Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa
File: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (raw, json)
Hash identifier: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=
Subject key identifier: 73:7A:1B:DB:31:FC:09:63:75:67:8F:0C:60:C0:82:73:3E:03:BE:34
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 019427B50C0E3013BDF4F2C9FA935BBA8CE6
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa
Signing time: Thu 02 Jan 2025 15:49:24 +0000
ROA not before: Thu 02 Jan 2025 15:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212973
IP address blocks: 185.1.175.0/24 maxlen: 24
2001:7f8:f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0c:0e:30:13:bd:f4:f2:c9:fa:93:5b:ba:8c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737a1bdb31fc096375678f0c60c082733e03be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:8d:5f:c2:02:d6:9e:21:e0:e9:9f:7b:83:
c5:c5:27:11:5c:b0:3d:79:d5:51:53:19:bd:32:51:
2f:e2:e0:47:fd:9a:65:c4:1f:ba:21:de:d3:54:4d:
dc:00:84:64:2f:11:44:99:65:11:c8:13:b3:f6:13:
56:64:aa:97:38:cf:a0:c0:78:a1:f2:90:3b:b1:65:
18:46:32:44:c9:6a:83:d5:d2:76:db:d7:ed:8d:08:
e7:fb:60:bb:cd:71:36:de:32:20:91:31:83:3c:ef:
65:43:d8:aa:23:a1:35:c9:9d:25:f4:8f:a3:04:26:
50:95:3c:53:a7:bd:de:52:35:27:06:7f:9d:15:07:
e7:8c:b1:5b:28:a9:b1:17:77:08:6f:39:8e:c1:73:
68:bb:e7:b9:dc:cd:fe:10:e2:15:39:aa:7d:5f:bd:
2b:0b:8d:11:53:f7:51:8e:a3:ab:f2:32:93:58:ce:
f2:ad:63:33:83:5b:79:e8:5e:37:16:fa:fe:a8:0d:
46:6c:8d:31:18:d1:d9:79:6d:4c:81:d8:d1:7d:82:
76:7e:03:02:f2:61:e3:eb:34:33:b4:21:84:7f:1d:
67:c8:57:eb:68:74:7d:97:d4:83:71:20:ae:e2:5c:
c3:ef:7d:cc:98:93:ee:3d:d3:d2:69:95:32:d1:f7:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:1B:DB:31:FC:09:63:75:67:8F:0C:60:C0:82:73:3E:03:BE:34
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.175.0/24
IPv6:
2001:7f8:f8::/48
Signature Algorithm: sha256WithRSAEncryption
13:7e:42:97:10:a4:74:0b:57:f3:2a:89:66:bc:55:25:f4:a8:
19:08:38:a9:1d:9a:67:37:d0:e0:2c:19:38:03:df:39:06:96:
90:8f:b7:6d:14:1c:a1:ae:5b:0a:7f:5a:cb:9c:41:45:fa:39:
bf:76:7c:d4:9f:9a:c3:b5:62:d5:b3:5a:bb:73:89:58:d0:40:
ae:e1:df:1d:35:cd:02:a1:c2:60:eb:94:4f:4a:f7:b0:c5:ff:
53:2a:80:6e:32:7f:31:d6:8c:13:67:f3:62:7a:5b:48:c6:0f:
0f:7a:7e:2d:9c:86:59:76:10:42:5a:4c:d7:46:e2:e3:05:d9:
b0:c8:21:bb:fe:ff:88:41:4c:15:1f:66:2c:d8:b1:31:4f:ea:
50:79:de:52:ae:ff:95:36:c3:1a:06:60:fe:24:db:77:9d:2c:
07:5d:d0:fb:15:ab:d3:a5:fa:74:54:89:a1:57:45:7d:da:9b:
d6:e9:f2:f0:99:bf:94:26:3d:95:a1:48:49:67:04:b6:06:bc:
05:db:19:37:b5:d5:3f:9e:00:84:d6:0b:92:78:7e:08:ca:d9:
10:0e:4c:c2:95:91:07:1c:50:69:cf:43:d6:ef:88:13:a8:40:
65:56:76:c8:88:6c:2b:e5:7e:c5:c2:a5:aa:8a:37:7a:b9:bc:
00:6e:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:38 2025 by rpki-client