Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/mld6HE3RapKTIrTK3ARnJwX6Nfo.roa
File: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (raw, json)
Hash identifier: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=
Subject key identifier: 9A:57:7A:1C:4D:D1:6A:92:93:22:B4:CA:DC:04:67:27:05:FA:35:FA
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019426D9C8B71F1D2985ACE7A020DD74F324
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/mld6HE3RapKTIrTK3ARnJwX6Nfo.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133480
IP address blocks: 185.54.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c8:b7:1f:1d:29:85:ac:e7:a0:20:dd:74:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a577a1c4dd16a929322b4cadc04672705fa35fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:f3:61:f8:f7:bd:ac:d3:dc:cf:9f:25:2e:
59:37:26:fe:ed:e7:3e:6f:09:cf:f4:e3:0b:e3:9d:
52:5e:e0:a0:28:09:40:0b:9e:56:e6:42:4c:7a:da:
24:e0:1f:32:f2:e7:47:c1:5e:22:e6:94:5b:1e:af:
6a:7e:10:90:98:f8:52:54:9d:a4:f4:e6:e8:2d:c1:
56:8d:11:90:50:82:e1:e7:8c:46:58:5e:06:dc:66:
25:5c:45:5a:52:dd:e6:51:84:55:00:ea:e4:a3:5d:
ab:e0:03:45:3f:ef:4f:36:28:ad:3b:a9:c4:5f:82:
21:64:ea:f9:94:f4:ca:f0:62:07:fa:6f:bf:0a:98:
09:06:9e:62:86:bb:02:11:6a:5a:aa:a1:49:0c:85:
84:8e:e1:d4:f5:47:93:89:d5:be:b3:79:27:2f:d5:
5a:32:3b:e6:13:d8:3b:3d:40:74:e6:95:af:0f:f0:
51:0d:70:bb:1a:30:db:0b:25:c9:c5:6f:db:2b:0d:
9d:b2:bb:ff:c2:77:21:5a:6a:6f:99:f0:96:48:84:
e8:ef:59:cc:e5:ab:6b:81:90:98:67:80:f9:6f:e2:
cd:e8:3c:3e:25:ee:92:f3:52:97:b1:b6:f2:ed:ce:
22:07:94:e6:41:3a:4b:4b:52:12:84:81:3e:e0:d9:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:7A:1C:4D:D1:6A:92:93:22:B4:CA:DC:04:67:27:05:FA:35:FA
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/mld6HE3RapKTIrTK3ARnJwX6Nfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9d:cc:7b:a8:1c:fb:84:e2:18:6f:30:6e:46:00:88:3d:51:
f4:a7:96:37:24:77:cf:85:f9:5d:54:f3:26:49:3a:86:8a:7b:
81:d4:04:bb:d8:81:81:ae:ce:0d:ab:6d:7b:8b:a5:67:73:e0:
6c:5a:5b:2c:de:3c:6e:bd:40:d5:ad:52:2a:c1:e2:56:cf:0e:
93:d5:c1:31:e1:c7:2d:3b:c0:cb:44:0c:1b:95:7a:59:bf:1a:
06:40:18:d6:c3:86:0e:cd:f0:be:77:55:c9:6b:53:ce:53:bc:
5d:19:ac:1b:0e:43:08:9e:be:d5:f0:f0:9b:2b:33:24:7a:e5:
a9:b5:dd:99:14:3e:c0:89:30:52:80:f5:79:50:b5:b9:84:46:
f7:7d:12:17:07:d3:05:a1:87:2d:63:0a:83:14:5f:85:ef:1a:
75:96:e7:41:28:18:92:59:96:50:f5:f7:ef:df:76:a5:1f:5d:
98:fc:ea:64:6d:16:f5:ff:d9:46:5c:84:5a:90:e1:c3:c7:fc:
d2:39:8d:0b:0d:b5:5f:6c:58:22:c1:49:27:fa:b6:57:f1:09:
32:92:07:01:5b:a2:e2:5c:03:74:8c:ae:1f:83:b7:d9:6a:fa:
9a:fb:90:cf:ff:cf:a5:84:23:6a:c4:28:2e:59:d3:1c:fb:c7:
5c:e1:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:29:51 2025 by rpki-client