Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/n11ZJorlH1hZHcOrMkN5woOVejs.roa
File: n11ZJorlH1hZHcOrMkN5woOVejs.roa (raw, json)
Hash identifier: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=
Subject key identifier: 9F:5D:59:26:8A:E5:1F:58:59:1D:C3:AB:32:43:79:C2:83:95:7A:3B
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019541E5527B5A23CC62462E1065B8D11C87
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/n11ZJorlH1hZHcOrMkN5woOVejs.roa
Signing time: Wed 26 Feb 2025 10:55:02 +0000
ROA not before: Wed 26 Feb 2025 10:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 185.191.60.0/24 maxlen: 24
185.191.61.0/24 maxlen: 24
185.191.62.0/24 maxlen: 24
185.191.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:e5:52:7b:5a:23:cc:62:46:2e:10:65:b8:d1:1c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Feb 26 10:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5d59268ae51f58591dc3ab324379c283957a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:9e:63:9d:fe:81:7d:46:65:84:fc:09:86:
e9:b9:10:12:19:f2:cf:81:2e:c8:bd:a2:86:ee:1a:
7d:2f:1a:6c:c9:89:eb:50:77:45:0b:0a:a4:e6:eb:
6e:10:3a:78:6e:b8:a5:6e:68:a6:36:4d:9e:0b:c9:
77:7e:5b:d1:f3:37:51:2a:d7:c4:47:74:a5:45:97:
ea:72:79:dd:5f:7a:40:cc:f8:ea:1d:98:f4:b8:c1:
e6:56:6d:d9:61:72:a9:eb:56:88:eb:21:a0:cf:e1:
47:40:0d:6b:3b:e6:7f:65:5f:67:e4:cd:b4:e4:32:
b3:82:21:27:c1:fb:88:03:0d:03:aa:41:ac:07:53:
7e:61:87:f6:cf:bf:c7:f2:8b:47:34:95:5b:77:c4:
0b:6b:cc:cb:95:65:b8:dd:f6:8e:08:33:37:32:cc:
8f:bf:14:24:64:e1:b2:f0:62:27:66:31:14:ef:4c:
d4:db:9f:91:82:03:04:4f:60:66:5a:0f:a6:88:c9:
56:69:b3:60:a1:26:9e:d8:7f:bd:5a:5f:09:e0:d6:
47:4e:a1:3a:e6:9c:e2:71:a0:9f:f7:e2:dc:e8:ba:
39:68:6a:93:dc:b8:85:6b:a1:77:d4:e7:5e:f5:6c:
3d:e8:08:d8:52:ba:67:50:a6:3c:8e:3f:b5:6e:72:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:59:26:8A:E5:1F:58:59:1D:C3:AB:32:43:79:C2:83:95:7A:3B
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/n11ZJorlH1hZHcOrMkN5woOVejs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:a1:fc:47:e4:23:a0:7c:2e:aa:a3:80:98:d5:2f:a2:47:b5:
96:4c:1b:83:ad:ef:f3:6a:5a:91:26:d2:04:ba:7e:5a:4a:d9:
f4:e0:12:71:11:09:9f:a8:22:c0:21:5e:d7:6a:42:8b:f5:79:
b7:f0:9a:42:64:e4:b8:9b:e8:f3:22:44:ed:38:4f:6e:c9:15:
da:f4:1b:1d:37:59:52:61:63:a2:7a:75:4c:6c:e9:47:73:77:
ea:4d:1d:dd:5a:dc:7d:f5:36:97:7b:df:e2:a2:d6:b0:c9:dc:
88:f6:67:c6:39:48:d6:ee:1c:2c:ea:fa:1f:0b:e7:2b:b2:f3:
62:72:7e:bd:c7:6f:17:9a:de:18:7d:9c:e8:cd:73:a6:66:d1:
4d:bd:f4:d7:2c:50:e1:21:d8:85:ac:a1:36:c2:ac:ae:1a:5b:
26:dc:01:30:10:22:99:27:c4:6d:a3:2d:3a:df:6d:3b:c3:04:
ba:a9:97:ef:4e:d2:5e:0f:9b:28:c7:49:0a:a3:2c:8f:64:b5:
ec:6e:f8:6d:ec:e2:92:d8:38:8d:a0:97:8d:fb:43:3c:e6:4d:
10:1d:fd:e9:04:4c:84:f0:1f:c9:da:b2:6c:d0:f9:d1:8d:9e:
81:b6:26:ec:f9:83:9a:70:14:99:ad:94:03:0f:41:cf:63:f7:
21:26:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:59:24 2025 by rpki-client