Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/U6RWD9aj4OMHo0yZqYie1YKgXI8.roa
File: U6RWD9aj4OMHo0yZqYie1YKgXI8.roa (raw, json)
Hash identifier: 4jGk3sD+7Q1BY6xahD0ze9ksbE/y7sr9QeBNFj05KaY=
Subject key identifier: 53:A4:56:0F:D6:A3:E0:E3:07:A3:4C:99:A9:88:9E:D5:82:A0:5C:8F
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 0194236A4A8924A8CB4E75D8C81AFD0131D2
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/U6RWD9aj4OMHo0yZqYie1YKgXI8.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.72.0/24 maxlen: 24
185.10.73.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
185.10.75.0/24 maxlen: 24
2a02:dfc0:1::/48 maxlen: 48
2a02:dfc0:2::/48 maxlen: 48
2a02:dfc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4a:89:24:a8:cb:4e:75:d8:c8:1a:fd:01:31:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53a4560fd6a3e0e307a34c99a9889ed582a05c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:01:ba:2b:77:44:46:ef:ca:4f:da:69:e8:47:
22:9b:84:17:85:93:4d:c1:8f:f3:fc:7a:a9:e7:ff:
1c:dc:29:c0:79:9e:fd:ca:8c:0d:71:a0:45:e5:40:
9b:4b:54:a6:8d:dc:fe:41:72:77:f6:08:f9:32:1c:
76:62:73:3a:fa:d6:f7:8a:cd:34:c7:6b:85:5a:4a:
d6:d4:8f:4c:00:dd:07:c0:fc:3b:f5:91:82:fa:e9:
c8:9b:ed:1f:53:c7:b3:64:e5:77:51:8d:1f:52:7f:
58:a6:c4:8d:d0:8a:69:67:e2:71:c3:1b:fe:55:c1:
a3:66:78:20:25:fe:7b:83:18:18:b8:67:ce:c8:4b:
b0:a0:ea:1b:66:6e:c1:67:50:af:9b:59:73:ba:e6:
6f:88:0a:31:81:b0:1c:18:a5:5e:09:0c:60:26:ca:
ab:2d:56:dd:25:7f:d7:e1:f0:b0:af:a2:12:6d:1e:
29:87:1b:3b:09:44:d1:a2:a2:d0:1d:2d:b5:5e:5c:
56:64:43:64:3c:9b:df:fa:eb:9c:83:29:45:99:8e:
87:00:9d:98:93:a1:bc:76:27:dc:d9:13:72:1f:38:
f3:00:dc:e4:7c:9c:cf:44:3f:1b:69:f7:f3:27:58:
5f:79:8a:ef:5a:ff:c1:cf:a3:13:62:6c:32:35:ae:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:56:0F:D6:A3:E0:E3:07:A3:4C:99:A9:88:9E:D5:82:A0:5C:8F
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/U6RWD9aj4OMHo0yZqYie1YKgXI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
IPv6:
2a02:dfc0:1::-2a02:dfc0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:22:55:ac:19:49:0b:59:b4:b0:6b:8c:23:13:e5:2b:10:2b:
7e:5a:62:36:e9:dc:66:9b:19:09:dc:3b:ee:58:a6:6e:73:9f:
61:9f:c5:11:4d:c9:e6:ba:eb:19:f6:8b:38:60:d8:5d:d6:76:
3f:ed:30:fc:6d:9b:9b:24:96:c3:8a:56:e2:d3:f4:cd:a2:74:
a2:9f:b0:a6:84:47:45:8d:9a:00:9a:0c:56:78:3c:2d:db:d0:
ac:7e:9e:c4:03:b6:e8:6b:b7:c6:5a:13:e8:ac:e4:f8:29:9e:
2e:6e:24:61:cc:11:c1:46:f8:94:e4:a7:a9:b8:ce:e5:7b:b8:
a0:89:c0:78:fd:38:9c:27:cf:24:06:ef:83:29:32:a8:86:9f:
17:7f:1b:51:a3:f5:97:1b:ae:49:ec:84:b7:86:19:05:8b:de:
e3:11:bd:e5:9f:29:7d:f6:d3:27:75:c8:e2:0a:72:00:7b:42:
06:74:9f:11:21:d7:c7:f1:8f:19:8f:cc:71:8f:12:81:ea:44:
ed:6f:35:68:da:c3:62:7f:73:e8:e0:48:74:bb:44:4b:3b:55:
aa:36:8d:45:eb:1b:8a:57:89:ec:2e:f4:da:e6:a6:c6:80:74:
80:4d:dd:da:60:92:af:39:84:9d:c6:32:05:4b:43:78:ac:b6:
dc:e8:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:21 2025 by rpki-client