Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa
File: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (raw, json)
Hash identifier: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=
Subject key identifier: EA:E2:47:6F:49:FE:A3:52:66:B7:85:9F:AE:42:98:B6:E8:16:FE:D0
Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial: 019425FCC66E6382BBD7CB7D2BC25D5FC9F6
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209754
IP address blocks: 85.119.104.0/21 maxlen: 24
185.85.112.0/22 maxlen: 24
185.85.112.0/23 maxlen: 24
185.85.112.0/24 maxlen: 24
185.85.113.0/24 maxlen: 24
185.85.114.0/23 maxlen: 23
185.85.114.0/24 maxlen: 24
185.85.115.0/24 maxlen: 24
2a01:9780::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c6:6e:63:82:bb:d7:cb:7d:2b:c2:5d:5f:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae2476f49fea35266b7859fae4298b6e816fed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:27:b0:26:01:a2:79:55:2e:df:f3:1a:70:
82:54:a5:11:a5:13:5e:7c:26:d7:70:a6:fa:19:87:
3a:06:e8:92:75:d7:43:4b:b5:f2:da:6c:bb:50:9c:
e7:15:c5:9e:55:08:b4:8a:38:1d:c3:51:ac:b3:7e:
cc:45:e0:7a:27:1e:3b:b9:de:a1:07:94:70:ea:90:
96:70:e0:47:a1:77:9a:94:a3:55:80:85:de:72:2d:
d8:96:3e:16:20:24:d4:09:95:e4:a5:ed:85:b2:93:
e8:67:95:dc:d4:02:70:52:ac:a6:4a:60:28:b6:e8:
f3:ce:28:ab:9c:ee:78:b8:9b:4a:2c:a4:99:5e:89:
a6:6e:f3:df:03:ae:8b:30:33:80:49:89:31:52:23:
06:2e:66:f0:cd:ae:da:63:d1:72:0c:5b:39:75:c8:
5f:67:2a:96:f3:37:d8:af:d4:de:1f:22:d5:e6:b8:
d7:44:c8:bb:06:ae:19:15:ba:a6:0d:b9:61:58:1f:
f6:94:b1:05:89:4a:48:7a:0e:c1:9e:a0:e5:72:a8:
21:fc:54:a4:78:13:25:a7:88:28:12:61:91:3f:a3:
6d:8d:36:17:d8:fb:d5:8e:76:75:cf:05:5b:5f:2c:
3f:20:06:4b:c3:7f:3a:62:7d:a0:76:ac:c0:ec:ef:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:47:6F:49:FE:A3:52:66:B7:85:9F:AE:42:98:B6:E8:16:FE:D0
X509v3 Authority Key Identifier:
keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.104.0/21
185.85.112.0/22
IPv6:
2a01:9780::/32
Signature Algorithm: sha256WithRSAEncryption
85:8d:ec:af:3c:57:a4:00:58:30:ed:b0:41:31:4c:ef:76:81:
00:b2:54:72:ac:3a:60:84:2f:47:7c:b9:4a:c0:08:f7:ef:75:
41:c0:57:16:9a:57:5a:02:f2:3a:dc:17:8c:bb:11:e8:6c:d6:
6c:08:59:6f:f0:3f:42:7e:6c:f2:6d:20:e4:0f:a5:be:a1:4e:
55:93:33:05:11:bd:dd:68:75:9b:ef:f8:ab:ae:a2:65:e5:c2:
67:db:1a:db:78:ec:9e:7d:a2:96:93:aa:d7:7b:a0:6f:4c:c5:
17:61:f4:b9:de:ef:26:d8:71:3a:b4:4f:12:ba:90:ec:e2:87:
01:04:72:b7:52:3c:ae:cb:bb:59:43:24:e7:41:09:e9:ab:bc:
0d:cd:72:4e:17:4b:57:a7:02:e6:0b:40:4b:8a:2b:60:5d:93:
7c:8d:35:e4:26:d2:97:bc:81:30:43:f1:b1:80:f0:e4:7f:e8:
00:55:07:38:25:8d:7a:d4:2f:50:5d:34:d8:07:66:b7:e9:02:
d6:27:33:11:d6:2d:22:ff:91:d4:27:37:1d:99:d2:e6:5f:d7:
60:9f:fc:d6:7d:2b:21:19:77:df:25:f8:67:f3:b1:96:a8:0b:
4a:74:b2:db:19:96:1f:f4:7e:9c:cf:3d:b1:c4:10:25:82:42:
b5:48:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:01 2025 by rpki-client