Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/RU6VdlTWZNL-q9N5BjAojikcZLQ.roa
File: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (raw, json)
Hash identifier: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=
Subject key identifier: 45:4E:95:76:54:D6:64:D2:FE:AB:D3:79:06:30:28:8E:29:1C:64:B4
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0195093720FB15E105CC46A6E2C20CBBCBAC
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/RU6VdlTWZNL-q9N5BjAojikcZLQ.roa
Signing time: Sat 15 Feb 2025 10:46:02 +0000
ROA not before: Sat 15 Feb 2025 10:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213704
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.124.14.0/24 maxlen: 24
185.124.15.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
185.236.28.0/24 maxlen: 24
185.236.29.0/24 maxlen: 24
185.236.30.0/24 maxlen: 24
185.236.31.0/24 maxlen: 24
2a03:9000::/40 maxlen: 40
2a03:9000:100::/40 maxlen: 40
2a03:9000:200::/40 maxlen: 40
2a03:9000:300::/40 maxlen: 40
2a03:9000:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:37:20:fb:15:e1:05:cc:46:a6:e2:c2:0c:bb:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Feb 15 10:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454e957654d664d2feabd3790630288e291c64b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:84:b0:cf:c5:82:5f:73:2b:5f:62:05:67:
ff:87:48:d5:77:6b:7a:9f:71:38:d3:a6:52:6c:bf:
d3:cf:67:10:12:6c:61:b6:41:27:a0:f7:00:2d:7c:
86:de:fb:40:d3:40:21:ed:1e:f1:02:41:09:74:c1:
42:81:fa:3c:51:8f:d4:30:71:ba:91:53:53:43:b6:
72:5e:35:21:30:79:1b:34:ec:81:f5:8c:f0:24:7f:
c4:42:8e:91:dc:22:5c:8d:04:98:2e:48:d7:b9:6c:
de:ad:f7:2c:d9:0d:69:64:76:1e:00:e1:e6:e4:72:
ee:07:40:59:23:92:22:5b:e3:53:02:06:9a:f8:be:
68:2a:d8:29:97:96:5a:55:a5:22:72:e7:62:e7:e8:
15:4d:01:a9:3c:de:71:5c:83:ec:be:95:a1:e4:cc:
1f:92:fe:ab:1c:7b:b5:4e:ac:b0:58:db:c1:a6:09:
e9:c8:85:a4:4b:f0:0b:cb:91:50:e1:61:5d:26:50:
a3:f8:b7:1d:3e:d7:86:c0:3f:5e:90:2f:28:bd:54:
8a:53:c9:01:0d:ba:49:82:7a:1f:fb:0b:fe:f2:84:
38:63:1a:29:42:fe:6b:7a:ed:80:12:a2:64:88:ae:
fe:0f:63:c6:c0:c2:a2:54:61:28:04:ec:99:f9:db:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:95:76:54:D6:64:D2:FE:AB:D3:79:06:30:28:8E:29:1C:64:B4
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/RU6VdlTWZNL-q9N5BjAojikcZLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000::-2a03:9000:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:71:47:4c:fa:79:9f:29:40:77:b4:ba:34:d6:3f:c8:e5:5a:
3d:cd:60:81:61:77:c3:70:74:a5:55:cb:bc:70:14:fc:ba:bf:
4d:da:f2:0d:75:da:e9:93:73:52:23:24:78:31:61:15:5e:1d:
42:60:27:6a:f9:fc:7d:63:e4:93:42:ea:82:79:d2:b5:41:9a:
27:1f:6d:bf:3e:87:e3:a6:5a:cf:8d:ac:e1:a6:af:cc:74:b8:
e9:58:2f:74:14:ec:0d:42:48:bd:f7:7b:ac:44:0c:c7:47:31:
64:11:cb:76:91:e6:67:ef:9e:dd:3d:01:22:bf:85:d4:3a:8c:
28:31:24:05:7a:82:64:9a:16:b6:de:b8:16:cb:41:57:3f:5e:
65:9a:9b:84:83:3d:1f:9b:52:14:dd:f5:ca:a4:49:03:bd:21:
7a:64:31:23:a1:15:40:e3:3b:7a:6a:28:d6:0c:36:bb:4b:84:
5b:9b:de:31:95:bd:63:d6:f8:89:c5:fb:8a:2c:28:2b:25:16:
d2:a3:20:c3:87:da:3d:ff:e3:23:b4:25:e4:a8:7d:b7:07:27:
d5:c3:d9:2e:2a:fb:ec:54:6f:5e:9a:6e:ff:77:17:81:02:0d:
9a:c4:68:72:24:0b:32:28:50:8c:25:18:f3:0b:14:0d:ff:6e:
a4:c9:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:45:19 2025 by rpki-client