Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/cycF2JveybPX6grJ41wnOXvTGTE.roa
File: cycF2JveybPX6grJ41wnOXvTGTE.roa (raw, json)
Hash identifier: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=
Subject key identifier: 73:27:05:D8:9B:DE:C9:B3:D7:EA:0A:C9:E3:5C:27:39:7B:D3:19:31
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 0194228E2C5BED1E60FDD5F47EDE707887CF
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/cycF2JveybPX6grJ41wnOXvTGTE.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208626
IP address blocks: 185.64.76.0/24 maxlen: 24
185.170.10.0/24 maxlen: 24
2a0c:dd80:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:5b:ed:1e:60:fd:d5:f4:7e:de:70:78:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=732705d89bdec9b3d7ea0ac9e35c27397bd31931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:35:1b:cf:59:90:a6:cc:e2:63:a5:56:3c:
77:23:d5:1d:8c:81:10:90:3a:a0:c6:6c:98:b3:92:
7b:bf:ad:21:24:c3:6f:b9:7d:ab:99:09:ab:b4:01:
18:69:ea:e2:cf:9b:11:fa:1c:4d:5a:90:1f:f2:2a:
08:db:7a:bf:90:4b:23:57:ae:85:09:01:47:c2:a2:
2b:8b:25:e3:a1:8d:4f:b2:51:ca:14:f4:2e:c6:b1:
93:d4:6f:ee:ac:0e:a1:ab:38:e2:68:86:9b:82:90:
0c:09:e3:e1:23:8a:dd:ee:62:7f:f4:0b:2c:0f:51:
b2:0e:fd:74:4f:d5:78:08:d1:8a:93:44:87:58:c4:
92:b2:e0:b1:5b:0f:18:9a:3f:5a:1b:45:3b:cc:ca:
93:08:a3:8b:c5:7f:46:ff:40:e5:61:db:b0:32:61:
08:24:1f:16:3c:e0:b2:71:f2:4b:a6:96:cf:d8:f5:
9b:33:d8:06:40:a6:84:e9:5e:22:21:22:8f:51:17:
fb:b1:7f:f1:eb:64:f5:95:4d:93:67:a3:68:55:86:
6d:c1:5f:d8:06:d6:ea:7f:76:42:e7:ae:da:a1:c6:
09:99:be:0f:7d:93:0e:fa:54:99:ca:4c:5d:84:f3:
3b:59:4f:98:4b:5e:49:ab:39:56:53:6f:56:d5:07:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:05:D8:9B:DE:C9:B3:D7:EA:0A:C9:E3:5C:27:39:7B:D3:19:31
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/cycF2JveybPX6grJ41wnOXvTGTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.76.0/24
185.170.10.0/24
IPv6:
2a0c:dd80:1000::/48
Signature Algorithm: sha256WithRSAEncryption
1c:15:31:c4:b8:4e:75:f3:d8:a3:5a:74:8b:c0:9a:57:1b:95:
ae:1a:74:ef:52:0f:ed:bc:12:58:2d:a2:fd:06:10:74:48:85:
93:27:81:0a:77:38:c1:ee:1a:57:53:97:a6:47:36:90:be:6c:
2c:c4:95:3b:43:8d:c5:86:39:64:29:24:6e:2e:4e:31:82:29:
e7:b7:c9:4d:44:97:bb:26:ca:d0:8c:e0:a9:28:09:38:64:86:
40:ef:c5:04:4f:b9:5b:62:3e:51:97:82:e8:76:48:18:63:e5:
cd:2d:ce:20:ec:8b:d8:74:a3:f6:4c:54:a6:f0:16:c2:be:df:
f1:89:02:25:8b:00:59:cb:80:ff:25:84:05:2c:38:1c:ed:00:
09:26:46:4b:62:d6:7e:01:fc:85:7f:5c:41:1d:26:d9:49:01:
69:6b:ac:89:36:e8:61:c9:63:41:3b:a7:03:f1:81:98:e1:29:
91:ab:23:e0:19:da:b7:ed:15:d3:c8:09:5f:0c:9d:47:c9:95:
64:7f:56:07:72:4a:78:7f:2c:c4:08:57:d9:31:1d:06:77:bb:
a2:2f:07:48:98:b3:77:33:08:47:5b:4d:e7:29:fa:9e:9f:94:
45:14:48:35:c5:29:ff:f0:48:9e:7a:ff:e6:11:7d:d6:89:39:
a6:12:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:43 2025 by rpki-client