Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/K221sfSU8a2Lsy0QMVbBz-yAHyg.roa
File: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (raw, json)
Hash identifier: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=
Subject key identifier: 2B:6D:B5:B1:F4:94:F1:AD:8B:B3:2D:10:31:56:C1:CF:EC:80:1F:28
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0194221F965C0E013A696B17063BBC346100
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/K221sfSU8a2Lsy0QMVbBz-yAHyg.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50979
IP address blocks: 92.118.148.0/24 maxlen: 24
176.126.162.0/24 maxlen: 24
185.237.218.0/23 maxlen: 23
2a0a:8c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:5c:0e:01:3a:69:6b:17:06:3b:bc:34:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6db5b1f494f1ad8bb32d103156c1cfec801f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:cf:58:1c:79:cb:96:22:a0:83:a4:8e:03:
2f:ae:f7:c6:c3:94:57:cb:e9:1b:4d:d5:54:80:37:
c1:a2:f4:29:a6:dd:7c:8e:3c:48:19:89:fc:79:41:
8c:89:51:40:12:2e:49:54:2c:ba:fa:32:3d:ab:6e:
1f:40:7d:81:af:40:ba:2a:ef:f4:1c:bd:b3:ce:dd:
9c:25:2d:3d:ba:05:4c:cd:69:a7:4c:d5:9a:e6:3c:
9b:53:83:b2:e7:98:47:8f:2a:ad:1a:fb:3f:1f:bf:
e2:b7:c0:e4:be:44:9d:3a:08:3a:bb:fa:5b:7d:08:
3c:17:cf:92:78:90:2f:44:0f:17:5e:99:00:c1:7c:
1e:a3:c0:c6:de:60:81:81:0f:a4:30:c1:42:42:0f:
5e:4b:91:0d:fc:48:1d:64:63:40:51:e3:8e:21:61:
46:db:b0:08:f5:48:90:4e:2a:f3:26:d6:9c:8e:d1:
e8:65:ae:14:48:35:57:66:8a:d3:13:51:b5:71:db:
bb:21:ae:64:fd:4b:73:6d:1f:5c:a4:0b:2a:35:e2:
67:e3:9b:c7:34:e8:c0:31:f1:55:de:25:c3:f3:16:
b8:23:37:bf:30:e0:fc:a9:bb:f4:9d:b4:3a:f5:6c:
69:b9:e4:bf:9f:21:e0:72:84:00:2b:3c:b2:2f:6f:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:B5:B1:F4:94:F1:AD:8B:B3:2D:10:31:56:C1:CF:EC:80:1F:28
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/K221sfSU8a2Lsy0QMVbBz-yAHyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.148.0/24
176.126.162.0/24
185.237.218.0/23
IPv6:
2a0a:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
4e:8c:72:69:4e:c0:0f:25:58:a8:32:04:39:6f:d8:5a:d6:e3:
45:28:20:33:0e:fe:8d:8b:c6:63:79:79:73:bc:76:b8:e7:52:
64:e3:0b:a0:08:c5:48:dc:ed:29:51:56:bb:42:a1:0c:08:bf:
c2:a4:c1:56:16:ba:cc:32:dc:8a:72:e5:52:0d:61:d1:e1:a2:
94:c9:af:42:6f:1f:29:9b:52:26:64:73:87:11:08:90:23:56:
0f:58:d2:e9:1d:ea:6f:a7:58:d9:0c:60:4e:26:74:e9:e7:92:
5e:e9:0e:de:7f:5d:e1:7b:86:47:17:87:ba:7b:8f:f1:6d:40:
28:9e:e9:27:8b:0b:ac:de:61:42:1f:c9:55:f7:d7:0a:d6:54:
a4:d3:fb:25:a9:4a:60:31:85:e3:94:04:1f:80:e8:61:c2:79:
67:6c:8f:c4:7d:77:21:56:46:5d:24:cc:e7:b2:10:54:f7:13:
a4:75:74:76:a3:b8:51:c2:af:38:84:26:3c:6d:21:d3:ca:98:
5a:74:8c:90:5a:0e:dc:f8:9e:a6:6b:8c:7c:37:c1:39:47:43:
eb:92:53:4d:19:39:1b:4d:e4:62:bf:08:e4:7f:8f:02:3f:c6:
a4:4d:91:92:25:5f:73:36:42:bc:e6:a9:eb:3e:9f:92:18:de:
55:3e:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:11 2025 by rpki-client