Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/USYf1bw7MHizcISPSt3QDNx57-c.roa
File: USYf1bw7MHizcISPSt3QDNx57-c.roa (raw, json)
Hash identifier: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=
Subject key identifier: 51:26:1F:D5:BC:3B:30:78:B3:70:84:8F:4A:DD:D0:0C:DC:79:EF:E7
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 019658B04B142E6C49248860F1A1417149AF
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/USYf1bw7MHizcISPSt3QDNx57-c.roa
Signing time: Mon 21 Apr 2025 14:11:10 +0000
ROA not before: Mon 21 Apr 2025 14:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 185.11.134.0/24 maxlen: 24
185.11.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:b0:4b:14:2e:6c:49:24:88:60:f1:a1:41:71:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Apr 21 14:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51261fd5bc3b3078b370848f4addd00cdc79efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:dc:fd:a3:4d:88:01:9a:ed:36:a8:b3:60:
0a:7c:87:f9:23:48:7e:73:18:91:bd:31:3d:45:4a:
c8:7b:3a:b2:3f:d2:0d:47:1c:11:c9:41:3a:41:0d:
fe:09:6f:be:7b:b6:3b:50:39:2f:0f:ab:c3:69:fe:
7b:1c:83:81:30:a5:b8:6e:1d:b7:81:b0:3b:af:92:
34:10:06:05:15:8d:ff:2a:72:8b:d8:62:71:62:84:
a6:6e:d3:59:59:17:8c:30:2e:6b:5f:ef:f8:b4:6e:
e3:68:01:15:3c:42:90:5a:eb:96:b0:9b:c9:b9:23:
d0:2b:24:93:ef:d4:40:9d:69:92:f2:5a:a7:c1:e2:
a9:cd:80:1c:a8:f6:ca:ad:19:de:97:db:d4:b5:24:
90:cd:c4:13:06:55:dd:ea:ca:a6:02:88:1e:4e:a0:
22:2e:9b:ee:1f:32:9a:44:44:a5:84:7e:bb:0e:31:
a1:5b:d9:83:20:ad:df:32:9d:31:32:90:ee:b9:49:
79:37:2a:fd:a4:f3:42:fe:62:3d:91:10:e7:36:3a:
d4:4d:d2:37:30:5f:4a:00:71:9b:37:6c:95:61:d4:
bc:4d:31:04:4c:c5:e9:7b:a5:0b:f3:ae:0b:ee:b1:
3e:f0:df:b1:82:45:4f:ea:84:34:2a:1a:f0:b7:1b:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:1F:D5:BC:3B:30:78:B3:70:84:8F:4A:DD:D0:0C:DC:79:EF:E7
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/USYf1bw7MHizcISPSt3QDNx57-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
01:48:51:35:29:82:19:1d:98:56:58:a4:ac:a0:e7:ba:72:61:
11:73:c8:7f:da:6f:5d:74:aa:b4:4a:96:b8:71:7d:d8:fd:f1:
d6:7a:7a:86:ad:2f:e8:16:77:a5:87:5f:72:01:74:38:60:30:
ab:e9:a7:31:7d:77:94:fd:b3:cd:4f:a4:a2:64:10:06:34:d5:
6b:aa:6d:63:c2:fd:83:14:46:ef:46:e3:d3:06:37:4e:85:bb:
fb:af:59:7c:9d:96:dd:c5:d3:96:9d:6e:47:21:1b:5d:7e:2d:
f4:1a:44:4e:c9:29:27:9f:6f:fd:e1:7c:72:61:2a:d4:a0:05:
d1:3c:c8:f8:29:75:bd:ea:d2:0e:0b:df:9c:e8:2f:2a:26:53:
43:8d:fa:c7:fc:c6:fb:d4:4e:9a:fc:2f:9d:de:da:61:75:f8:
f5:1e:c1:09:1f:f7:63:a5:7e:06:aa:52:54:96:ed:79:fc:79:
a2:82:8f:8d:5b:77:80:c2:a4:ea:69:01:70:1c:28:4b:62:14:
4d:79:7c:b2:dd:59:df:ac:54:08:dd:5c:79:8d:bf:ed:68:e6:
58:17:b7:83:72:f7:b2:3d:40:ba:84:b0:38:a2:1c:2b:3f:a7:
01:2e:fe:09:76:86:ff:42:41:54:1d:6a:01:c6:87:78:18:6d:
ca:87:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:16:28 2025 by rpki-client