Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa
File: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (raw, json)
Hash identifier: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=
Subject key identifier: E8:5F:72:DF:A9:59:7A:81:38:6D:F8:C6:5C:2F:D4:7E:4D:9F:8D:F2
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C898E0CAD008549A69B76604D484F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:8e:0c:ad:00:85:49:a6:9b:76:60:4d:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85f72dfa9597a81386df8c65c2fd47e4d9f8df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:0a:d3:42:dd:33:d6:12:6e:06:16:6a:6b:
fb:4e:85:ee:cc:7b:bb:87:eb:a3:ec:4d:5c:48:94:
cc:2a:7e:3d:26:1f:e7:8f:e7:b7:0b:24:63:63:7f:
68:d8:5c:3e:e4:e7:01:fe:20:47:cf:2c:c2:79:74:
71:0d:a3:66:81:32:f0:06:8e:12:ba:95:c2:c4:49:
24:e9:c8:a6:22:69:e8:cf:8a:c7:ae:04:8e:98:15:
11:ac:39:31:19:7a:05:01:f7:6b:e8:e0:ac:45:ab:
f5:51:c6:eb:67:ce:81:c4:b7:64:d7:3f:0c:f6:9d:
eb:0e:90:ef:33:0d:6a:7d:82:d1:83:3f:48:03:e1:
fd:76:84:b4:95:49:cd:2b:51:3b:32:e1:53:3c:9e:
b5:ac:06:c5:50:e6:ec:bc:51:57:a5:b6:8a:f1:b1:
37:b6:97:53:78:42:71:87:60:98:4d:3d:c6:85:15:
5c:c9:63:aa:d2:e4:e4:da:f7:28:87:2c:d9:6f:10:
8b:87:19:62:08:21:9e:0f:e6:dd:32:95:45:f0:71:
b5:0d:1d:f3:07:ca:65:33:8d:bc:b8:2f:87:3f:63:
d2:da:9f:1c:0c:93:34:59:ad:fd:b1:56:c3:dc:50:
ce:3e:99:cc:c2:de:47:ad:dc:59:70:9b:39:a3:54:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:72:DF:A9:59:7A:81:38:6D:F8:C6:5C:2F:D4:7E:4D:9F:8D:F2
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
98:79:62:24:04:f7:9d:80:6f:25:8c:ee:36:1a:dc:31:2f:19:
97:d6:02:53:85:43:58:d7:ce:61:90:88:c9:05:a6:b6:ee:f1:
0f:1a:74:b3:14:44:15:30:80:f6:61:83:2e:ca:64:d3:6d:b1:
e0:5b:45:a3:e6:c0:a6:dc:85:41:9c:1f:e2:69:63:d8:30:f4:
1e:7a:aa:bb:cb:21:ce:d7:ae:45:a7:c8:b9:5a:58:05:55:77:
30:df:82:a3:f1:35:60:b1:41:93:dc:59:f8:e1:bb:06:7a:ee:
8b:ee:57:ae:17:b7:13:35:fa:15:b6:37:9a:62:76:a4:04:d3:
40:8e:99:cf:30:9c:a0:52:49:5d:6e:81:45:ab:83:fc:a9:c5:
0b:0d:e6:8e:ee:0d:d4:b9:46:4a:d7:46:54:06:92:fb:f1:13:
73:45:00:67:9b:38:20:63:57:3e:41:e2:a3:c0:35:84:8f:d4:
6f:1d:66:dc:4a:5f:32:b3:13:97:96:6a:40:1c:9f:3f:34:5c:
b3:c2:5a:33:d9:33:8a:6c:96:f1:25:69:80:90:12:c2:9a:d0:
f1:cd:79:7d:82:35:90:33:ad:a3:2e:bb:d4:a8:1b:9f:e3:d9:
19:1b:10:dd:f1:b1:d5:f5:7a:66:d9:31:53:e3:79:bf:b7:f3:
2b:f5:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:26 2025 by rpki-client