Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa
File: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (raw, json)
Hash identifier: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=
Subject key identifier: 0A:7E:9A:4C:9E:84:D7:FF:A0:0A:94:71:9D:E9:6A:B5:A0:74:94:A5
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0195914E69612FF26A35B9ECC9380B109E55
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa
Signing time: Thu 13 Mar 2025 20:59:49 +0000
ROA not before: Thu 13 Mar 2025 20:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207065
IP address blocks: 185.242.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:4e:69:61:2f:f2:6a:35:b9:ec:c9:38:0b:10:9e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Mar 13 20:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a7e9a4c9e84d7ffa00a94719de96ab5a07494a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:de:72:dc:f2:86:1c:5b:cf:d0:6c:cd:ff:
90:3b:f1:2a:ec:f6:82:35:43:6f:58:b6:19:b3:ce:
1e:62:38:96:df:8b:dc:f7:6e:5e:f7:3e:71:12:1f:
0b:64:09:3a:76:ec:00:2c:7a:d7:08:78:c9:a1:85:
d6:34:84:c4:ff:fe:47:95:70:fb:28:07:6d:e4:00:
08:2c:7f:cc:c1:f9:81:f6:a9:0c:6f:b6:ce:c7:9b:
7e:43:ca:c6:1c:e4:1e:56:4b:f1:5d:d6:0c:6f:d8:
78:24:87:2a:f6:08:0d:d4:f4:27:09:ac:56:bd:42:
be:fe:87:62:8e:48:1f:b2:4e:67:d6:c9:a5:0d:24:
53:d8:eb:41:66:5d:91:0b:6b:16:25:a8:f5:ab:18:
cd:bb:ca:aa:10:dc:ff:0f:48:ed:bf:38:ef:b2:80:
dd:eb:aa:40:43:8d:da:fa:81:69:ee:0d:33:84:70:
e1:c3:8d:9b:4a:35:4b:3c:0e:60:3b:9f:92:5c:08:
77:0a:ef:a3:90:6e:7b:55:17:e6:15:84:8c:e4:5f:
17:78:ff:7b:f7:83:20:d5:6a:fc:f5:14:4d:9a:b6:
56:04:1f:9a:7d:8e:20:85:fa:72:18:ae:61:3a:65:
fe:f3:f5:f1:9e:b9:44:a1:aa:2c:5b:1f:0e:2a:32:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:9A:4C:9E:84:D7:FF:A0:0A:94:71:9D:E9:6A:B5:A0:74:94:A5
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.148.0/24
Signature Algorithm: sha256WithRSAEncryption
35:42:1a:44:4f:94:d3:99:04:c6:53:b0:15:f3:22:2d:41:a8:
a0:1e:f9:c0:8e:d8:13:c3:89:4f:29:cf:1d:8c:7b:d9:00:82:
00:61:dd:0a:4f:2b:23:b2:1e:f7:f0:74:d2:7b:f3:95:e1:be:
6d:a1:7b:ab:66:37:93:8f:92:b0:a1:1f:c3:ec:db:65:c9:98:
dd:d3:42:a9:9a:73:56:f7:42:47:f9:1a:ef:fa:e3:3d:b0:60:
55:b0:64:53:74:fb:fe:13:ea:18:43:c3:cd:bf:19:83:7d:ce:
f8:b9:ba:f6:b9:03:4b:87:c8:c8:72:9a:88:06:a6:e7:41:f8:
e7:1a:66:b6:0c:98:3d:5c:e8:71:63:bb:af:17:6a:af:94:30:
91:76:f9:bc:14:a8:0c:21:56:a2:06:86:c6:f2:d0:ab:be:6a:
28:1d:e8:9c:b6:12:48:ed:da:58:e8:c9:3c:28:15:d3:41:0e:
1e:b9:fe:a6:14:34:e7:38:e0:45:30:df:a5:c2:18:62:03:1c:
54:54:c5:58:ef:06:27:b0:a4:a0:6a:52:86:a1:82:8a:54:d8:
2f:34:7f:24:96:2c:e5:0f:c0:0d:70:de:f7:49:3d:23:04:3f:
fa:8d:e3:d0:68:0c:2f:a3:a7:38:0d:a9:dc:fa:6d:a8:5e:a9:
ba:6d:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:23:44 2025 by rpki-client