Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DyQ9EAiN0eniPyiox4aO244F9E4.roa
File: DyQ9EAiN0eniPyiox4aO244F9E4.roa (raw, json)
Hash identifier: bvLcpK55XH5/x9SBXkmzsY2x244oXbWNkS01fsXCohs=
Subject key identifier: 0F:24:3D:10:08:8D:D1:E9:E2:3F:28:A8:C7:86:8E:DB:8E:05:F4:4E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E5BDD7A6EC3D0001FEBC14B21EEA
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DyQ9EAiN0eniPyiox4aO244F9E4.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e5:bd:d7:a6:ec:3d:00:01:fe:bc:14:b2:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f243d10088dd1e9e23f28a8c7868edb8e05f44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:dc:2e:9c:dd:8b:b6:ea:0c:7b:dd:0f:a7:
39:83:db:7c:47:38:54:1b:98:62:eb:ea:be:26:6c:
7d:f9:27:fa:01:95:31:c9:52:cd:52:3f:03:d4:fa:
66:93:65:a0:5f:17:da:d6:ad:f3:9a:f7:3f:b2:74:
ed:43:2f:32:23:21:37:7b:61:26:04:13:b9:9d:db:
b6:43:78:fd:d1:6b:bf:23:47:5e:44:7e:d4:59:0e:
39:11:0f:65:a6:c0:6e:7f:a5:6c:af:3e:f0:83:05:
ba:8a:fc:4c:97:54:0c:94:d7:b4:de:1d:bf:51:41:
96:a2:7d:d0:0b:c3:4b:04:02:94:96:3d:67:59:a7:
30:5e:7e:c6:22:f2:28:da:5f:c0:f9:cf:01:c0:00:
d4:c3:a6:18:0b:92:f5:5f:89:4f:87:3f:03:b5:c1:
45:ab:37:71:a6:9a:4a:c7:1c:53:3e:c6:21:24:3a:
6a:72:18:38:d0:d5:91:08:99:cf:8d:e5:63:33:f4:
fe:cf:8d:07:0c:67:3a:e4:4a:53:ae:a4:8b:37:86:
b8:96:0c:51:3b:4e:f2:05:ed:f9:e1:40:91:c1:56:
54:f6:03:00:94:57:25:5b:71:d9:41:fa:a4:b9:77:
b3:15:ac:bc:9f:f2:8c:70:71:c6:61:1a:c3:d7:73:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:3D:10:08:8D:D1:E9:E2:3F:28:A8:C7:86:8E:DB:8E:05:F4:4E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DyQ9EAiN0eniPyiox4aO244F9E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0-185.120.58.255
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
4d:07:c1:8d:9b:5f:14:bc:6d:db:ca:ad:90:72:9f:96:c2:30:
13:ca:d1:52:41:cb:b1:f1:64:7d:45:1a:83:bc:83:c0:67:86:
00:38:ae:b9:74:eb:76:02:c3:a7:c1:08:67:7b:f2:80:b1:04:
39:fd:74:b1:35:14:58:0f:51:86:53:86:1d:b5:2b:2e:18:b1:
eb:eb:f5:45:c3:16:d8:e5:27:99:5f:58:43:08:90:80:12:3c:
d2:ea:87:4d:b3:66:9e:62:c1:d8:5b:39:d3:44:c5:15:52:56:
10:a5:08:cd:7c:2d:5a:f4:22:1c:e9:6d:48:0e:28:b5:d0:1f:
b7:f5:40:c8:9f:9e:db:37:a3:8a:9a:99:a2:21:dd:a0:07:05:
d0:94:73:30:60:e9:6a:09:c1:1d:78:3b:7e:6d:16:b5:db:0f:
82:c4:a0:f5:91:88:95:18:b9:2b:14:7b:98:f0:cc:56:a5:63:
35:8f:20:28:6f:27:8c:78:a8:df:cb:61:83:79:6d:ea:ba:46:
a2:25:ae:ca:14:91:8b:92:48:ef:b3:5c:e6:44:1e:62:ef:ef:
70:57:c3:bc:68:d5:46:02:9c:32:69:7f:13:30:68:c0:9c:fa:
6e:63:dc:ae:a5:6b:f9:86:91:10:76:76:94:40:d3:4c:6d:67:
2e:f0:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:02:03 2025 by rpki-client