Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa
File: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (raw, json)
Hash identifier: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=
Subject key identifier: 6D:8E:66:90:02:4E:D2:DD:5E:B0:D3:63:F5:C1:29:43:89:F3:2A:47
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0194228DDE784E0891D1362F85002949E63E
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202269
IP address blocks: 185.110.188.0/24 maxlen: 24
185.110.189.0/24 maxlen: 24
185.110.190.0/24 maxlen: 24
185.110.191.0/24 maxlen: 24
185.208.172.0/24 maxlen: 24
185.208.173.0/24 maxlen: 24
2a14:7980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:de:78:4e:08:91:d1:36:2f:85:00:29:49:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d8e6690024ed2dd5eb0d363f5c1294389f32a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:fa:6b:05:a4:79:c3:7c:b2:8d:a4:18:49:
a9:0d:89:b3:ac:ce:b8:1e:ef:ee:a3:af:a8:c2:92:
85:bb:5b:07:c3:14:e1:1c:d5:b2:7e:90:0d:a4:d5:
ff:40:0b:67:b1:b1:fa:01:c2:5a:9f:8f:d9:7c:f8:
5a:9f:84:3b:b7:6b:2e:9f:b7:00:2d:5f:b7:e3:bd:
28:3b:69:bf:02:b5:ca:c4:a5:12:42:11:11:a0:0b:
a9:c2:6e:1a:bd:6a:a4:0b:ac:f0:20:05:da:6d:08:
a3:eb:fa:af:30:9a:3a:d9:0d:74:b4:87:62:68:40:
7a:82:69:3e:3c:83:50:d2:83:77:65:8b:9f:b6:1e:
10:38:df:29:08:4d:74:df:fa:7c:a5:89:9d:01:a0:
89:27:7e:48:74:93:a6:c9:2e:ca:8b:d8:bf:fb:ed:
95:88:7e:f2:2c:3e:c9:f0:63:b8:d3:bf:ab:56:d1:
6c:47:15:9b:21:c2:f8:65:3b:47:d9:9f:39:96:63:
d9:7d:39:fd:fa:50:b8:3f:a9:8b:17:37:44:bd:ef:
9c:08:3d:96:39:1f:1d:02:2e:a9:85:6e:cc:07:8b:
91:a3:ec:02:c0:86:1e:35:c9:bf:ca:df:d8:8d:84:
99:c6:6e:37:24:6e:7c:aa:79:70:ec:a6:77:d0:70:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:66:90:02:4E:D2:DD:5E:B0:D3:63:F5:C1:29:43:89:F3:2A:47
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.188.0/22
185.208.172.0/23
IPv6:
2a14:7980::/32
Signature Algorithm: sha256WithRSAEncryption
c4:1b:da:a7:87:35:1b:82:f2:b5:f5:90:94:ad:e7:2f:bf:c9:
5d:3d:ff:79:7c:4f:9d:46:ab:70:30:9f:7c:f2:1f:98:fd:05:
39:6b:ae:09:41:bc:3d:5e:bd:e0:20:8e:35:10:17:21:3e:07:
ae:b5:ab:f1:a4:1b:73:65:00:41:96:11:35:f4:38:7a:d1:f9:
52:f2:95:04:63:a4:56:9e:b7:9b:fb:39:ec:a9:f7:43:ac:2c:
61:dc:e8:5f:32:3f:5f:1b:1c:2a:0e:63:dd:bc:cb:d0:fd:e0:
4e:6f:c9:3a:2c:5d:6e:ad:4b:50:48:a1:6d:d5:24:75:c3:f2:
b8:c5:d8:69:58:6e:e3:7a:98:df:11:3f:56:94:30:26:a3:88:
ad:16:44:45:b6:9b:0e:b4:3c:88:de:74:64:32:75:08:c5:a1:
66:98:1a:4c:f8:1f:df:f5:5c:6f:30:b3:98:8c:2d:39:5e:c8:
3d:8a:d9:c9:42:d6:c5:3d:ba:82:6a:88:10:92:ed:2d:58:de:
77:0f:1e:39:78:da:09:60:69:fe:bf:4f:95:cd:b8:84:69:f9:
30:16:88:e9:5a:d2:7f:9c:8e:16:45:df:ac:43:eb:e0:50:69:
75:1a:a3:fb:ac:f7:71:56:6f:b9:8e:69:fb:de:04:c2:85:9c:
eb:25:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:18:25 2025 by rpki-client