Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/B6_6e2WVsyfaOmjKudfNr0g4dMs.roa
File: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (raw, json)
Hash identifier: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=
Subject key identifier: 07:AF:FA:7B:65:95:B3:27:DA:3A:68:CA:B9:D7:CD:AF:48:38:74:CB
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0194266BD6DAD1BBB10AB54A7408AAE67F01
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/B6_6e2WVsyfaOmjKudfNr0g4dMs.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 185.145.102.0/24 maxlen: 24
185.145.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d6:da:d1:bb:b1:0a:b5:4a:74:08:aa:e6:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07affa7b6595b327da3a68cab9d7cdaf483874cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:c8:ec:e8:94:84:64:f3:d9:c9:e3:5d:44:
64:35:8f:07:81:54:1a:40:fa:af:45:c8:67:d1:05:
72:79:b1:cf:35:e8:e1:8b:98:74:98:c9:17:30:38:
0d:e0:d7:0c:f8:1f:0c:67:8c:d9:fb:45:b0:d5:6a:
7f:80:3f:a2:c9:db:8f:4b:82:80:7d:d9:5f:31:37:
3a:54:a7:cc:38:20:be:c3:a0:53:6a:bd:a4:3e:59:
6f:04:61:3d:ed:80:a6:51:be:03:93:ee:54:63:f6:
1e:69:0e:7e:98:7b:be:af:1e:88:9d:36:8b:91:a5:
90:3a:1e:21:74:9f:fd:83:35:bf:1f:c2:4b:b6:74:
3d:16:cc:b0:59:00:a9:47:d3:38:3a:00:8a:24:68:
63:91:fe:ec:d7:24:e6:80:87:6c:91:83:af:d1:4a:
71:d5:b9:e8:4b:e7:c7:d4:37:22:38:a6:1e:17:1c:
92:74:41:e2:6d:6e:ea:45:1d:cb:7e:14:e2:b8:88:
63:81:50:da:24:e9:36:b5:c4:f5:ab:17:8d:56:fe:
59:ab:3a:b9:73:7d:59:63:a5:74:b9:0c:c9:49:1a:
b7:8a:de:71:1b:96:35:d3:d0:6d:cd:45:ed:65:69:
a8:d9:f5:6a:b0:16:0e:84:32:c3:3f:87:6b:3f:d5:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:FA:7B:65:95:B3:27:DA:3A:68:CA:B9:D7:CD:AF:48:38:74:CB
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/B6_6e2WVsyfaOmjKudfNr0g4dMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.102.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fc:a6:9d:6e:29:e2:fb:5f:4c:86:7a:00:78:6e:3e:90:e8:
ef:3e:c3:1d:2e:60:55:8b:83:27:a6:78:07:bf:1d:8d:48:40:
94:c7:3a:9e:7b:c2:a2:29:c6:83:48:3a:f5:75:c6:27:2e:b8:
cf:c8:68:20:1d:8b:27:0f:77:63:61:25:c1:ae:e3:fc:35:95:
31:e7:3a:7f:41:69:35:b5:2f:16:86:9b:84:64:54:7a:22:c0:
d9:76:50:f2:65:91:d8:83:25:17:cd:6d:37:a0:86:8e:af:ae:
8b:aa:5b:a8:e2:11:ae:e9:a9:36:08:f4:83:ad:a9:ce:0e:a2:
9f:70:20:70:e0:cd:9c:6a:70:f0:d0:80:3d:eb:cf:b4:e1:85:
e1:53:8e:e8:04:79:4e:a1:7f:52:2a:e6:6b:94:ea:cf:5d:87:
02:83:f9:c4:00:8a:90:2d:d7:cd:ff:7b:90:31:a5:2c:3b:e8:
f2:11:89:a6:9b:f3:01:b8:e1:33:64:48:ab:3d:91:53:d4:e8:
c6:7f:d9:44:da:e7:0b:01:65:57:b9:ff:ef:84:06:1f:3b:37:
7f:02:61:b1:ae:87:87:b8:b6:a3:dd:56:26:90:5c:a7:3d:72:
0d:ae:e0:f7:0a:07:b4:ac:38:d9:76:3e:cb:e7:3f:75:54:cb:
90:3f:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:37:07 2025 by rpki-client