Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa
File: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (raw, json)
Hash identifier: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=
Subject key identifier: 6E:5D:18:5C:F3:8A:4F:91:55:05:B9:89:32:6B:94:5A:72:49:A4:94
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 019427477A8C2DA9BC511BC05E0A53A50752
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209346
IP address blocks: 185.157.0.0/22 maxlen: 24
2a0b:2ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7a:8c:2d:a9:bc:51:1b:c0:5e:0a:53:a5:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5d185cf38a4f915505b989326b945a7249a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:4f:af:f4:98:0a:e1:89:28:41:48:48:5a:
10:24:8a:2a:cb:bf:25:d9:3a:79:b0:44:bb:9f:b3:
ba:8a:94:49:1c:2b:d0:88:48:f4:6b:13:15:d8:ba:
fc:99:51:68:07:a5:a7:d8:b2:42:d5:23:dc:b2:0b:
de:10:44:c3:e2:0f:28:34:15:01:38:16:49:59:cf:
db:1a:f5:b2:17:42:29:2c:2a:bc:85:a7:b4:a1:77:
04:69:e0:40:d4:5d:61:56:a6:65:af:87:93:20:d1:
b2:eb:f9:27:1c:33:f2:f8:f1:5a:28:45:0f:54:50:
69:29:6a:4b:bd:3f:bd:61:43:ed:84:38:3a:63:44:
0d:ab:56:13:a5:e1:c4:b0:7e:2d:54:e2:7f:28:ba:
59:97:62:53:c0:68:ec:d4:21:b1:ab:4c:f7:7e:55:
11:42:2c:04:e1:34:3e:a9:0b:e3:73:cf:94:f2:40:
b9:46:bc:e4:95:28:52:d8:53:b5:47:13:52:b5:1b:
60:b0:6a:99:21:c0:ad:27:3a:c1:cc:94:f6:7d:f9:
a3:ca:87:17:ec:ef:c7:32:d3:5d:6c:6d:d2:0e:d5:
d7:5b:c9:7c:68:ef:c5:60:a6:eb:cb:1d:ec:02:22:
39:0c:90:a3:03:f8:f2:fc:0d:81:39:56:63:25:bf:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5D:18:5C:F3:8A:4F:91:55:05:B9:89:32:6B:94:5A:72:49:A4:94
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.0.0/22
IPv6:
2a0b:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:54:63:4b:09:fc:ab:b4:cf:e0:8c:5f:cc:9a:20:61:5e:24:
dc:00:d4:6b:d9:ab:4b:56:8f:49:54:24:6c:40:3f:e1:8e:69:
5f:b9:39:55:6f:1b:d4:72:c7:6b:04:b9:7a:1c:5c:f1:23:5b:
b3:61:87:b2:9a:a6:3f:31:30:2e:7f:35:29:24:fe:ee:42:cf:
06:68:52:b4:f1:64:f7:04:ef:dc:fb:03:51:25:4c:03:4b:c8:
25:03:24:1d:3a:8e:f4:0d:a7:2f:14:77:c5:1d:90:3a:09:cf:
52:b4:28:37:5c:b2:ec:1b:4e:22:fd:be:92:76:5c:81:6b:ac:
2e:55:02:c0:e6:d3:14:31:f6:e4:a2:05:1c:36:15:de:65:f1:
a3:b0:f2:0f:4e:a9:4e:74:f0:95:80:12:de:37:50:d9:a7:d7:
94:b0:48:9d:e3:67:0c:73:6e:b9:8a:5a:13:e3:2f:14:cf:a9:
e2:7c:07:3f:af:1c:23:27:47:56:74:7d:f6:4c:7e:e6:11:9f:
53:61:15:e3:2e:ea:f5:ab:a9:1e:73:9a:91:6f:0f:80:28:68:
bc:e8:a0:2c:16:f2:75:75:fa:59:81:8c:40:13:33:bc:b0:86:
1a:3c:9d:a6:60:3f:d8:47:eb:8f:12:59:e0:f3:61:06:69:d3:
b6:29:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:20:54 2025 by rpki-client