Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa
File: 6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa (raw, json)
Hash identifier: Zx9aCYyscJGyVME/qhIE4KO8zEZC10I5Gx1MaCntTPk=
Subject key identifier: E9:BE:E4:04:69:98:64:B8:5C:F4:B2:B3:37:4C:CA:E9:07:D5:44:92
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 019425FC03E552AB63F9BB0CE0F48985E9E7
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa
Signing time: Thu 02 Jan 2025 07:47:40 +0000
ROA not before: Thu 02 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210001
IP address blocks: 185.124.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:03:e5:52:ab:63:f9:bb:0c:e0:f4:89:85:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 2 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bee404699864b85cf4b2b3374ccae907d54492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:f4:41:77:1c:4d:72:11:37:04:eb:f6:3a:
55:25:57:94:92:c1:ff:37:49:05:6d:fe:d9:a0:2a:
37:84:65:cd:67:36:5a:99:19:7e:94:86:7d:53:5d:
ba:3a:4b:95:20:e8:bc:ea:94:eb:07:87:98:b8:6d:
63:8a:b2:c9:d7:99:e5:b0:82:71:7e:92:38:ac:e0:
78:34:34:cb:42:b7:c2:84:bc:9d:b0:ea:b2:bd:37:
bd:c8:e1:94:ac:fe:8f:b1:87:7d:05:f7:59:62:e5:
7c:7e:9a:b9:2d:48:db:d9:17:1c:a9:a0:20:50:7c:
c6:34:05:50:1c:e3:28:ff:de:d5:71:ff:2e:23:92:
a7:46:d9:40:0b:d6:97:8e:b7:2f:dd:7d:d5:3f:8e:
49:ba:7d:37:f9:32:c4:12:32:01:9d:96:fd:58:69:
9f:96:7f:bd:6e:00:6c:60:ef:23:c3:a7:50:e4:86:
94:6f:cb:17:5b:84:f5:5a:05:ed:cb:a7:97:95:d9:
22:51:0b:d0:2b:50:0f:ad:cd:da:fe:3e:bc:38:68:
36:f2:c8:78:db:31:4e:6b:c3:fe:57:6b:1c:f2:01:
b5:57:6e:5e:f3:4c:d7:1f:4d:af:85:44:01:a8:ec:
eb:99:d5:63:d2:42:45:5c:d9:91:85:99:75:f8:92:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:E4:04:69:98:64:B8:5C:F4:B2:B3:37:4C:CA:E9:07:D5:44:92
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ae:16:53:68:c5:e6:4d:0d:b7:5d:0c:39:e1:df:50:d3:d7:
72:35:ef:6d:c3:b5:ab:95:e3:e6:78:20:f3:ea:60:33:92:84:
a3:c8:33:57:d5:7c:b6:43:4d:f3:bc:0d:a2:64:a7:d9:34:38:
9b:95:65:81:54:3b:81:81:38:70:1b:c7:2b:12:71:fb:24:15:
dd:44:de:a7:8d:64:95:c0:82:4e:1e:63:63:32:99:6c:ce:96:
f9:b8:2a:f7:37:bb:49:6f:05:2c:91:86:c7:e7:99:a0:3e:bb:
f3:0d:03:aa:e5:b5:b5:08:36:01:57:4f:04:c7:54:f7:38:0d:
63:d4:7d:9b:2f:a9:63:10:71:87:9b:1d:c1:4b:33:26:67:a5:
54:ea:a1:62:38:4f:30:a9:53:0d:8b:6e:77:61:83:ec:b2:94:
aa:9b:45:cf:bb:52:4a:43:80:f5:4b:82:61:48:a1:62:d6:bf:
02:e7:08:1b:cb:92:ca:d8:64:91:a1:fd:dd:62:5f:57:b6:d5:
45:ea:7f:00:11:94:3f:9a:f0:47:4b:26:c6:dc:8d:f8:98:cb:
b6:25:85:78:7e:46:c8:3d:54:f6:d3:c2:51:82:61:95:8a:c6:
ae:f4:4a:f9:c8:ba:e2:1b:ce:87:d0:77:a9:04:88:5f:ee:3e:
ac:4b:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:13:14 2025 by rpki-client