Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/XH-yBBT5AuQJC8aI3yCYb0y7oE8.roa
File: XH-yBBT5AuQJC8aI3yCYb0y7oE8.roa (raw, json)
Hash identifier: StMCePQ0Ep2lGODPzHeMEg0He8EwrNWlxkBgkMISo1w=
Subject key identifier: 5C:7F:B2:04:14:F9:02:E4:09:0B:C6:88:DF:20:98:6F:4C:BB:A0:4F
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 019428254269E19D69219D01A128AC6A6BB8
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/XH-yBBT5AuQJC8aI3yCYb0y7oE8.roa
Signing time: Thu 02 Jan 2025 17:51:58 +0000
ROA not before: Thu 02 Jan 2025 17:51:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3262
IP address blocks: 185.192.183.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
185.224.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:42:69:e1:9d:69:21:9d:01:a1:28:ac:6a:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 17:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7fb20414f902e4090bc688df20986f4cbba04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:71:08:f8:cf:46:26:b8:ab:f3:87:33:22:56:
45:a9:07:76:e0:0d:76:63:a1:1f:38:07:14:a1:3d:
e5:56:72:94:aa:f8:9d:b6:2b:46:41:cb:68:f6:07:
84:a8:cc:8c:30:35:40:91:aa:51:07:c8:17:41:4f:
69:47:2a:97:72:f6:9f:f6:a9:5a:a3:08:8c:91:3d:
a4:53:bc:9d:08:66:64:24:ea:ad:2a:44:87:4a:26:
ed:45:c8:3c:3f:2e:c9:55:d4:94:83:5d:2c:93:00:
3c:d0:c1:34:a8:74:60:1e:0b:94:48:5e:28:cd:9d:
68:40:2a:e7:e4:f1:b4:96:42:da:2a:06:6c:3c:b6:
0e:33:fc:64:c5:f1:6b:4d:00:1e:20:1d:4a:f2:c2:
17:27:d8:26:72:5e:a7:d0:49:3d:45:3b:df:e0:ec:
25:3e:cd:7a:06:d3:50:8f:4a:af:1e:9c:22:f0:81:
0e:b7:d4:13:f5:7b:5b:a6:d2:7e:15:14:c4:d1:30:
ed:76:36:a6:26:9f:5d:17:f9:5b:2d:f9:bd:f4:f7:
01:f4:97:03:c5:c5:a3:0c:77:e6:05:a3:38:59:30:
07:aa:57:6d:d5:74:57:f9:c1:14:f8:4e:2b:1b:c6:
89:58:b1:fb:02:a2:3b:a6:92:1b:a0:74:81:9a:a4:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7F:B2:04:14:F9:02:E4:09:0B:C6:88:DF:20:98:6F:4C:BB:A0:4F
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/XH-yBBT5AuQJC8aI3yCYb0y7oE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.183.0/24
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
185.224.92.0/24
Signature Algorithm: sha256WithRSAEncryption
32:18:e2:54:b2:9f:c5:b7:47:67:67:64:c4:7e:8a:2c:cb:ac:
3c:02:ba:f6:7f:96:d4:05:c2:1b:b8:fc:1b:77:70:e5:7e:ef:
f2:37:d7:f0:4e:af:a0:1c:61:56:d1:c8:91:67:84:0b:67:05:
31:7e:ff:f1:e6:95:75:87:16:15:ab:76:64:a7:48:f2:46:cc:
33:4f:6f:d8:b3:5f:1b:7b:a9:9c:82:64:60:7a:65:d8:cb:fa:
9f:45:8b:93:4f:97:7f:d3:81:fe:1c:53:36:6f:98:cc:58:8d:
f0:b8:5f:38:78:c2:aa:9f:06:97:a4:5c:f3:ea:12:c7:eb:bd:
87:e8:a7:52:8a:ac:82:68:52:fa:c5:de:79:da:13:2b:b4:da:
d6:ce:9e:a6:4d:b5:dc:2f:7d:a7:42:f5:f4:bb:ba:92:05:ad:
d5:f1:6c:24:1f:f5:34:fe:59:e9:fa:ec:7d:12:b0:56:89:98:
3c:3b:72:05:84:fd:08:77:5b:c9:6f:52:1f:bc:a8:55:cf:fa:
5b:78:6f:98:72:5a:41:1a:88:e0:77:71:42:7a:6a:2a:30:17:
52:cd:65:e3:3e:1a:84:c0:a9:ea:08:9e:fc:1a:fe:9d:1e:94:
da:70:45:d2:a8:ad:38:ea:95:4e:72:4c:98:a4:f1:9c:e6:ab:
e4:f6:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:49 2025 by rpki-client