Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa
File: NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa (raw, json)
Hash identifier: 6BsyUuSqs5SSPqJlfjsNi68lsr8Mj9jzzqX6MyZpWe0=
Subject key identifier: 37:22:2D:8B:35:DA:34:36:1C:22:84:6F:A4:D7:3F:E4:C9:20:D9:08
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 01971E5CE8B18E8E7B687DA553AF9BC45136
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa
Signing time: Thu 29 May 2025 23:24:54 +0000
ROA not before: Thu 29 May 2025 23:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395363
IP address blocks: 185.173.184.0/23 maxlen: 23
185.173.184.0/24 maxlen: 24
185.173.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:5c:e8:b1:8e:8e:7b:68:7d:a5:53:af:9b:c4:51:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: May 29 23:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37222d8b35da34361c22846fa4d73fe4c920d908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:bc:28:1b:cf:43:4e:73:c6:de:dd:30:0a:
9b:2d:f2:69:84:a5:a5:ba:fa:81:6f:0e:a4:84:57:
ed:ba:f0:96:b0:da:f5:c4:60:90:8f:fb:df:5a:7b:
0f:3b:5b:23:05:81:93:d9:3d:6b:43:3f:26:ac:e2:
2e:c3:3a:c1:83:08:d0:c0:ed:fa:a1:08:cb:f7:29:
a4:15:7a:b4:9d:fb:c9:53:cb:06:94:c3:89:9e:2b:
96:66:fd:71:da:f4:4f:40:88:f1:8d:05:e3:17:19:
e4:a5:43:6a:c0:be:a3:0e:6d:da:08:06:3a:91:6f:
d1:f6:94:42:83:f9:dd:7a:8e:42:22:24:bf:11:0f:
98:09:4d:71:59:20:a7:02:0c:26:47:c5:04:42:20:
2c:11:b1:35:9a:99:7a:e2:c6:44:02:fe:e8:0d:6f:
d4:b7:e7:4a:68:06:67:38:ca:f4:eb:17:0e:58:d7:
0d:70:59:1f:e6:eb:ac:cb:13:db:94:81:77:fe:4a:
2f:e6:ac:33:2a:c9:8e:ab:cd:e9:7c:5d:b0:77:03:
24:95:19:fd:a0:fa:2f:9d:b2:ea:50:8d:a3:99:0a:
fd:43:72:23:db:4e:c3:0e:2e:8a:91:56:5a:df:0c:
11:87:f5:4e:33:b5:03:29:c1:e7:9d:3d:9b:08:77:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:2D:8B:35:DA:34:36:1C:22:84:6F:A4:D7:3F:E4:C9:20:D9:08
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/NyItizXaNDYcIoRvpNc_5Mkg2Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.184.0/23
Signature Algorithm: sha256WithRSAEncryption
18:70:35:7f:d4:6a:4b:63:62:b0:e9:62:4c:9f:04:02:2b:16:
4b:e9:1a:43:c4:8d:9a:14:ad:e2:a8:cd:79:b6:07:04:0f:fc:
e1:9f:b3:a9:76:b9:b6:67:97:93:51:e2:51:08:ec:e7:53:74:
69:af:df:98:c3:b5:2a:95:91:1b:72:5c:21:51:33:0d:b9:c7:
e2:31:16:90:60:52:73:bf:fe:4e:8a:32:6b:15:05:5e:4d:88:
7e:1d:6e:bb:64:53:11:4e:ee:a2:0c:f5:30:f9:dc:37:55:e4:
11:bf:62:86:2c:60:5b:ed:dd:9e:da:c9:8f:8c:58:f0:15:cd:
61:2c:e0:d3:42:52:7a:df:d4:34:89:f8:80:29:b7:64:7b:7d:
b3:a7:01:61:bb:e0:6b:a0:0f:9b:30:b8:fc:86:64:f9:a3:11:
83:83:1b:ce:86:4c:87:9f:2e:69:27:6e:47:b5:5e:0d:f1:09:
1e:91:ec:6d:02:d7:d6:97:d1:b6:60:2b:e7:76:a1:9b:74:b6:
37:20:52:f5:4c:9c:11:f2:52:db:1e:4a:79:85:7a:d1:68:71:
5a:50:89:cf:25:38:f5:fe:30:3f:79:34:35:11:ed:50:11:a5:
84:b4:1b:94:fd:f5:ce:85:b4:18:f9:0e:d9:96:6b:2d:3b:7e:
84:2c:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:05 2025 by rpki-client