Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/yISIjc9YgTnf71Z4E-nlNbitu7U.roa
File: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (raw, json)
Hash identifier: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=
Subject key identifier: C8:84:88:8D:CF:58:81:39:DF:EF:56:78:13:E9:E5:35:B8:AD:BB:B5
Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial: 019422FBC2C1359CE1D4380A408345A70EE0
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/yISIjc9YgTnf71Z4E-nlNbitu7U.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62086
IP address blocks: 185.48.104.0/22 maxlen: 24
2a01:9820::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c2:c1:35:9c:e1:d4:38:0a:40:83:45:a7:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c884888dcf588139dfef567813e9e535b8adbbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:a5:5e:1a:fa:29:de:ee:3b:57:a9:08:87:
87:14:4c:87:28:93:83:c8:54:9c:25:ce:d8:48:3a:
ae:13:36:ca:9d:93:c0:5e:d6:ad:bc:33:6e:24:1e:
9a:a9:3a:ce:29:9c:49:39:1d:91:29:ed:c0:29:8a:
0f:91:70:d1:2e:d3:83:40:78:72:04:87:66:cd:f2:
a5:36:ea:4e:8b:0b:16:3b:7c:2a:13:bc:ce:23:24:
2b:4c:02:a0:ff:80:1a:54:f6:0a:bc:4d:6b:78:63:
ef:24:70:86:3b:fb:46:82:a9:5d:f1:7a:aa:06:80:
c4:14:52:96:c9:11:37:76:40:60:58:40:d5:9e:f5:
73:5c:46:7e:f9:57:7c:d6:3e:97:96:8d:ca:14:66:
94:4f:9b:8f:ed:77:d0:ac:84:5d:7d:cc:60:6e:a0:
92:db:c3:64:ab:25:2a:f8:b6:a5:98:29:4c:01:bf:
0d:cc:0c:76:53:e8:1b:f0:b3:03:17:20:ec:4e:79:
75:da:c4:8a:a0:de:dc:9e:77:0c:83:92:70:75:95:
6e:95:b3:a2:73:5c:89:dc:0b:a1:62:78:ef:d4:65:
28:4e:e6:cf:bb:ae:18:1f:39:c6:6c:29:23:2b:7a:
8c:d3:28:1b:b3:c3:66:e2:3f:42:4b:5d:d4:db:3b:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:84:88:8D:CF:58:81:39:DF:EF:56:78:13:E9:E5:35:B8:AD:BB:B5
X509v3 Authority Key Identifier:
keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/yISIjc9YgTnf71Z4E-nlNbitu7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.104.0/22
IPv6:
2a01:9820::/32
Signature Algorithm: sha256WithRSAEncryption
6b:a4:68:80:7d:08:32:f3:cb:04:a2:01:54:45:de:28:80:01:
ae:f7:9e:c4:13:61:cf:8d:63:21:1a:f4:ef:4f:36:18:f8:3a:
37:66:3d:13:f8:91:99:94:93:0c:24:3e:4a:eb:f3:b0:fd:b3:
a2:62:86:cd:8d:e4:86:1e:d5:7d:2e:68:f6:eb:e3:0e:fd:6e:
fc:a1:59:26:e9:00:58:a9:eb:b5:97:ca:bb:d1:80:8a:d2:d2:
88:72:df:b6:f5:b5:9d:03:12:71:0b:19:5a:26:c5:c1:99:14:
b4:bc:86:3b:43:08:da:f7:99:64:71:90:8d:ca:5f:0a:65:52:
04:d1:4a:17:3c:35:3c:6c:30:42:d9:05:15:4f:8b:39:96:ec:
1a:a8:4b:11:e5:17:7d:0d:d0:2b:4b:d9:3b:29:87:74:2e:8e:
29:94:5d:29:57:a0:ce:68:11:93:2d:2c:59:9c:84:81:4d:02:
8b:e8:04:43:6c:02:85:a1:e6:1d:ff:f5:2f:61:49:54:d1:75:
ae:83:70:e4:30:5e:4d:61:17:8b:90:3c:9e:35:67:b7:a8:d3:
fd:6b:a9:b7:35:b8:15:5f:a4:3b:ef:a3:2c:38:f6:eb:91:06:
04:2f:be:10:6c:4f:dd:b9:b6:93:1a:37:f9:38:2a:bc:ae:f1:
11:92:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:55 2025 by rpki-client