Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/TYJYGhUdPQj6nUzCCLnr49eyuJI.roa
File: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (raw, json)
Hash identifier: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=
Subject key identifier: 4D:82:58:1A:15:1D:3D:08:FA:9D:4C:C2:08:B9:EB:E3:D7:B2:B8:92
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019420682751A4CB6E0517A91A8503C30E64
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/TYJYGhUdPQj6nUzCCLnr49eyuJI.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.236.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:51:a4:cb:6e:05:17:a9:1a:85:03:c3:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d82581a151d3d08fa9d4cc208b9ebe3d7b2b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:57:cb:5c:44:90:d6:bc:5b:1e:3b:a7:cf:
3e:9c:c5:74:52:a9:c4:90:b6:91:b6:00:3f:59:ae:
13:a0:9e:8b:8a:07:f2:e5:55:9d:66:27:2a:b9:28:
36:9b:ed:36:fa:35:a9:11:0c:b8:53:4e:5a:31:d8:
bb:c2:0c:ea:0e:0b:00:c4:8b:2a:51:31:5c:f0:2d:
f3:28:46:5b:6e:b3:0f:a0:f0:58:c0:34:52:94:8d:
7c:1f:e7:47:e8:30:61:86:96:77:69:95:6f:59:1d:
80:68:e7:7b:8f:8b:64:5f:b5:b8:15:ce:75:95:d3:
49:05:da:87:1b:a8:e3:3d:99:fd:d9:21:16:9f:43:
20:18:3c:0f:0d:8a:e9:3c:8d:cf:e1:34:b2:74:9a:
85:40:38:85:ed:29:2d:6c:4d:bc:60:1a:d6:a1:41:
b4:30:9d:36:0b:1e:9f:74:6b:79:cc:4d:88:ba:47:
b2:fd:6d:6e:94:10:9a:a0:26:fc:33:c6:34:15:c5:
6f:f5:2f:66:a7:58:1f:99:82:85:6d:46:aa:98:c8:
bf:40:e7:5c:98:8b:75:bf:b8:4a:51:0c:d7:4c:2e:
d7:7a:d1:33:40:ea:1e:ad:87:68:af:f7:67:59:e9:
d3:0c:b2:1c:79:8c:a3:2d:52:5f:4e:d0:21:13:08:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:58:1A:15:1D:3D:08:FA:9D:4C:C2:08:B9:EB:E3:D7:B2:B8:92
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/TYJYGhUdPQj6nUzCCLnr49eyuJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.142.0/24
Signature Algorithm: sha256WithRSAEncryption
50:74:50:44:72:d5:a5:f3:67:60:5d:85:5c:9e:1b:e7:b5:d8:
01:ba:8a:4b:57:7f:1d:7d:cf:9e:0a:dc:0f:81:67:48:06:58:
2a:c8:86:d0:b8:72:71:a6:03:44:5e:71:44:75:4d:d1:85:45:
f1:05:9f:bf:db:7e:c8:ee:19:6a:21:2e:cb:c2:d6:70:02:65:
bc:a0:1b:8c:75:45:c9:74:cd:50:1f:16:76:37:50:dc:62:a5:
e0:0f:d2:0e:9f:06:ee:ac:9d:ff:3e:ad:d5:84:3f:7d:b9:fb:
cd:d5:03:f8:08:db:a3:fe:92:c8:3e:fe:0d:d9:ea:28:2e:07:
a8:e0:72:7d:05:55:b5:e1:ba:95:11:92:af:3c:43:5e:f3:e6:
72:0e:5c:ba:ee:9c:6e:9f:e7:ad:21:0a:d1:0b:ec:15:36:b3:
0a:1f:aa:66:26:09:3d:48:2a:f8:fc:fe:3f:20:d1:ea:e0:ea:
df:8b:17:fe:f7:fe:ee:77:a3:e0:32:30:33:ab:86:f2:f3:85:
5e:cf:a8:9d:49:0a:78:f8:34:a2:af:d4:fb:9e:a7:05:9a:69:
af:8f:ed:66:28:8d:ef:cf:09:7e:29:cb:9f:27:b2:e1:0c:a2:
e1:4a:a7:7c:1a:3a:33:72:75:d3:42:65:d4:88:6e:d2:84:69:
5d:78:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:56:19 2025 by rpki-client