Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa
File: 6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa (raw, json)
Hash identifier: wLv2JoucZBkU56L2p9pXvAWsrjbYGSWjGCERyhVvXsw=
Subject key identifier: EB:27:64:09:32:0E:F9:C3:67:87:C1:EF:D8:E9:3C:F0:89:5C:1D:A2
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0194266A3FB17BCFDCBBF6020603984358D3
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa
Signing time: Thu 02 Jan 2025 09:48:04 +0000
ROA not before: Thu 02 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200034
IP address blocks: 185.198.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:3f:b1:7b:cf:dc:bb:f6:02:06:03:98:43:58:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 2 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb276409320ef9c36787c1efd8e93cf0895c1da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:c4:8e:2b:38:31:0d:78:86:fa:ae:f7:3f:
f6:b2:03:b4:93:59:b9:ba:e8:cc:45:05:23:a2:a0:
01:f1:56:4a:55:22:79:a5:f5:ed:85:f6:6d:5f:fc:
6b:8c:ab:6e:cf:88:cc:88:56:e0:6f:5c:0d:33:3e:
9f:8b:24:b7:7e:fe:52:5e:54:91:95:ca:41:6b:25:
42:c4:6b:6b:f9:f1:cf:88:14:5d:df:cc:17:8b:d9:
38:63:d1:8c:16:50:22:0a:e9:dd:0f:98:c4:7c:a2:
73:02:39:9f:68:c3:91:79:60:ca:d4:0f:52:0d:a4:
d6:bd:88:90:36:43:cb:c4:62:d9:9a:d8:39:79:64:
dc:41:78:63:e2:7f:b8:4a:d8:80:bb:b0:8f:37:ee:
58:d7:e2:c2:53:41:4d:71:84:97:2a:1b:ca:af:66:
1b:75:a9:d2:72:72:21:9a:6f:47:8b:61:a3:f9:c8:
82:e6:2d:fd:39:be:22:34:69:96:dd:a5:4b:83:8c:
2e:6f:87:e6:84:b0:b2:8e:0d:51:55:1c:43:d0:0c:
bf:b7:15:12:f1:41:96:ea:14:5f:2f:40:0d:2c:69:
fe:4f:3b:e7:be:00:c1:3f:24:58:37:7f:f8:01:e1:
99:38:93:1a:03:cb:5a:a3:1f:6e:a7:1e:54:b6:ed:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:64:09:32:0E:F9:C3:67:87:C1:EF:D8:E9:3C:F0:89:5C:1D:A2
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.208.0/23
Signature Algorithm: sha256WithRSAEncryption
15:d0:47:cb:ea:b0:35:67:e0:b1:bf:c9:0f:d4:20:0b:6e:fd:
3c:b4:9f:fa:b0:84:83:27:0c:74:4a:03:ab:3e:3f:9b:f3:e3:
e2:1c:02:50:ae:e3:97:72:a0:01:17:3d:3f:aa:95:92:40:35:
d7:c3:30:bd:3a:9e:7f:5d:f1:49:64:c5:4a:35:9a:ac:bb:8f:
0b:48:36:31:8a:a6:44:64:3f:29:bd:68:44:77:d4:33:81:43:
08:91:89:d6:2b:8b:2c:95:7e:4e:92:e0:e4:71:14:99:d6:a6:
eb:9b:98:74:b5:d1:d7:44:4a:37:9e:04:91:a1:62:78:99:eb:
31:90:f2:da:93:b0:d1:30:0f:92:84:3e:75:1d:d0:1d:c5:ca:
17:ee:af:0a:34:68:ea:22:70:4f:ac:91:70:10:5b:cc:56:ad:
c3:1b:30:16:d3:28:4d:53:d4:2d:a7:dc:98:92:d8:a5:03:05:
72:9c:a0:e8:b7:01:d1:b7:f4:00:25:73:fd:5c:04:b6:cc:3b:
87:d9:1d:ad:b2:ad:69:a5:5c:a2:53:05:d2:1c:31:a2:e0:35:
51:f4:17:4e:c2:aa:ee:a5:9e:31:39:f2:f3:32:43:5d:6f:35:
fd:33:7f:5b:af:41:01:b3:e7:4e:f4:78:e6:7d:d5:a1:22:27:
70:fa:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:51:48 2025 by rpki-client