Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa
File: 6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa (raw, json)
Hash identifier: 0+EXXpyshs7NPQdkK6MvrkAg2151xSHnQxOuUtZbYMA=
Subject key identifier: E8:88:74:CE:75:9D:BC:F9:EC:CF:58:F1:1D:94:6F:37:F5:43:39:9D
Certificate issuer: /CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Certificate serial: 019421446265F967834B2DB3FB0206841A99
Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50784
IP address blocks: 185.159.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:62:65:f9:67:83:4b:2d:b3:fb:02:06:84:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e88874ce759dbcf9eccf58f11d946f37f543399d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:19:aa:c2:09:bc:39:e9:37:cf:f8:d1:e1:
7e:d1:78:bf:c5:81:df:78:32:20:32:32:c9:7a:dc:
36:9e:80:1f:03:be:9d:91:5b:3d:89:66:34:d3:17:
14:62:1e:1a:d8:7e:5c:35:fb:65:cc:b1:19:0a:f4:
bd:fd:01:ae:77:81:13:96:7d:b9:eb:7d:da:c0:c3:
8e:ca:2e:49:0f:50:df:f4:fa:6e:84:aa:19:9c:45:
bd:81:24:d3:d2:6b:93:5a:37:f9:73:96:0d:e1:b5:
d4:e9:53:d4:44:3b:5b:4a:b0:ff:88:6e:f8:00:73:
d0:e1:d9:e8:ec:5b:4d:3f:7d:89:f5:d5:28:b2:05:
51:4d:22:4d:3f:fc:6e:82:05:c1:b2:03:e4:77:0e:
94:fb:9a:64:4e:93:75:38:c7:a6:45:fe:d4:cf:9f:
6a:cd:d8:c8:cd:7d:f8:be:67:24:0b:77:b1:41:84:
95:4f:0e:6c:9c:bb:85:c7:fd:e8:88:b7:c0:1f:c9:
03:52:31:3c:85:ab:e0:b1:db:ee:51:8b:13:8d:45:
ca:be:68:c0:7c:16:03:7f:21:f9:90:87:a2:91:2f:
14:41:fc:73:81:16:41:69:86:fd:f3:60:bb:48:a6:
b8:2a:cc:20:b7:28:c9:d8:e4:d3:de:89:a3:67:76:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:74:CE:75:9D:BC:F9:EC:CF:58:F1:1D:94:6F:37:F5:43:39:9D
X509v3 Authority Key Identifier:
keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.168.0/22
Signature Algorithm: sha256WithRSAEncryption
29:aa:e2:36:2f:dc:24:4c:f4:fe:c4:05:b8:a8:87:9f:f4:fb:
9e:2c:d7:37:e1:42:06:68:96:d8:5a:b4:2a:47:55:ac:f8:d1:
96:e2:56:3b:64:2f:10:2f:19:f8:22:ab:1a:63:3a:89:0e:4a:
10:77:37:47:45:a2:23:da:4d:94:9e:bd:6d:d8:72:89:c9:c6:
d9:31:ed:54:08:4b:27:f8:d2:4c:c9:c5:ec:d7:9c:45:c1:47:
a7:6c:c7:71:e9:8d:23:05:cf:57:b2:de:52:15:be:c3:05:e6:
d9:21:91:7f:c8:68:c6:b2:96:55:a5:ea:0c:d7:d8:c2:94:86:
ac:5c:25:0b:cb:8e:0e:ac:3f:ce:98:09:19:c6:f6:b6:3c:ea:
1f:46:47:e2:0d:b8:10:92:9b:01:0a:f6:02:6f:03:57:d9:a1:
9f:2c:3b:0c:51:0b:82:73:95:35:d5:b4:db:4f:75:03:0d:0f:
fc:96:06:dc:4b:37:f9:d1:30:4d:8c:93:11:54:2f:15:9b:46:
f1:d1:2c:77:80:bf:3e:88:3a:d5:48:85:d0:c3:11:d0:78:09:
03:2c:ab:df:42:5a:3f:ac:97:a4:55:af:03:19:18:6d:83:96:
6b:bf:e0:0f:4a:d4:d3:71:85:f4:76:87:e8:fd:a2:3c:85:34:
6b:5d:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:04 2025 by rpki-client