Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/knF6nEQYYWVpL3rBGNBc8_KXbEw.roa
File: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (raw, json)
Hash identifier: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=
Subject key identifier: 92:71:7A:9C:44:18:61:65:69:2F:7A:C1:18:D0:5C:F3:F2:97:6C:4C
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 019427B415D15FC353C5281B9A9B19131761
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/knF6nEQYYWVpL3rBGNBc8_KXbEw.roa
Signing time: Thu 02 Jan 2025 15:48:20 +0000
ROA not before: Thu 02 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60447
IP address blocks: 185.81.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:15:d1:5f:c3:53:c5:28:1b:9a:9b:19:13:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92717a9c44186165692f7ac118d05cf3f2976c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:76:73:a5:f5:c4:88:2a:e2:ac:8d:ca:b6:
c0:10:c6:5d:a1:26:e8:a7:23:1e:1e:b7:69:0e:9a:
f2:21:b5:93:7c:56:b1:32:35:11:61:c7:f3:78:4e:
8d:c7:bc:36:81:85:3c:09:c6:6f:dc:53:92:b6:a7:
da:fe:70:0b:6c:a4:49:f2:c4:e2:7e:69:e7:e1:05:
30:09:1c:58:00:e3:6a:3b:fc:82:2e:33:ee:97:32:
ef:5d:c4:32:1e:dc:9c:be:c9:82:24:2d:72:d2:57:
86:de:4e:9f:a0:12:c5:c7:73:d9:97:17:b8:28:18:
1e:4a:38:ce:4f:3e:43:16:d1:e9:51:1a:ca:b6:92:
1d:b8:e0:48:19:b3:1c:eb:78:36:d2:6c:0b:1c:e0:
58:1d:7b:37:c2:a1:8d:7b:ec:05:bd:dd:40:14:c4:
d3:0f:df:df:a1:30:d0:d8:96:fc:8c:81:6a:66:b8:
ca:62:70:f3:ef:c5:56:32:54:51:83:fc:9e:58:0b:
74:6a:31:a6:e2:9d:d4:87:de:1c:5b:e0:8b:a5:fb:
1f:50:af:a5:b1:02:52:b4:60:2a:d1:55:b9:5b:c5:
69:dc:0a:b5:33:4e:28:3e:31:77:ff:d0:a8:22:a4:
25:21:25:de:d7:39:f7:62:55:a9:98:a9:fd:52:85:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:71:7A:9C:44:18:61:65:69:2F:7A:C1:18:D0:5C:F3:F2:97:6C:4C
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/knF6nEQYYWVpL3rBGNBc8_KXbEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.123.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0a:a9:3d:19:d6:f1:c2:19:92:7a:ae:c7:07:7a:85:57:18:
cc:25:cd:bb:09:39:72:b9:7c:84:3a:78:2f:17:b8:c2:f0:f4:
11:a7:e6:9a:82:5a:c4:f3:97:25:a5:69:9b:79:46:5e:72:22:
9d:95:1a:a8:41:46:49:34:20:5c:3c:2c:20:51:40:91:6c:07:
e9:06:20:03:f1:c4:78:7c:52:e5:2d:f6:b9:57:5c:25:26:a5:
62:1f:f7:c9:c1:a8:71:7f:99:d8:45:58:e3:11:37:fa:b6:d3:
51:29:f6:e3:b1:c4:07:1c:74:ec:dc:89:a3:48:99:9b:05:49:
eb:39:ac:b5:cd:6e:74:41:f1:9c:77:d3:3e:c6:b2:fb:d1:55:
ab:0b:31:b8:40:72:77:b3:cf:61:fe:54:92:59:22:66:a9:3b:
29:53:7a:d5:b3:bb:3c:7f:f6:e5:16:0a:1d:ad:9d:1c:64:02:
13:20:d7:f5:65:3d:4c:4f:3e:7b:ce:20:ee:a1:48:4a:18:47:
e2:b5:f8:81:b0:11:95:4e:5f:16:05:d8:7e:5a:cb:22:50:48:
67:9f:6a:8c:47:7e:ee:41:79:2a:cd:40:55:59:8c:ca:19:48:
57:c5:dc:f7:77:72:17:e4:94:72:5c:fb:de:fa:7b:b4:6e:c8:
be:1d:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:45 2025 by rpki-client