Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/CyEvz68_PuSD2VXrrDfN85-80B0.roa
File: CyEvz68_PuSD2VXrrDfN85-80B0.roa (raw, json)
Hash identifier: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=
Subject key identifier: 0B:21:2F:CF:AF:3F:3E:E4:83:D9:55:EB:AC:37:CD:F3:9F:BC:D0:1D
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 01942369CD44EBDC2B7A9892E794E7F4D94D
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/CyEvz68_PuSD2VXrrDfN85-80B0.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201010
IP address blocks: 185.89.24.0/22 maxlen: 24
2a05:d500::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cd:44:eb:dc:2b:7a:98:92:e7:94:e7:f4:d9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b212fcfaf3f3ee483d955ebac37cdf39fbcd01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:b4:be:9d:67:17:c2:07:ae:45:a7:0a:be:
ba:58:59:6b:1c:24:61:a9:92:15:37:bd:98:dd:ac:
dd:a1:93:17:c6:87:72:78:1b:be:09:ee:57:69:21:
fd:dd:65:65:c3:0d:0e:7b:fa:6a:f0:36:e6:14:e9:
eb:00:3f:37:e1:ad:34:78:b3:ce:1e:e2:42:e9:1f:
47:f4:f3:8a:b2:18:00:0a:e3:d1:4a:09:c6:79:57:
11:db:9c:d3:2b:bb:f8:06:d7:14:e0:a9:d8:75:b0:
d7:e1:cb:8e:fe:10:88:fd:37:ff:be:5f:c1:4a:0c:
c9:c4:83:18:e5:8e:8b:0c:fc:3b:04:78:84:a3:25:
e5:11:2a:20:cf:5e:1b:1b:3b:90:5b:f5:bb:ab:73:
3e:a7:73:62:2d:1a:56:ba:b2:34:67:c3:f3:fd:f5:
5e:c3:94:ef:f9:e2:65:d2:e5:c6:f2:0c:db:15:7e:
f1:a1:ad:30:7c:b0:f0:44:9d:1d:3a:b5:60:d4:75:
19:7a:12:d1:ea:1f:ad:34:74:da:6d:b0:40:a9:fc:
8a:46:36:40:6f:62:3f:6f:ad:b7:95:39:c4:2d:6f:
18:52:ac:b5:c2:1f:ad:f1:eb:be:1a:cc:c9:b1:bb:
eb:ff:21:f2:f3:6f:f6:f8:38:5b:2a:5c:75:08:e0:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:2F:CF:AF:3F:3E:E4:83:D9:55:EB:AC:37:CD:F3:9F:BC:D0:1D
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/CyEvz68_PuSD2VXrrDfN85-80B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.24.0/22
IPv6:
2a05:d500::/29
Signature Algorithm: sha256WithRSAEncryption
5d:d4:c4:21:a1:88:29:05:ce:c8:a6:58:c2:e0:8b:cf:45:f4:
72:c2:f5:9f:4d:f4:c4:28:85:da:17:78:a0:59:3b:72:3d:14:
fe:4a:45:ba:df:15:71:46:db:70:81:1c:4d:c6:bb:f6:a6:25:
14:14:eb:03:12:db:79:bf:d3:bc:77:36:62:56:1e:c7:b1:33:
91:d4:cf:82:59:6f:92:52:aa:a5:88:6b:17:b9:f6:ba:2c:a6:
87:da:08:5d:f9:cf:e0:c8:3e:c4:91:87:a9:21:1a:0d:54:70:
4c:74:5c:52:c1:3a:8c:6b:0f:85:14:d8:ef:c8:0b:ae:eb:93:
8f:b8:ac:d9:36:b7:8d:3b:da:50:6b:91:44:73:d4:29:ad:2f:
f1:8b:69:16:9a:40:cd:82:d0:09:2e:f3:05:b7:d3:52:28:8b:
43:91:f0:6b:42:09:98:18:e4:76:e6:6a:be:ff:bb:de:28:f6:
aa:4b:7c:3c:05:c7:ce:8c:77:cd:ba:f0:e4:86:9c:91:78:9b:
08:2a:6b:9c:ad:bf:26:e9:75:2d:04:3b:f1:10:9d:ef:a7:a2:
a2:11:35:5d:5c:f8:28:d5:a3:b3:91:eb:f4:cd:4f:6b:f8:ae:
37:bc:d2:21:23:7c:08:ca:ff:19:90:ed:13:f1:4a:df:a1:1e:
69:8c:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:54 2025 by rpki-client