Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/rvNR6t5PRdirblmE3epG15uVGrA.roa
File: rvNR6t5PRdirblmE3epG15uVGrA.roa (raw, json)
Hash identifier: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=
Subject key identifier: AE:F3:51:EA:DE:4F:45:D8:AB:6E:59:84:DD:EA:46:D7:9B:95:1A:B0
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019426D935241D3DC960ED6BEC0EAB9CBC0E
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/rvNR6t5PRdirblmE3epG15uVGrA.roa
Signing time: Thu 02 Jan 2025 11:49:16 +0000
ROA not before: Thu 02 Jan 2025 11:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 185.158.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:35:24:1d:3d:c9:60:ed:6b:ec:0e:ab:9c:bc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Jan 2 11:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aef351eade4f45d8ab6e5984ddea46d79b951ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:10:7b:ba:5d:e9:51:dc:fd:bb:a1:12:7b:
7f:04:c3:a6:4e:5d:36:05:6a:dc:02:0b:f8:65:3a:
18:97:67:34:bf:a7:4b:8d:64:13:63:c5:eb:59:a9:
82:a3:16:5d:cf:8e:4d:86:1b:14:c3:33:ad:b0:c1:
f4:49:7e:89:d6:99:ee:5a:93:45:84:d8:c5:dd:b4:
13:b5:7d:d5:56:4b:58:ea:30:04:37:11:a2:1f:1b:
c4:bc:64:b2:d5:cb:e9:5f:b7:8d:54:69:70:46:04:
ef:ff:82:2c:85:73:7b:3f:66:01:8a:b0:dd:f3:18:
ed:9f:c9:23:46:4e:6f:03:22:49:dd:6a:fc:20:4f:
53:ef:a9:91:ef:8f:0f:37:3d:ca:19:0b:4b:ec:e9:
4e:10:71:20:58:ab:88:8e:46:c1:cd:d6:00:e4:5b:
24:a0:fa:04:f6:cb:71:93:84:61:7a:f6:35:5f:02:
35:c9:a0:dd:af:4f:61:63:c5:1a:ff:87:7c:47:00:
53:e5:6b:d8:3f:e7:28:12:74:81:67:a1:f4:12:f5:
05:a5:0d:92:b6:43:60:c3:fe:41:b4:45:0b:90:3a:
f8:dd:00:55:21:5d:ce:77:7b:0f:31:94:1e:10:c2:
e2:cb:57:f0:c6:43:26:9c:7f:c6:bc:c1:a8:54:be:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:51:EA:DE:4F:45:D8:AB:6E:59:84:DD:EA:46:D7:9B:95:1A:B0
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/rvNR6t5PRdirblmE3epG15uVGrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ef:f0:cd:0b:a9:12:dc:f2:79:63:71:e7:fd:f5:d5:45:72:
dc:6d:22:74:9f:87:9c:5b:3e:cf:63:04:a4:00:19:51:23:58:
e8:26:4f:e7:20:7a:f1:9f:be:5a:79:58:64:d6:f8:6f:c3:9b:
d6:4f:bd:65:4e:fe:a4:27:ad:7d:c4:53:86:98:e3:d1:5a:d3:
74:73:15:b8:71:46:23:e8:c4:80:4b:3e:45:47:10:fb:c8:50:
69:6e:03:36:76:3b:9d:75:75:94:04:61:6a:c5:9e:86:de:9c:
c0:d2:c5:5e:5d:1e:a8:98:d6:a3:78:4f:ce:54:90:e1:e1:49:
56:44:21:d1:83:79:7a:72:27:d7:a4:52:32:85:77:c2:30:dd:
6f:45:ef:a0:5c:5e:69:67:96:65:53:ec:ce:da:00:e3:63:8f:
a5:26:45:53:f9:6a:2e:53:3d:7e:45:04:b5:aa:9d:0b:54:21:
6a:82:19:1c:da:71:26:ea:e7:e5:55:ba:7b:55:85:29:7a:d2:
59:cc:87:b5:26:2d:2b:86:54:b0:66:b1:b8:8f:32:df:1b:9b:
72:df:af:f3:c9:b9:4f:c1:09:b4:29:ca:3c:43:ec:0a:8d:0e:
a5:3a:9c:67:22:b0:7a:d4:56:71:ae:a4:fc:79:aa:7a:43:8a:
6d:88:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:16 2025 by rpki-client