Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/tsQCK0at0tvh2TQxSMohTv0qJJo.roa
File: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (raw, json)
Hash identifier: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=
Subject key identifier: B6:C4:02:2B:46:AD:D2:DB:E1:D9:34:31:48:CA:21:4E:FD:2A:24:9A
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 0194236A278A3127174A4DA4BEA181EB2DDC
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/tsQCK0at0tvh2TQxSMohTv0qJJo.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16188
IP address blocks: 185.178.116.0/22 maxlen: 22
217.29.32.0/20 maxlen: 20
2a00:b580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:27:8a:31:27:17:4a:4d:a4:be:a1:81:eb:2d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c4022b46add2dbe1d9343148ca214efd2a249a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:55:89:83:c7:4e:6a:28:9c:11:e9:3e:46:
72:2e:87:61:1e:a8:3e:46:46:86:1a:a7:07:2b:b4:
24:67:48:db:96:70:b1:83:ff:6b:7c:2a:59:f3:44:
f7:a2:81:94:ff:7b:d0:fb:51:bd:90:39:a2:3a:86:
e3:88:80:d7:cd:e3:df:7b:b5:94:64:65:40:3b:8a:
a6:a9:51:18:19:c9:57:7e:58:97:40:5d:b3:46:65:
c9:12:a2:8b:de:ae:6d:83:35:ca:60:61:3b:b9:0f:
b5:31:98:7a:21:d7:86:9f:eb:c2:5d:c4:b7:b4:43:
24:65:81:9d:bd:94:e5:21:90:84:ac:68:f0:3f:66:
75:66:3e:77:96:8d:1f:bd:0a:8c:fe:f5:70:d6:1f:
73:7e:e9:8e:c7:5e:5a:66:4e:d5:dc:01:38:79:ef:
49:47:aa:ba:14:d4:91:44:9a:a2:df:18:2b:af:11:
24:4d:bd:75:0f:6f:34:14:21:37:da:d5:9e:0a:c0:
31:62:70:97:0d:ec:21:85:b1:56:a4:6c:44:49:10:
3d:c5:79:e5:f9:2e:b5:a6:dc:07:c5:7f:0c:f2:3f:
c7:35:33:7e:96:1e:d4:56:c0:8c:7b:a6:6f:1f:77:
61:66:42:86:73:d4:c2:7b:34:a9:eb:60:90:42:2b:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:02:2B:46:AD:D2:DB:E1:D9:34:31:48:CA:21:4E:FD:2A:24:9A
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/tsQCK0at0tvh2TQxSMohTv0qJJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.116.0/22
217.29.32.0/20
IPv6:
2a00:b580::/32
Signature Algorithm: sha256WithRSAEncryption
0c:9c:4f:86:3a:ef:90:3e:ec:30:6e:50:73:08:c4:15:90:21:
1a:1e:b6:d3:6f:30:e0:0c:aa:df:3e:0d:7d:1f:e5:eb:4f:c0:
07:d0:a6:5b:a3:7c:f8:c4:8d:61:5b:a5:68:2b:96:66:dd:ad:
26:4d:69:b3:c0:c1:cb:31:0d:bc:f4:08:96:fc:dd:74:29:75:
3b:a8:45:98:af:40:a2:df:03:30:90:8b:b7:a8:b8:5d:3e:52:
f1:af:be:7a:f8:83:c5:c0:e2:86:46:ab:d2:38:27:6c:d1:0b:
86:4d:c2:7a:cf:db:1a:c5:5f:3f:0e:e4:83:db:74:8b:1d:25:
97:83:4f:a8:d1:f6:79:7a:73:85:12:bb:5f:fd:34:ce:7e:cb:
98:54:90:45:e1:74:ae:50:f7:eb:34:43:d6:fd:aa:1e:8d:29:
d2:50:bb:24:a0:08:6e:96:e3:c9:4e:a9:fd:a3:38:04:8a:5a:
9d:3d:c8:52:da:e9:20:22:da:b4:23:5b:f2:cd:ca:41:b9:14:
c5:17:7c:ba:b8:84:c9:c2:4d:29:d3:ff:01:bd:e3:02:58:05:
de:6b:c4:6a:63:b8:12:5e:e9:77:b2:92:21:ac:4a:e1:72:e2:
f9:eb:d2:07:14:1a:da:c4:85:e9:41:99:20:46:5e:7a:69:da:
1d:de:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:23:15 2025 by rpki-client