Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6Mr8Yf29VRq6445CyYzjlEFt3gs.roa
File: 6Mr8Yf29VRq6445CyYzjlEFt3gs.roa (raw, json)
Hash identifier: +FCEexP7XazVbY5qfuvKuoCl73fhG/YcI/Tn7shPgi8=
Subject key identifier: E8:CA:FC:61:FD:BD:55:1A:BA:E3:8E:42:C9:8C:E3:94:41:6D:DE:0B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01951580E35525840B20610A65B675AB7000
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6Mr8Yf29VRq6445CyYzjlEFt3gs.roa
Signing time: Mon 17 Feb 2025 20:02:03 +0000
ROA not before: Mon 17 Feb 2025 20:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 188.132.193.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:80:e3:55:25:84:0b:20:61:0a:65:b6:75:ab:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 17 20:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8cafc61fdbd551abae38e42c98ce394416dde0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:7e:0e:43:75:34:23:49:0e:d5:52:a1:d3:
82:51:53:7d:f4:71:62:1c:82:34:2f:2d:4a:af:3c:
18:75:3d:87:f5:22:22:50:27:10:7e:c7:5e:1c:73:
fa:a6:36:e2:c1:9e:34:23:e3:e4:2d:4e:a4:67:7f:
d2:e8:ac:22:9b:7c:34:3b:0c:d5:1f:e5:5b:ae:00:
7b:a9:23:52:5f:27:40:be:27:dc:d5:ab:04:72:7f:
77:de:06:25:93:94:3d:93:14:99:18:d8:45:bf:4e:
e2:ff:84:e8:5c:40:bf:a8:e4:35:2d:02:4d:62:d6:
b5:a2:f4:d1:f6:f1:c8:d9:92:35:24:ba:3b:8f:46:
2c:ee:32:1f:e9:59:a6:88:58:ef:5f:84:1e:8f:a8:
a9:75:63:9b:6f:f1:be:b3:fd:ba:4d:7d:6a:3f:df:
34:64:20:9d:ff:98:e6:25:c7:76:4a:5d:c6:8f:9a:
8a:ad:67:4b:45:36:ab:e4:f0:0b:0d:79:3d:72:33:
76:93:69:e7:39:a1:34:1c:81:b2:5e:76:f3:a4:5e:
0a:43:34:48:22:b6:85:57:f8:c5:82:9f:c3:cd:a5:
78:89:e3:56:64:bb:e3:12:e4:56:0a:42:dc:28:db:
71:5c:c5:85:77:01:15:90:0f:4c:bd:41:51:59:f2:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:FC:61:FD:BD:55:1A:BA:E3:8E:42:C9:8C:E3:94:41:6D:DE:0B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6Mr8Yf29VRq6445CyYzjlEFt3gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.193.0/24
188.132.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d9:cf:07:74:a7:98:01:5b:a9:eb:e1:7b:ef:07:92:72:d7:
27:e6:db:b7:e6:17:e4:54:f7:48:07:3e:5a:6f:c3:29:0e:1e:
05:73:47:8c:a0:cd:e4:64:0e:22:2d:e9:81:ff:72:47:2b:c6:
20:04:75:3f:f6:ac:b7:ca:62:55:db:04:ed:c7:71:d6:9b:20:
a0:79:c8:84:b1:69:97:36:c3:bb:a0:22:ea:ef:c3:6f:15:fb:
91:df:76:6a:f2:2d:17:46:64:db:50:78:2d:f1:37:4f:51:63:
d1:db:39:b7:82:ac:49:5b:18:31:6b:3b:4b:53:d6:a3:61:c4:
71:45:34:66:75:74:24:72:c8:82:61:26:fb:80:02:58:30:d2:
94:6c:9b:2e:0b:b8:1b:0e:a1:6b:b2:55:d2:98:d1:c4:66:4e:
3c:82:e7:aa:92:a0:f6:1d:2c:79:07:7a:aa:fc:5e:13:fd:76:
2c:ca:4b:a0:47:0f:2a:cd:1e:31:7c:56:56:5f:39:df:2f:08:
c8:2c:51:b7:52:d6:d5:e6:22:f5:27:70:40:da:eb:c3:4e:ca:
92:73:ee:27:1c:e8:00:62:e0:cc:ec:ce:3a:95:31:89:e7:ee:
52:7a:c0:99:6d:ab:26:51:9c:37:2f:e6:72:16:90:8b:4d:bf:
aa:25:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:58 2025 by rpki-client