Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa
File: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (raw, json)
Hash identifier: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=
Subject key identifier: 6B:18:E7:7D:92:E0:FD:37:35:77:A6:6C:3B:02:2D:9A:9A:54:79:0E
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019427B61D05D25D9C610617EBC5C7F0A002
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62093
IP address blocks: 185.110.20.0/22 maxlen: 22
2a02:c540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1d:05:d2:5d:9c:61:06:17:eb:c5:c7:f0:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b18e77d92e0fd373577a66c3b022d9a9a54790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:a7:60:1e:2b:64:47:66:15:fd:c0:48:34:
1c:66:34:2f:04:97:0d:ae:56:21:78:61:57:66:01:
5f:33:82:60:e9:5b:4e:4a:ef:2e:3d:d6:30:bd:e4:
4f:cd:e9:cc:ba:14:f1:29:70:8f:e6:5f:42:8c:ce:
d8:da:61:7b:0d:89:a3:4a:00:43:2a:7d:58:93:e3:
61:ad:a8:76:f9:06:da:a6:c4:eb:45:75:33:6e:cc:
26:2f:e4:30:22:40:49:7e:79:c5:ff:a2:ef:22:a6:
d2:77:fe:c5:44:48:94:04:d6:9d:e9:99:b7:ef:76:
aa:2b:db:70:d4:d0:fc:b4:52:b8:f8:77:c6:b4:f1:
00:11:1b:6c:41:0c:73:2a:41:fc:83:1f:0d:ec:24:
2a:e8:17:fb:f4:db:24:47:d4:0a:8e:74:b5:ae:80:
01:66:f1:ee:2f:3d:3d:a9:e9:56:8e:41:35:ab:c4:
b8:1f:25:1e:80:db:33:8c:ea:2e:ff:e1:15:76:65:
37:c3:62:79:07:10:11:37:86:19:c9:d6:60:a2:01:
44:c5:d9:d8:d8:1b:93:81:b3:14:c8:0a:d2:e3:3a:
80:2f:af:4a:32:1f:31:2b:9c:82:83:d5:42:48:ac:
c5:e6:4c:bd:d1:ab:2b:d0:46:89:88:08:7e:5d:ca:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:18:E7:7D:92:E0:FD:37:35:77:A6:6C:3B:02:2D:9A:9A:54:79:0E
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.20.0/22
IPv6:
2a02:c540::/29
Signature Algorithm: sha256WithRSAEncryption
4a:f7:10:84:7e:7f:fe:bf:24:10:34:76:ba:ab:50:8e:ab:5c:
3f:16:ed:a3:88:e2:c6:9d:2f:58:c2:51:89:31:d5:a4:04:cb:
42:36:19:82:4c:e1:2a:6b:7b:46:4e:c3:62:09:5e:a2:cd:41:
bf:fb:17:6c:78:01:01:5d:2f:14:99:b7:c4:f9:a5:19:8a:be:
94:fd:b4:66:bf:18:de:9e:88:92:b6:13:4e:cd:57:78:56:29:
d7:d5:dd:be:06:58:42:4c:8d:9f:70:ba:38:24:22:8b:33:ea:
6f:5a:45:04:79:3b:2c:bf:07:40:e5:8c:af:ee:6c:cd:8f:da:
a8:f6:3f:69:a6:9e:60:5e:41:ed:76:0c:ba:fb:5a:c9:28:f4:
96:37:69:3b:04:b2:57:a7:00:07:f9:61:49:c4:93:32:40:e8:
83:cd:62:42:86:23:03:ef:40:be:ca:4a:1c:55:3c:72:7d:fb:
dd:a9:1f:6a:26:2b:99:26:65:54:48:da:bb:c5:46:ec:37:45:
7c:3d:82:40:77:19:94:03:79:ed:bc:63:9f:c3:3d:c2:5d:5c:
01:4e:61:a3:00:1e:2b:51:d1:94:c6:77:82:e7:d9:ff:94:2d:
0e:db:cf:8e:c3:5e:0a:94:57:64:be:3d:4b:89:cc:91:77:bb:
08:05:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:28 2025 by rpki-client