Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/6-bbeNLNkmIuyu3Lo5b34863iOM.roa
File: 6-bbeNLNkmIuyu3Lo5b34863iOM.roa (raw, json)
Hash identifier: lZJjYseqmXABz+2OUcMEvZWapoY92B+aQI4gDW+iLHY=
Subject key identifier: EB:E6:DB:78:D2:CD:92:62:2E:CA:ED:CB:A3:96:F7:E3:CE:B7:88:E3
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019422FB7A7473F1C1DD046C61BC1B5E07B0
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/6-bbeNLNkmIuyu3Lo5b34863iOM.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 185.233.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7a:74:73:f1:c1:dd:04:6c:61:bc:1b:5e:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebe6db78d2cd92622ecaedcba396f7e3ceb788e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:2b:04:f3:a6:33:a3:6d:d0:dd:58:68:f9:
98:d6:d1:c9:79:00:f8:54:65:51:22:43:a6:69:9d:
04:73:6d:f9:22:f8:f1:26:94:d0:86:bd:9b:70:48:
e2:39:76:53:d5:49:0c:f3:a0:52:90:12:b7:0c:cf:
d8:f4:5a:ca:a6:81:a0:48:80:89:6e:5c:eb:bc:5f:
0c:8a:10:54:66:a9:66:27:41:cb:a4:85:6f:4e:dc:
08:ec:ad:97:ab:f9:be:68:2d:ef:2a:6e:ba:72:f2:
9e:fd:75:03:c0:d6:4d:d5:c7:bf:2c:a8:b0:8d:e8:
23:69:5b:80:58:29:d6:26:41:b8:fa:39:4b:cc:a3:
8b:c5:30:c5:32:be:d1:c2:c9:2e:72:b6:24:c4:31:
6e:4b:25:97:53:02:4e:f3:a3:2b:27:54:23:c2:96:
26:1e:ff:2a:0f:ee:f2:58:78:c6:3a:11:5d:e8:74:
8b:57:c0:9b:f1:71:68:53:f3:b7:b2:c0:3f:af:67:
46:c0:46:48:06:6b:63:cb:68:bb:7d:49:34:d7:33:
81:24:a7:a2:8c:2e:e2:c6:70:10:a7:8f:37:0b:a1:
75:fa:59:5a:7a:30:40:14:40:82:f2:67:76:9e:56:
52:26:28:9b:10:15:94:63:5a:f9:38:19:aa:28:41:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E6:DB:78:D2:CD:92:62:2E:CA:ED:CB:A3:96:F7:E3:CE:B7:88:E3
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/6-bbeNLNkmIuyu3Lo5b34863iOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:21:4a:e1:71:b0:42:f2:e7:d2:07:2b:0d:11:24:75:db:03:
90:00:8b:92:70:72:18:94:68:7a:35:e6:60:3a:e7:48:46:76:
30:0b:3e:64:39:1b:b0:94:17:b1:f6:36:f4:53:72:20:7d:5d:
76:78:66:98:a1:a7:7b:52:e4:b4:81:69:14:f7:51:76:7c:2a:
8d:1d:3d:5f:a5:43:e7:6b:dc:ef:e1:3a:ea:dc:23:f0:04:92:
71:41:72:20:ba:46:73:a6:19:4a:6b:e2:e2:dc:8e:43:84:8a:
c6:5f:da:3c:d2:a2:e9:7e:c2:c3:e8:00:fa:18:30:fb:46:88:
f9:03:39:ac:6b:ec:59:85:f2:75:5b:15:6c:62:c6:a2:7c:5e:
25:4c:95:f4:01:c0:cc:b6:19:b5:37:d0:22:25:53:13:4c:b2:
6a:58:26:fa:ac:2d:c8:f3:12:3d:60:18:6f:9b:a6:97:76:a3:
d2:63:81:70:b5:75:05:01:7e:d3:9a:8f:56:a8:18:0f:b6:1b:
b7:0c:74:0b:19:13:44:75:d6:cb:49:70:5d:d4:ba:dd:fb:1d:
cc:2c:1c:9b:ee:ed:e3:1c:d8:db:df:f1:3f:f8:4f:22:87:13:
1b:71:47:88:2b:8d:fa:02:72:ab:bc:bc:75:a4:b6:d3:97:5a:
82:6d:4f:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3p0c/HB3QRsYbwbXgewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjUwMTAxMTc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU2ZGI3OGQyY2Q5MjYyMmVjYWVkY2JhMzk2ZjdlM2NlYjc4OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrMrBPOmM6Nt0N1YaPmY1tHJeQD4
VGVRIkOmaZ0Ec235IvjxJpTQhr2bcEjiOXZT1UkM86BSkBK3DM/Y9FrKpoGgSICJ
blzrvF8MihBUZqlmJ0HLpIVvTtwI7K2Xq/m+aC3vKm66cvKe/XUDwNZN1ce/LKiw
jegjaVuAWCnWJkG4+jlLzKOLxTDFMr7RwskucrYkxDFuSyWXUwJO86MrJ1QjwpYm
Hv8qD+7yWHjGOhFd6HSLV8Cb8XFoU/O3ssA/r2dGwEZIBmtjy2i7fUk01zOBJKei
jC7ixnAQp483C6F1+llaejBAFECC8md2nlZSJiibEBWUY1r5OBmqKEG+rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvm23jSzZJiLsrty6OW9+POt4jjMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvNi1iYmVOTE5rbUl1eXUzTG81YjM0ODYzaU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemnMA0G
CSqGSIb3DQEBCwUAA4IBAQA9IUrhcbBC8ufSBysNESR12wOQAIuScHIYlGh6NeZg
OudIRnYwCz5kORuwlBex9jb0U3IgfV12eGaYoad7UuS0gWkU91F2fCqNHT1fpUPn
a9zv4Trq3CPwBJJxQXIgukZzphlKa+Li3I5DhIrGX9o80qLpfsLD6AD6GDD7Roj5
Azmsa+xZhfJ1WxVsYsaifF4lTJX0AcDMthm1N9AiJVMTTLJqWCb6rC3I8xI9YBhv
m6aXdqPSY4FwtXUFAX7Tmo9WqBgPthu3DHQLGRNEddbLSXBd1Lrd+x3MLByb7u3j
HNjb3/E/+E8ihxMbcUeIK436AnKrvLx1pLbTl1qCbU8j
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:57 2025 by rpki-client