Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5yepTHX57Jt_ewfHjYUt68_pB4c.roa
File: 5yepTHX57Jt_ewfHjYUt68_pB4c.roa (raw, json)
Hash identifier: iQuM8k7hHHpgdqHEmIyTIva8/sdeMrtxvmEgHlngew0=
Subject key identifier: E7:27:A9:4C:75:F9:EC:9B:7F:7B:07:C7:8D:85:2D:EB:CF:E9:07:87
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B1561653ED5160C3C1EB508CF0ED313
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5yepTHX57Jt_ewfHjYUt68_pB4c.roa
Signing time: Thu 09 Jan 2025 12:41:19 +0000
ROA not before: Thu 09 Jan 2025 12:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.30.0/24 maxlen: 24
185.230.65.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:15:61:65:3e:d5:16:0c:3c:1e:b5:08:cf:0e:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 12:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e727a94c75f9ec9b7f7b07c78d852debcfe90787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:da:ec:ee:86:20:cb:8c:84:a9:98:b5:20:
b3:e6:36:8f:87:5e:3d:47:88:0a:86:9e:1e:79:2c:
7e:bc:d0:9b:03:af:90:5e:64:37:fc:8f:ea:66:24:
45:1f:a6:ec:18:72:91:b4:55:b6:01:ff:7d:a6:11:
d5:34:e3:6d:cb:d8:0b:ee:e4:08:fb:6a:18:47:37:
c0:f2:c5:70:8d:91:de:ae:a2:01:5c:8d:88:f3:3b:
55:50:0b:96:af:e1:e6:78:b2:fc:df:3b:d8:41:1c:
ef:8f:c2:8d:ec:a0:ac:94:df:3c:2b:fe:f8:49:43:
cd:3e:b7:36:d8:2e:c1:73:f7:12:e2:18:a7:a1:4e:
ad:0e:c0:7d:cf:0b:8c:97:eb:c4:6b:eb:73:ef:57:
69:ec:88:57:50:5a:37:87:eb:8c:47:43:1e:8a:2c:
9a:ff:c9:d5:03:4e:2f:b4:6c:bf:b3:fb:a1:cb:db:
18:7a:74:76:63:51:6b:29:a7:95:87:87:90:e1:4d:
73:b0:cd:44:fb:84:43:98:bc:50:49:3f:41:c4:df:
99:5c:f4:72:09:81:2e:51:9b:65:f0:43:b3:0e:79:
d7:15:e3:d7:3f:f7:96:2e:17:ca:86:68:b3:87:fa:
0c:50:98:cb:a0:39:30:6b:a6:8d:f8:40:d8:05:5f:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:A9:4C:75:F9:EC:9B:7F:7B:07:C7:8D:85:2D:EB:CF:E9:07:87
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5yepTHX57Jt_ewfHjYUt68_pB4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.30.0/24
185.230.65.0-185.230.66.255
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f5:6e:41:35:ab:17:25:de:d2:18:8d:30:bf:2e:ed:14:67:
14:67:7f:36:c6:fc:9d:8f:ab:f5:1d:06:94:c3:d7:b2:55:57:
00:34:6e:f2:c2:f8:8b:45:fc:46:2b:6b:52:a4:29:63:d5:ec:
e9:a7:c2:c4:f9:46:6f:96:46:f7:f5:9b:f0:d2:95:c1:09:35:
a8:a2:dc:aa:68:b7:75:75:e1:f0:09:43:51:ee:e1:41:fb:f1:
44:22:a4:17:b5:cb:e0:8f:70:66:72:a1:73:34:e1:ad:db:ba:
25:74:98:15:a8:6c:8c:30:50:eb:4d:d7:12:08:74:77:85:18:
6f:61:cb:33:ef:5e:23:0f:a2:d9:83:98:67:5b:b4:74:b7:36:
09:de:62:fc:eb:33:78:b4:4f:e1:c1:3c:72:b8:97:07:3b:a3:
16:9e:e3:b6:8f:ac:a7:a3:06:ba:25:62:57:3f:c5:02:87:1b:
87:e2:2d:2c:a0:1a:84:5f:f5:71:eb:a0:ff:0e:61:8b:93:cd:
22:bb:ea:a0:dd:b4:1e:1c:48:ce:12:6e:90:50:5a:23:ec:bd:
ba:5d:7d:d5:2b:9a:61:1e:de:b8:f7:a6:99:c7:d3:90:fb:5a:
e8:6c:37:a4:ad:23:69:e7:0c:78:75:5e:48:c6:e9:de:84:e2:
0b:56:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:19 2025 by rpki-client