Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5lROaiYign0Tncsnuf4DpK7LKpU.roa
File: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (raw, json)
Hash identifier: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=
Subject key identifier: E6:54:4E:6A:26:22:82:7D:13:9D:CB:27:B9:FE:03:A4:AE:CB:2A:95
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D6329C4A286C70E64C1B1C28AAAC2A
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5lROaiYign0Tncsnuf4DpK7LKpU.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214010
IP address blocks: 185.225.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:32:9c:4a:28:6c:70:e6:4c:1b:1c:28:aa:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6544e6a2622827d139dcb27b9fe03a4aecb2a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:cb:45:73:78:b2:2c:c3:72:61:f8:5d:2f:
32:32:02:92:60:2e:4a:0d:9f:65:a0:ca:05:65:2f:
2d:fd:ef:6a:8c:41:7c:9e:32:81:db:4b:3f:97:ec:
e7:98:e4:eb:d2:dd:ab:a1:9a:ec:ee:15:77:45:14:
1e:85:a2:be:dc:1f:68:d2:4b:c5:75:fe:83:e3:59:
f6:4e:de:16:16:20:d9:44:79:f8:d8:67:db:6c:22:
90:0e:17:05:95:ef:97:81:3f:12:82:01:0a:f5:07:
40:05:60:7d:e5:21:e8:8e:1e:2b:31:dc:a1:fe:db:
10:24:57:b3:f8:5e:08:27:c0:c2:36:fb:f8:41:88:
96:03:3b:94:c3:bf:70:87:70:e4:b9:fb:28:69:54:
e9:63:b1:aa:b9:ec:75:65:76:bb:2e:b2:10:15:70:
19:a8:6e:47:a2:cf:60:58:e1:5c:02:cc:5a:b1:55:
04:42:e5:d4:26:76:73:af:d1:11:11:b3:c9:7c:7a:
85:2f:56:cf:cb:7c:6e:7d:a0:96:9f:bc:12:8b:ab:
15:1b:09:55:cf:0c:10:0b:84:cd:87:6a:42:33:4f:
97:3b:31:0d:3d:4a:cc:c2:36:f4:8f:f7:3a:0d:f7:
6e:2b:24:33:91:ce:4b:dd:e1:6c:a6:e8:af:64:b7:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:4E:6A:26:22:82:7D:13:9D:CB:27:B9:FE:03:A4:AE:CB:2A:95
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5lROaiYign0Tncsnuf4DpK7LKpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.206.0/24
Signature Algorithm: sha256WithRSAEncryption
af:24:85:fc:4e:26:c5:48:8e:24:20:6d:3c:fe:18:f8:22:ea:
28:98:34:03:62:11:9c:2e:36:62:c9:25:07:be:08:ef:b7:b3:
c6:2a:70:4b:93:b3:f7:3a:b6:87:24:aa:2f:8e:57:fe:ea:19:
6e:9f:54:75:6d:92:42:75:7f:92:63:49:94:08:6f:5a:77:10:
71:0c:ab:f5:21:42:15:48:3d:70:ff:59:da:7f:e0:ed:bf:eb:
b7:6a:f9:6d:ff:25:89:f9:90:71:f9:36:d3:04:64:bb:11:a6:
7c:5d:01:3b:43:c5:c4:6f:af:8b:41:35:1c:fd:33:1b:d4:04:
ab:47:3f:68:42:96:bd:1b:5e:e2:b3:2c:9d:60:15:cf:99:ef:
3d:f7:3e:0d:b1:dd:60:a7:74:2d:ff:9b:97:6b:52:71:51:b4:
db:c9:54:ce:d0:14:86:00:30:f6:a1:62:87:4f:6a:15:47:2e:
1c:cb:66:4c:61:75:cc:cd:03:24:57:45:ce:f2:90:6d:6a:99:
60:f0:35:e5:d7:0e:96:66:f0:09:03:72:7d:5c:fc:a6:0c:02:
1c:57:35:aa:39:aa:08:fc:bb:b0:00:2a:67:62:d7:4d:b3:93:
af:22:84:d4:94:40:90:44:07:af:dc:0b:44:80:99:d7:4d:0d:
18:a2:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:25:45 2025 by rpki-client