Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa
File: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (raw, json)
Hash identifier: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=
Subject key identifier: C8:B2:B2:B2:12:E4:E5:8F:2A:A3:61:DF:46:DD:1B:7C:95:AA:B5:C2
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019652EF344CD6F7DD39246E8D383CF5C0E3
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa
Signing time: Sun 20 Apr 2025 11:22:10 +0000
ROA not before: Sun 20 Apr 2025 11:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 185.227.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:ef:34:4c:d6:f7:dd:39:24:6e:8d:38:3c:f5:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Apr 20 11:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8b2b2b212e4e58f2aa361df46dd1b7c95aab5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:1d:5a:3c:d7:6d:dc:02:84:b9:3b:d7:cd:
7c:50:4c:68:50:02:22:26:17:a3:42:67:c9:2b:82:
5f:3d:1f:6f:3b:21:a8:5d:67:57:1d:2f:fb:2e:34:
f5:d6:00:70:63:4d:c7:58:05:e8:9a:01:c3:e0:fa:
97:61:6f:14:ae:72:bc:8f:28:40:78:c3:23:d9:d3:
fd:93:da:9a:f2:c1:c1:ee:f8:83:af:43:42:e4:ff:
11:a8:3c:67:50:27:53:a3:5c:e8:8d:06:99:99:31:
be:8a:fa:ad:00:9d:50:b1:9b:a1:47:f9:29:3a:df:
e1:95:d1:2e:66:ec:4d:1a:90:81:d4:8d:c4:db:e9:
fd:44:7e:7f:9e:ae:3c:08:9e:b5:5e:ce:5a:8a:cc:
b9:07:8f:c7:42:a5:d8:94:54:a8:37:e0:61:7b:75:
73:88:84:08:76:0f:5d:d0:c2:66:56:95:7e:49:21:
94:90:0f:b1:cf:32:59:ab:0f:0a:00:ec:36:00:bd:
bd:1f:f4:3d:c7:49:c6:01:23:f8:b9:21:4a:e4:a5:
8a:8c:ff:f2:4c:94:42:4c:4a:ca:3a:e5:5c:8a:7e:
a5:74:f2:7a:51:d6:22:74:32:64:77:f8:28:99:fb:
00:b4:82:eb:26:a1:61:26:b0:1e:12:5d:f2:ef:9c:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:B2:B2:12:E4:E5:8F:2A:A3:61:DF:46:DD:1B:7C:95:AA:B5:C2
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d0:2d:79:da:7e:33:e3:ab:ec:f9:31:71:2e:23:f4:61:eb:
69:84:b0:48:1b:d0:a7:ca:9a:24:96:b8:a5:68:a8:05:c0:ce:
9a:0f:9f:8f:03:85:1d:29:94:e5:d6:66:72:9e:ed:b9:45:dc:
f5:2e:3e:a9:d7:83:85:cd:d7:4a:cc:64:da:7f:b8:14:4a:50:
8f:47:d1:60:d6:38:7e:ff:83:a3:20:1c:ff:4b:f1:56:c2:40:
4d:23:61:b0:dc:b7:88:7d:ca:9d:8c:3f:42:57:c8:74:72:ba:
c8:11:07:4f:2f:07:19:b6:79:ea:78:b2:a1:18:17:ef:80:44:
8a:45:3b:e7:39:a8:ac:db:a4:ea:f5:b5:fe:b7:d4:dc:46:27:
67:de:d1:e8:18:ce:0f:0b:cf:fe:76:7f:d4:49:39:72:35:62:
11:bc:d8:06:f2:f4:20:e1:ab:04:a7:0d:e9:cf:91:79:e7:27:
f3:78:64:22:f4:c8:f5:7c:65:1e:03:2d:74:44:e6:1b:f7:11:
77:5a:12:e5:c2:5e:c5:bb:29:a1:3e:68:e0:36:36:c3:c0:64:
7c:18:98:96:65:0f:18:7f:79:f4:1d:f4:f3:0c:d7:aa:6c:1c:
4b:f0:0b:96:cf:b8:4f:a9:73:40:0c:51:cf:44:da:3c:6a:89:
36:70:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:45:32 2025 by rpki-client