Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6DM2EcyU67ptxBh9GKlJrzks2YY.roa
File: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (raw, json)
Hash identifier: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=
Subject key identifier: E8:33:36:11:CC:94:EB:BA:6D:C4:18:7D:18:A9:49:AF:39:2C:D9:86
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 0194206863AA46125B4029EC171DB5396720
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6DM2EcyU67ptxBh9GKlJrzks2YY.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.229.146.0/24 maxlen: 24
185.229.147.0/24 maxlen: 24
2a0d:d600::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:aa:46:12:5b:40:29:ec:17:1d:b5:39:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8333611cc94ebba6dc4187d18a949af392cd986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:7d:d0:6a:32:d8:e5:cb:84:40:1e:bc:df:
d4:38:db:1a:b1:47:a8:d4:99:59:3c:d9:0f:ef:9c:
e7:08:f0:63:d7:ec:39:87:c8:eb:99:dc:ae:7e:ec:
7f:b8:2a:53:5d:ff:b6:e2:63:ff:47:20:2e:70:07:
d6:dc:3a:0b:2e:26:94:f0:f0:39:93:45:28:5a:f2:
85:1e:05:c2:a8:b1:99:e0:13:22:32:f5:64:2a:d9:
d9:72:94:30:91:38:e4:29:38:5e:48:15:5a:06:24:
dd:6a:a6:f3:c1:50:e9:b2:a7:a7:36:35:39:4e:51:
61:f8:e4:e1:b8:ae:90:b3:3f:4a:bb:21:8d:24:b5:
79:9d:07:38:27:c3:52:9e:ed:56:18:1d:6d:2f:7e:
04:c1:33:e4:92:50:ad:a4:05:78:bb:61:07:ee:86:
ef:d9:05:09:b0:89:f0:0f:02:ab:fd:82:b6:7e:c3:
27:43:11:3c:85:cf:3f:00:d6:46:31:7e:01:67:ca:
cb:0c:c3:94:b5:5f:29:93:36:a8:87:03:43:63:2a:
e9:70:4f:5a:58:ce:8a:00:c1:01:93:df:07:20:ac:
66:26:37:7a:a3:ef:5f:2d:09:81:e4:2a:89:67:20:
5b:8c:18:06:7e:ad:b4:ab:fb:ae:60:f1:76:2b:e1:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:33:36:11:CC:94:EB:BA:6D:C4:18:7D:18:A9:49:AF:39:2C:D9:86
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6DM2EcyU67ptxBh9GKlJrzks2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.146.0/23
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
64:77:3c:14:ab:ca:90:c4:23:fe:3e:2f:fe:54:7e:b2:00:22:
9b:70:92:ec:0d:5b:08:8a:9b:6e:50:4f:95:66:d1:80:78:f3:
8d:6d:7d:4e:8a:2f:f8:aa:33:d8:e7:d7:82:31:59:ad:3a:20:
df:2b:2b:44:a3:87:72:51:62:1a:9f:d7:f9:c4:5f:d3:dc:b9:
4c:3d:e4:fc:a1:ff:97:80:ca:fd:12:5a:5f:09:20:5a:4b:fd:
80:80:45:53:ca:31:40:4d:65:dc:24:e1:d3:ac:6c:23:06:47:
1e:1f:9c:ca:28:08:a1:20:d2:d7:83:23:31:32:5d:4a:37:1d:
92:b9:6b:fc:a8:89:99:2b:78:48:5b:79:b3:83:da:5c:7a:17:
9a:a7:2b:25:a8:0f:e0:7c:e7:6f:59:b2:02:53:0a:50:03:21:
ab:7f:02:63:f7:51:a4:50:ad:a4:36:f9:eb:5f:7f:eb:3e:8f:
2b:b1:20:01:76:20:dc:3a:3e:e1:7e:60:a5:27:53:3b:10:56:
d1:14:af:5e:bf:0b:76:02:df:1e:10:16:e3:be:ff:c6:eb:78:
c7:8e:b0:4f:28:57:16:55:3c:a4:92:98:1a:3f:7b:0a:55:c1:
f3:f6:eb:a9:35:e3:43:0e:20:18:1d:31:f4:1a:c1:b9:fc:eb:
ca:66:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:13 2025 by rpki-client