Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tY_SBiXlNsyr5MWGvZwrQKokaZY.roa
File: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (raw, json)
Hash identifier: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=
Subject key identifier: B5:8F:D2:06:25:E5:36:CC:AB:E4:C5:86:BD:9C:2B:40:AA:24:69:96
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FC594B1C743B101FDAFE614A2D4D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tY_SBiXlNsyr5MWGvZwrQKokaZY.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57986
IP address blocks: 85.133.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fc:59:4b:1c:74:3b:10:1f:da:fe:61:4a:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b58fd20625e536ccabe4c586bd9c2b40aa246996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:db:aa:fa:ac:a2:0f:4d:f7:c1:06:87:85:
32:01:61:5f:70:5b:06:8b:fd:58:55:b3:1b:15:28:
89:91:d0:a7:2b:d8:33:eb:7c:bb:74:be:35:10:47:
5e:cb:b2:65:26:91:25:8d:ae:40:64:51:3c:a1:c8:
be:c0:75:6d:e2:88:7f:5a:d8:95:09:c7:e3:82:d7:
95:15:ca:08:79:fd:e8:cd:63:67:c4:29:be:5a:27:
5e:a0:ae:7a:7e:89:3a:fa:12:af:f2:0a:ae:3d:9b:
90:53:4d:ec:b3:3a:f0:3e:c3:72:2f:f1:17:13:9f:
6b:f4:e7:15:a1:39:c7:92:df:4e:cf:d4:b9:22:69:
ac:08:fc:a2:81:ab:a2:ef:9b:3d:11:1c:cc:5a:44:
98:04:3a:41:7b:8f:16:c0:08:e7:bb:eb:69:12:a0:
c3:cd:63:cd:a3:fc:29:46:f6:0a:e9:6a:0e:c6:37:
06:4a:b3:b2:08:3a:26:09:3b:0a:06:d2:35:7e:61:
1f:ce:71:5c:ca:ab:21:72:65:69:9a:d0:25:2a:27:
7f:aa:7a:7b:46:1e:b3:5e:b6:87:79:fb:8f:47:99:
cd:f1:fc:0f:20:e4:92:04:77:b9:1b:d1:d5:65:01:
9c:53:24:f4:66:3e:66:c7:f3:1a:4c:6a:8f:bb:06:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:D2:06:25:E5:36:CC:AB:E4:C5:86:BD:9C:2B:40:AA:24:69:96
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tY_SBiXlNsyr5MWGvZwrQKokaZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3a:db:f3:4a:01:10:c0:66:33:c9:88:a5:86:96:75:50:cd:
48:9c:e8:94:31:0d:cb:60:ba:54:24:84:82:e0:46:f2:b2:92:
9a:06:23:81:07:b9:07:a5:00:05:8e:3c:6b:ed:94:f4:fc:23:
bb:02:73:71:e3:57:18:0b:53:2d:a9:36:32:1e:71:52:c3:ea:
60:44:ba:b9:58:6e:63:6d:d7:eb:b5:93:86:df:b4:78:b4:64:
8e:69:fa:5a:72:d0:22:97:e9:b9:e4:af:6a:a2:a3:05:23:3a:
ef:a8:35:2a:ef:c9:27:b1:b0:69:af:cf:b3:12:2d:68:e6:c4:
41:4b:2b:6a:1f:ae:0a:65:60:1c:56:34:5f:72:9a:40:70:e9:
79:48:a0:49:40:98:8d:a5:93:07:88:a8:c3:62:7c:51:a3:34:
74:6d:3a:32:67:43:9a:ed:c6:d9:d7:f6:22:79:bf:07:20:c8:
8c:ac:1e:86:b7:10:cb:ed:e4:eb:4e:08:69:ff:f4:85:69:90:
f7:10:b8:78:80:55:6f:04:91:b6:a5:ca:60:a4:0f:54:e4:48:
cd:9b:79:68:6e:a2:00:6c:9d:7e:f8:5d:a2:90:4e:84:2c:c5:
6d:98:a7:a5:1d:69:75:0d:9e:55:fe:cd:6a:b1:e5:69:d0:c6:
a2:a2:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:32 2025 by rpki-client