Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/d6C8v6GoigEzg6pbLvTWJvddupU.roa
File: d6C8v6GoigEzg6pbLvTWJvddupU.roa (raw, json)
Hash identifier: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=
Subject key identifier: 77:A0:BC:BF:A1:A8:8A:01:33:83:AA:5B:2E:F4:D6:26:F7:5D:BA:95
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 0194221F9D51F6999AEF9D92AC682F037323
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/d6C8v6GoigEzg6pbLvTWJvddupU.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.111.52.0/24 maxlen: 24
185.111.53.0/24 maxlen: 24
185.111.54.0/24 maxlen: 24
185.111.55.0/24 maxlen: 24
185.111.56.0/24 maxlen: 24
185.111.57.0/24 maxlen: 24
185.111.58.0/24 maxlen: 24
185.111.59.0/24 maxlen: 24
185.112.16.0/24 maxlen: 24
185.112.17.0/24 maxlen: 24
185.112.18.0/24 maxlen: 24
185.112.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9d:51:f6:99:9a:ef:9d:92:ac:68:2f:03:73:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a0bcbfa1a88a013383aa5b2ef4d626f75dba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:55:b5:72:e4:32:b5:ff:2b:b4:14:5c:a0:
d5:9b:1a:e6:83:64:0d:62:59:13:23:9e:55:6b:35:
45:d1:34:a0:f6:a8:fb:a3:92:cd:dd:38:01:5c:14:
a5:b3:0d:60:84:39:19:5b:d5:86:d2:84:23:0c:eb:
ee:97:b5:ec:86:3d:55:5b:e0:00:4e:1f:89:ed:15:
e7:80:15:a7:32:91:fd:d6:50:92:f1:37:14:b1:9b:
ef:b0:bd:fa:9e:03:41:a8:c5:f1:2d:60:62:0f:9c:
83:cd:e7:df:f7:40:fa:1f:09:82:38:3f:24:32:81:
17:8b:c2:82:ff:0b:8a:ea:31:de:3b:91:31:c8:a6:
cb:b3:9b:c5:31:46:b9:8a:4d:02:dc:56:be:9e:b8:
9b:03:3f:c1:75:90:d4:15:c6:2a:95:0e:14:b0:ce:
38:03:2e:1a:50:51:be:35:be:f5:f0:21:6f:6c:e2:
d7:8a:81:64:dc:78:cb:df:db:01:b4:39:25:d9:6f:
64:61:29:55:cb:9f:43:6b:01:47:69:e2:4b:3c:92:
a7:92:98:b8:95:96:08:92:a6:01:60:24:bb:c6:dc:
de:8f:bc:fb:5e:11:13:52:af:a9:fa:9c:b8:65:f8:
da:17:2c:e6:dd:cc:eb:f2:b2:f7:c2:96:7f:67:98:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:BC:BF:A1:A8:8A:01:33:83:AA:5B:2E:F4:D6:26:F7:5D:BA:95
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/d6C8v6GoigEzg6pbLvTWJvddupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.52.0-185.111.59.255
185.112.16.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a2:80:0f:f5:83:0d:a2:b4:4f:c2:d3:c9:b3:a8:d7:9a:d7:
5d:e3:58:05:83:95:ad:27:5b:cf:87:26:89:54:fc:63:21:62:
4b:37:b6:97:3f:e0:6f:81:d3:3a:19:54:24:a6:0d:b2:fa:41:
57:50:ed:a5:25:ff:a6:86:dc:06:29:4b:e2:d1:ce:73:43:6f:
92:39:59:2e:71:cf:04:c9:ac:f4:1f:0d:b1:b3:68:1f:3f:b8:
57:ee:a8:a4:4b:35:f7:ad:f5:74:3f:48:c6:30:c7:26:40:18:
32:a9:32:d3:23:57:6b:c9:c1:be:43:24:67:8b:bb:f3:34:19:
bc:34:2f:8b:97:bc:08:2e:05:c4:a7:33:a6:47:5b:02:1d:b5:
03:9d:5c:91:30:a6:60:c0:9f:45:74:2d:a4:30:43:18:9d:13:
a5:fd:5b:e2:b7:bf:82:1e:22:20:ab:03:fd:cd:6c:a7:dd:e8:
02:75:b8:5f:97:6c:ac:18:9e:4f:c7:cd:96:57:e8:56:4c:8b:
6f:56:a7:bb:65:36:92:f3:13:2f:c1:23:f8:e6:77:b9:01:81:
c0:46:8c:b5:83:73:6f:22:e8:62:bd:b5:b8:1a:22:55:ea:b7:
5d:9d:1e:26:dc:74:cb:2e:05:75:4c:4f:0b:35:33:30:71:2e:
75:66:fe:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:43 2025 by rpki-client