Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cBQ6BJEvdcc0cny4qXWt-wN0VjE.roa
File: cBQ6BJEvdcc0cny4qXWt-wN0VjE.roa (raw, json)
Hash identifier: +eP/E+ODzlrxx+0okfUl7inQP4YDx82Uep1DzJfARlo=
Subject key identifier: 70:14:3A:04:91:2F:75:C7:34:72:7C:B8:A9:75:AD:FB:03:74:56:31
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59F0AB3C9BE50D3ADB88446E65C59
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cBQ6BJEvdcc0cny4qXWt-wN0VjE.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8362
IP address blocks: 92.188.0.0/16 maxlen: 24
194.51.85.0/24 maxlen: 24
194.206.79.0/24 maxlen: 24
194.206.126.0/24 maxlen: 24
195.6.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:0a:b3:c9:be:50:d3:ad:b8:84:46:e6:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70143a04912f75c734727cb8a975adfb03745631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:83:9c:1f:7f:c6:2c:24:54:1c:69:e8:0a:
5a:55:1c:6d:29:fd:12:35:74:74:cb:60:e2:e7:b6:
6b:79:50:33:8d:3c:b1:e3:6e:15:46:a5:50:2f:be:
ea:a4:48:70:98:94:e9:d4:c3:cd:09:35:07:15:ef:
88:ee:b8:a8:eb:36:8a:32:f7:3e:78:cd:39:f4:5a:
11:73:e3:70:27:5e:7e:b2:1a:03:92:d3:89:d6:e0:
4a:4f:0c:f7:27:c9:79:43:66:73:51:98:e8:01:44:
fb:50:60:c8:8b:15:48:2a:b6:42:80:1e:3e:07:8d:
ec:52:9f:a7:3d:5d:c6:54:a5:1f:d5:80:7b:d9:9a:
f6:ef:33:d4:4b:c3:ff:f1:5e:45:a6:24:44:5e:9e:
33:25:cd:f6:bd:06:f8:34:55:90:5c:69:18:8d:c7:
f9:25:ec:fd:f6:1d:0a:f2:b2:18:c3:17:08:cc:b4:
f4:18:9e:7e:4c:73:9a:f8:c1:5f:3e:92:12:c5:02:
44:0d:bb:60:da:f0:42:f2:72:1a:ff:f0:b2:b8:99:
26:92:20:71:97:b8:83:92:d6:a4:f2:32:3c:d5:c2:
da:4f:24:8d:98:d5:8d:32:9f:70:1f:8c:57:17:6b:
40:b9:47:7a:ad:8a:6e:0a:a3:c4:1e:b2:60:bc:14:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:14:3A:04:91:2F:75:C7:34:72:7C:B8:A9:75:AD:FB:03:74:56:31
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cBQ6BJEvdcc0cny4qXWt-wN0VjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.188.0.0/16
194.51.85.0/24
194.206.79.0/24
194.206.126.0/24
195.6.244.0/22
Signature Algorithm: sha256WithRSAEncryption
66:64:5c:97:a7:b4:9b:85:29:35:5b:19:5a:58:5c:d6:44:b7:
fc:22:02:65:49:a8:4f:1a:f7:e5:0d:b3:5b:eb:a7:89:63:bb:
60:41:51:10:33:07:8e:72:46:9b:f3:f2:87:cf:af:1a:bc:9f:
5f:dc:d9:2a:7b:52:e6:ea:56:fc:6e:b3:4d:35:1a:fb:29:3d:
69:bc:5f:47:93:73:10:07:1f:11:2f:2d:d8:36:3b:7d:4e:e9:
ea:aa:e4:66:18:18:35:d8:2b:cd:d1:af:4c:34:09:6b:99:f5:
0d:d3:0c:2d:6f:6e:d9:56:ae:95:8f:88:c6:26:f0:65:f1:54:
b6:c3:69:de:c9:61:41:64:9a:a4:8e:47:fd:bf:cb:76:58:11:
66:69:21:9f:0c:43:b8:e4:75:da:b5:e2:c5:76:43:a2:34:dc:
c1:3f:ab:43:38:68:76:f1:22:26:51:68:f9:b5:ad:73:58:4c:
4d:34:b4:2c:be:7e:77:5e:16:28:f7:82:b6:2f:99:13:5b:45:
91:d1:7c:20:2e:2b:84:f2:6f:58:e2:42:04:7a:bd:10:f7:a0:
d1:31:18:db:49:ba:45:96:ea:05:c4:0d:61:97:7c:7f:9f:ef:
c8:0f:2e:47:34:be:7e:f1:0d:b0:07:8f:ab:bd:b4:2d:47:e5:
a3:90:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:42:02 2025 by rpki-client