Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/eGuHIFNh-O-K6vz68gcxBeLPa18.roa
File: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (raw, json)
Hash identifier: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=
Subject key identifier: 78:6B:87:20:53:61:F8:EF:8A:EA:FC:FA:F2:07:31:05:E2:CF:6B:5F
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01942444936ACEB627C3BAFE2C202B3BE286
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/eGuHIFNh-O-K6vz68gcxBeLPa18.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200416
IP address blocks: 185.107.198.0/24 maxlen: 24
2a06:45c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:93:6a:ce:b6:27:c3:ba:fe:2c:20:2b:3b:e2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786b87205361f8ef8aeafcfaf2073105e2cf6b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:ae:0c:72:40:5d:97:fa:46:a2:d9:5b:2f:
9e:f5:7d:54:c4:e3:ce:6c:d4:69:61:d5:80:d9:a8:
89:48:b1:9f:1f:bd:8f:47:8d:0f:46:bc:4c:99:b0:
79:00:28:e0:a3:55:45:93:39:bb:aa:0d:84:bb:11:
4e:cd:39:44:b0:1c:4b:0a:31:24:c0:68:90:5c:28:
c7:52:7b:81:70:05:1e:5f:98:a9:2f:44:51:9c:5a:
81:43:03:3c:5e:86:06:dd:aa:67:33:7c:75:af:6e:
be:12:e8:e3:e0:47:c5:9b:35:6b:82:e9:23:d9:92:
a2:4d:63:66:d4:6d:c9:9e:7c:7e:6b:ff:59:20:bb:
b5:f5:28:78:d2:88:8b:89:68:6d:ba:cf:25:cd:22:
53:86:79:ba:cf:9a:86:b6:76:f0:8c:0f:fa:0e:07:
bd:c8:90:24:94:0e:bb:89:e5:e1:a2:10:9b:e7:78:
ea:c4:cd:04:a8:97:23:04:4d:84:3f:d9:fb:dc:f6:
39:fa:42:21:a0:de:31:d2:41:9d:1d:5a:91:ea:27:
0e:c2:3f:43:37:c9:7e:40:67:dc:a0:4f:13:e1:f0:
38:b2:69:d9:18:09:e5:c0:6a:83:5c:8d:91:67:c8:
a5:43:cc:6b:71:98:72:aa:ca:fd:ae:3c:56:80:07:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:87:20:53:61:F8:EF:8A:EA:FC:FA:F2:07:31:05:E2:CF:6B:5F
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/eGuHIFNh-O-K6vz68gcxBeLPa18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.198.0/24
IPv6:
2a06:45c1::/32
Signature Algorithm: sha256WithRSAEncryption
14:79:32:6d:36:63:b1:35:7a:32:32:48:9a:f3:06:78:41:9e:
a8:68:04:2a:da:c4:5d:36:37:c6:48:9e:d3:8d:d9:8d:00:49:
a0:37:33:5a:04:6f:b7:42:27:aa:4b:27:fc:ba:6f:c6:50:87:
14:73:c4:73:25:b2:ae:43:43:8b:bb:c8:a6:74:a1:48:06:f7:
ae:e4:aa:15:b5:d7:eb:0a:d6:da:f1:19:e6:50:cd:97:a9:40:
50:eb:e9:45:31:1b:80:5a:19:0c:38:23:8f:60:b1:7b:a6:bb:
45:a3:74:89:9d:ea:a0:cf:b9:5d:f4:29:b3:c6:61:a5:d3:ff:
58:af:27:aa:9d:46:94:41:04:ee:b7:78:e4:91:7e:a0:07:e5:
45:2a:e9:4e:6f:d5:f2:d9:d0:ee:9f:ff:b8:fb:23:bf:1d:49:
16:14:e1:9c:16:1b:78:93:da:d4:6a:a0:bb:c6:da:07:5c:5e:
0a:02:cb:60:f3:90:92:97:24:3b:0d:bf:42:79:1c:bb:98:e1:
12:20:10:a1:e4:52:c4:35:47:fd:dc:bf:4b:88:8b:96:f7:03:
1f:c6:5d:a6:4a:9e:45:cc:c3:45:f6:68:7b:79:9e:0d:d8:30:
cc:ab:e8:ed:f9:87:0b:dd:32:b9:b5:7b:4b:5a:27:3c:a7:dc:
e6:53:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:13 2025 by rpki-client