:a6:60:ce:bc:c5:b3:c3:de:48:94:f0:cc:
06:e9:9a:a6:6e:27:9a:26:29:26:5f:c0:6d:77:91:
c9:23:ab:6f:c0:b8:34:8b:05:c6:0b:c9:16:53:80:
3f:2c:70:64:71:fd:1e:2f:7a:1b:75:ac:7a:e7:76:
89:68:e0:0d:fa:6c:db:9d:ac:1c:bd:45:2f:1f:36:
c7:d8:f8:7c:06:7e:7a:aa:97:fa:20:db:45:85:6d:
91:d0:ef:ae:ee:c3:6b:d5:9a:9d:7e:57:98:5f:80:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:61:5D:B8:71:85:6E:C3:59:DD:7A:AA:AC:02:D4:F1:AF:59:B0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YlZhXbhxhW7DWd16qqwC1PGvWbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:53:ba:df:e1:d5:00:a0:ce:ea:76:92:2a:36:c9:a6:24:1a:
91:ae:97:30:11:ff:3c:d7:31:5a:60:32:21:9b:26:ae:b3:f7:
70:b6:31:67:42:aa:35:6b:5b:46:05:af:01:43:91:a7:07:fe:
c4:7b:fc:63:c7:9d:35:27:b5:4c:77:9b:ba:da:23:57:2f:16:
4a:70:21:77:6a:b6:15:bc:fd:91:1b:c6:c0:91:83:70:f4:db:
68:83:74:94:3a:c0:1f:15:19:48:35:29:98:66:eb:fa:13:a6:
7c:a8:dd:2c:3f:61:38:0d:b1:fc:2d:66:0d:05:f4:91:4e:d9:
55:2f:ec:38:0d:44:48:2b:d5:50:93:18:cb:06:46:c7:5c:23:
db:d5:9e:e1:f5:61:c0:22:08:a9:ad:b2:cf:05:b0:4f:64:c6:
d2:6a:40:93:cd:cf:d7:a3:f3:7b:cb:00:a8:35:2b:0d:dd:b6:
fb:df:ad:fb:52:60:04:57:f5:e3:44:2f:8f:54:e4:ef:65:8b:
c7:6f:8f:f9:5b:ef:f9:06:89:17:5d:d9:1d:8d:a0:0f:e8:3c:
62:fe:86:df:9e:12:6e:89:60:59:45:9f:a8:20:6b:11:57:5f:
50:f5:ab:7f:28:19:e9:ab:06:78:a5:f5:45:22:dc:cb:88:36:
e1:cf:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:38 2025 by rpki-client