Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa
File: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (raw, json)
Hash identifier: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=
Subject key identifier: 9C:06:49:05:9E:95:BC:9A:0D:DC:C8:DA:9E:9D:C3:EC:F6:E5:FF:EB
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0194CB31320CA14FC7551A42FF4758689988
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa
Signing time: Mon 03 Feb 2025 09:43:06 +0000
ROA not before: Mon 03 Feb 2025 09:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212547
IP address blocks: 185.220.4.0/22 maxlen: 22
185.220.4.0/24 maxlen: 24
185.220.5.0/24 maxlen: 24
2a0b:ed40::/29 maxlen: 29
2a0b:ed40::/32 maxlen: 32
2a0b:ed41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:31:32:0c:a1:4f:c7:55:1a:42:ff:47:58:68:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Feb 3 09:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c0649059e95bc9a0ddcc8da9e9dc3ecf6e5ffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:4d:59:5b:72:3f:ab:03:3c:33:de:fa:ca:
6f:f3:75:15:1a:da:06:03:6f:85:51:d6:6d:15:da:
6b:58:bc:20:d9:14:83:7a:9a:7c:ad:80:84:62:0f:
a1:ac:25:b6:d6:c4:11:54:5a:9d:f0:69:0a:c0:cb:
69:25:29:a3:b3:59:21:b9:2b:1b:07:e0:12:a0:5e:
16:ae:19:d6:9a:31:7d:4f:2f:cc:a8:1b:f5:39:0b:
1e:6e:7e:17:19:c6:ea:16:9f:1c:13:37:2f:db:1e:
32:9f:47:86:ac:55:78:2d:9a:5b:c9:06:37:5f:33:
61:ac:ae:0a:72:6f:24:d8:de:9b:9a:1a:d6:40:62:
3a:6f:fc:c8:ac:d3:e4:a3:83:bf:09:45:26:83:f0:
9e:d6:38:34:10:98:9c:30:a8:0e:00:af:0a:e4:47:
75:da:f0:7f:48:a1:0d:a9:81:55:87:ed:e0:e2:94:
24:53:06:92:45:8c:7b:48:87:0f:2d:76:af:5a:b5:
0f:fc:a7:64:be:4c:20:68:ed:11:f0:f0:8e:e9:97:
6d:f6:5b:ba:0b:ae:ee:46:16:94:05:3d:65:b1:5c:
77:17:6e:9e:dc:5e:1a:9e:fc:fd:c3:e8:91:fc:2d:
e2:31:c9:0d:cc:1d:08:d4:e5:05:24:cc:f8:97:4d:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:49:05:9E:95:BC:9A:0D:DC:C8:DA:9E:9D:C3:EC:F6:E5:FF:EB
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.4.0/22
IPv6:
2a0b:ed40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:61:f8:a3:83:e3:05:33:e6:24:c7:f2:98:3c:71:1b:53:1a:
d7:bf:ed:ca:c0:86:4e:22:57:f7:a0:8b:e3:16:46:d5:b0:62:
8f:75:34:91:8f:8a:c5:3c:6c:eb:4a:f4:12:08:16:84:c4:76:
e8:98:7a:6d:6e:01:b5:4b:90:62:95:81:fd:02:67:e6:45:10:
e3:05:45:8e:d0:38:9a:2f:e0:20:40:92:84:bc:95:ab:dd:43:
f7:36:71:ac:7a:e2:67:31:44:60:21:a8:77:90:fe:88:ab:fe:
1f:21:74:51:1a:79:bb:78:cf:ba:4a:ce:98:7e:f5:8c:f8:17:
ec:1f:e9:9f:8f:c6:bf:4d:3a:11:ec:df:9c:25:cf:34:64:5b:
d5:31:b3:a3:3e:19:c8:2e:1c:c6:86:53:86:52:95:aa:cd:7f:
34:97:ae:27:88:5a:ec:d6:6c:e3:d7:3d:ea:1b:2b:b9:4b:6f:
1a:ab:88:1e:9c:de:c7:5d:b2:be:99:27:b3:b2:36:83:30:ff:
08:53:e7:52:d0:d5:6c:4d:d9:40:39:ff:84:01:b3:f9:ec:ae:
62:12:b9:9a:3f:f1:a4:c0:b4:be:b4:22:34:ec:b5:c8:ec:1d:
7b:14:27:4c:e3:b8:4d:7d:8d:70:cb:77:23:37:f1:9d:4f:df:
b5:33:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:03:13 2025 by rpki-client