Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa
File: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (raw, json)
Hash identifier: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=
Subject key identifier: EA:F7:BD:65:D3:B1:F7:E2:5B:7E:68:B8:E1:6D:CC:F3:ED:DF:C9:80
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019425FDA7A5BC6035938555A7134B2A5604
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199527
IP address blocks: 85.208.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a7:a5:bc:60:35:93:85:55:a7:13:4b:2a:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf7bd65d3b1f7e25b7e68b8e16dccf3eddfc980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:30:60:b9:4d:18:1a:86:7c:da:8c:9e:75:
e1:7e:77:42:8f:f4:7f:f3:ed:f1:c1:26:11:00:e7:
d1:40:e5:80:cf:c6:0a:30:94:98:1c:e7:81:77:9e:
8a:4a:9c:fd:85:46:4b:5b:66:2c:b1:dc:90:fc:a7:
fb:7f:94:47:cd:c4:5a:9b:d0:54:59:cd:0d:55:b5:
f6:03:21:b7:51:bd:eb:0f:45:4a:94:9e:13:49:a1:
a7:8e:41:e9:0e:ee:60:bc:78:e8:2b:76:34:1d:2a:
2b:e2:1f:09:f4:47:82:85:4f:30:29:26:e7:c1:c2:
2b:1c:32:9d:25:61:c0:02:f2:19:78:d3:60:54:d7:
0b:24:fb:98:98:6d:c5:af:97:76:e6:70:20:76:30:
95:f3:e4:37:55:2f:76:e2:34:a9:f7:d8:c6:b9:be:
30:c8:b1:08:87:8e:89:5b:5c:9d:da:6d:97:b6:e5:
cf:0a:c4:ef:87:79:32:15:f4:2f:fa:39:17:ec:ca:
1f:e3:3e:8b:78:72:8c:33:5c:7f:02:50:75:1a:6f:
56:4f:fc:3f:2e:65:67:fc:74:a3:65:7f:92:4b:3a:
d2:16:65:a6:70:2f:bb:0e:cf:e4:27:eb:f8:5c:4c:
c9:85:a3:fd:4d:4e:1a:8f:7f:b2:aa:01:99:59:ab:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:BD:65:D3:B1:F7:E2:5B:7E:68:B8:E1:6D:CC:F3:ED:DF:C9:80
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:f8:61:a3:bf:ac:0d:4f:ee:57:4d:e1:06:f9:17:06:6d:6d:
71:85:15:25:e0:32:82:62:a1:f7:75:57:76:2e:3f:f2:1c:0e:
55:6b:ed:ad:21:01:e3:7f:1f:87:a3:25:14:2e:42:f3:b1:ba:
71:4a:22:73:ca:4a:a5:79:57:51:28:fe:e7:4c:35:83:7d:a6:
2b:d0:6b:e7:c3:73:c5:5e:76:6b:2b:42:b4:90:e7:03:c4:cc:
9f:c3:a7:90:0e:7b:2e:ce:3b:d5:a0:d9:33:9e:0a:d4:b2:a5:
3c:6c:54:bb:f7:19:a1:8b:7f:09:b7:ee:8e:64:13:80:9d:ba:
b1:62:2e:50:d2:df:8e:1e:57:76:b1:f8:2a:0e:d7:d2:0b:e6:
14:59:ae:5f:ad:fb:10:fb:7e:ef:22:74:32:19:a8:11:c3:df:
0f:a7:3e:65:a8:53:8f:5c:83:ce:24:c0:fa:10:61:4e:4f:b3:
73:64:72:aa:68:5b:a0:13:e5:8d:ad:8b:cd:fc:c2:48:e1:27:
15:57:87:72:09:47:ff:24:4c:d0:91:57:11:fe:48:e3:ef:bf:
b1:b1:5f:be:12:cc:f9:18:24:9b:12:30:74:50:04:b2:93:14:
7d:ce:bc:11:4e:a6:57:68:71:22:5d:05:54:5b:72:64:e3:58:
c5:78:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:43 2025 by rpki-client