Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa
File: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (raw, json)
Hash identifier: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=
Subject key identifier: E8:DA:F6:56:61:8A:43:F8:D4:26:91:7D:C8:F7:8B:11:49:D8:84:5E
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0194206802FEA1CF59994E5592CB16056B04
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 185.65.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:02:fe:a1:cf:59:99:4e:55:92:cb:16:05:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8daf656618a43f8d426917dc8f78b1149d8845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:7a:bd:d7:f8:90:a1:b1:ee:ac:3a:bc:d5:
47:ab:f0:98:d5:42:ae:f6:70:2b:db:d3:05:94:1e:
2b:27:9a:10:3f:f4:73:0c:2e:8e:2e:2b:9f:c2:66:
c9:bf:1c:12:e2:97:57:58:55:7d:a0:7d:e7:96:dd:
e7:99:30:e1:46:0a:39:e6:61:1b:a8:04:46:21:bb:
d5:f1:36:24:6f:f4:5b:87:72:44:af:50:a2:58:e8:
89:94:b5:4d:4a:6e:aa:7a:03:83:c8:1a:2c:d6:e6:
77:ac:7b:d1:66:22:3a:62:02:51:b4:31:75:0b:00:
8b:a1:41:cc:ca:4e:26:0d:18:68:39:fc:34:01:da:
ab:11:ac:96:2c:b7:4d:8a:05:80:0b:3f:b1:a3:6d:
3d:1f:2e:ab:70:d0:5e:f3:5e:79:17:3d:29:f0:31:
73:a7:d1:2f:94:dc:f1:6d:0a:a9:8f:e6:9b:02:fa:
ed:61:d3:6a:8f:e3:b8:42:db:8b:15:9f:b6:1f:8e:
33:19:85:8c:f0:9a:33:33:11:c0:8f:45:84:e0:61:
53:ab:f5:7f:1f:47:31:6c:f6:d8:05:f1:4e:1b:b4:
b3:b2:21:b4:45:7d:48:4d:2a:86:d9:6c:e2:9d:7d:
e7:71:b0:a3:04:b0:f7:ae:80:0b:ca:5b:3e:f1:f1:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:F6:56:61:8A:43:F8:D4:26:91:7D:C8:F7:8B:11:49:D8:84:5E
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.105.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e0:03:b5:12:27:79:d8:f2:f3:3d:ff:0c:39:fe:e7:ad:d1:
b6:40:62:49:dc:54:63:0e:1e:2b:9e:7b:46:6c:4d:d4:d0:a3:
87:ca:aa:7f:bf:8e:70:02:08:7b:d0:51:16:2d:8a:3a:4c:13:
ac:0c:44:44:e8:43:ca:ac:33:51:91:61:00:16:bc:db:be:e0:
71:6d:87:d0:e7:4e:e4:a6:fb:6b:8c:b7:29:f4:33:3c:ac:d0:
c8:5c:9a:b8:68:c5:d1:5c:29:25:9c:70:bf:6b:3c:3f:49:f3:
4c:5b:d6:73:95:11:53:a3:cc:59:e7:11:06:b0:03:c8:f1:11:
e0:79:6b:b3:b1:db:22:9d:5d:a7:f4:b1:26:aa:16:4c:d9:a1:
fc:c6:48:ff:fa:cc:ee:a9:0e:e9:f3:f5:2a:10:da:f2:76:fa:
62:c6:62:46:d8:94:b3:93:be:ba:f0:76:5b:87:65:9e:7b:af:
a2:b4:40:f4:5a:f2:c8:bb:05:d1:67:8c:b6:13:40:56:5f:e7:
bd:a6:b2:c2:23:eb:97:ab:5a:66:f2:01:48:d7:61:af:df:bd:
08:13:7a:60:76:02:b2:e8:b3:37:88:52:b7:72:dd:be:f7:48:
28:1f:0d:3c:6f:42:59:23:5e:34:dd:90:88:3d:6c:ea:7b:2f:
cb:7c:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:50 2025 by rpki-client