Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/ymqrtOTNWDQDdgBajqQ828K-pKw.roa
File: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (raw, json)
Hash identifier: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=
Subject key identifier: CA:6A:AB:B4:E4:CD:58:34:03:76:00:5A:8E:A4:3C:DB:C2:BE:A4:AC
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 0196157A31F1470AAD3A3F085B4305519EC5
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/ymqrtOTNWDQDdgBajqQ828K-pKw.roa
Signing time: Tue 08 Apr 2025 12:57:31 +0000
ROA not before: Tue 08 Apr 2025 12:57:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 185.36.40.0/24 maxlen: 24
185.36.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:7a:31:f1:47:0a:ad:3a:3f:08:5b:43:05:51:9e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Apr 8 12:57:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6aabb4e4cd58340376005a8ea43cdbc2bea4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:e3:17:c2:27:85:3d:e9:2e:16:7c:65:56:
c2:98:b6:31:96:13:6b:92:73:e5:e3:48:d2:38:2e:
82:b2:e5:2d:6d:0a:15:67:43:f5:68:3c:37:01:82:
a6:68:0d:b3:e0:66:53:3a:e3:d5:59:9c:85:18:96:
a8:58:c9:15:b6:c0:69:20:97:6d:94:e5:70:4b:db:
31:ed:01:2b:01:ad:27:30:e0:44:a7:50:fa:16:37:
9d:db:0f:d5:76:29:8c:09:7f:e5:1f:07:34:6f:c3:
10:44:07:5e:24:ef:38:65:f7:5f:16:73:78:87:be:
6b:1b:96:3d:0d:4a:18:ef:83:ed:22:0e:aa:e3:5d:
05:5e:f0:6b:25:40:ae:54:23:3b:61:54:bf:01:ee:
bb:54:6c:9f:86:46:65:6e:26:64:c9:99:fe:f5:05:
00:33:98:c3:71:19:95:91:f6:af:38:62:84:4e:e6:
d0:20:0d:46:4b:9a:17:a2:f5:7e:f3:18:40:f7:62:
54:1e:ab:0d:de:1f:4f:93:5c:87:5c:fc:9c:55:02:
83:e4:31:74:ad:37:dd:35:47:0f:49:88:2f:e5:82:
27:19:12:82:7a:e7:ae:58:35:89:85:0a:8e:d8:22:
d5:1a:db:8d:ab:aa:c6:b7:7d:8c:7b:41:45:98:d9:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:AB:B4:E4:CD:58:34:03:76:00:5A:8E:A4:3C:DB:C2:BE:A4:AC
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/ymqrtOTNWDQDdgBajqQ828K-pKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:3b:a1:a1:9c:cd:4a:eb:59:1f:7a:ef:b0:f4:48:2b:35:43:
a4:fa:72:1a:31:a5:a0:e4:63:25:e2:7f:22:c5:38:a4:02:32:
6f:b3:e8:1a:91:ce:b2:06:af:8b:35:39:51:e1:51:c6:49:a8:
b8:ed:20:9d:2a:80:51:1e:89:38:a5:e2:ed:af:7c:13:b4:ab:
08:c4:c9:10:d0:a6:59:dd:fa:ad:26:5c:2c:41:7a:55:25:a5:
c8:9f:d7:cf:43:61:38:34:87:5f:ce:93:99:35:83:2e:f9:37:
8c:51:ac:9e:aa:c7:09:f3:df:b9:b8:a5:44:06:a2:13:ea:5e:
99:80:2b:f2:3a:a0:9b:98:d8:c6:c2:3a:0e:34:1f:f8:8f:be:
89:af:a1:22:6f:ab:84:dc:cd:6b:f9:01:df:4a:72:34:cf:9a:
9b:6e:4d:80:98:37:8a:ce:fe:5e:f1:33:d5:cd:7b:0a:dc:de:
ac:32:5d:a9:7f:f0:e5:86:6f:4d:96:4f:b0:6e:8c:cd:1a:30:
b0:a2:08:8e:be:f9:f0:36:b0:fd:22:32:a7:2f:e1:d1:a2:ea:
7c:95:ca:d3:84:d1:69:a3:6a:9d:40:93:08:3e:f6:59:b5:c6:
b8:cf:8c:3f:c5:6d:4b:01:32:dd:e5:97:db:46:59:05:9c:c3:
fc:df:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:52 2025 by rpki-client