Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa
File: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (raw, json)
Hash identifier: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=
Subject key identifier: E2:76:3D:00:D7:F8:11:5A:F8:45:88:AA:C5:88:88:3F:96:2B:B0:60
Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial: 0194258E36A4E0D30320750248DBCD3C2387
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa
Signing time: Thu 02 Jan 2025 05:47:44 +0000
ROA not before: Thu 02 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204120
IP address blocks: 185.114.48.0/22 maxlen: 24
2a06:6e40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:36:a4:e0:d3:03:20:75:02:48:db:cd:3c:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Validity
Not Before: Jan 2 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2763d00d7f8115af84588aac588883f962bb060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:92:53:fb:e3:14:15:a6:ee:fa:ee:a7:b0:
e7:94:32:9f:78:19:d6:2f:60:e7:89:6d:62:54:dd:
80:01:5f:47:ed:c3:ff:67:a4:b8:54:1a:68:ee:1e:
8d:70:72:1a:bb:87:70:ef:ea:86:64:c8:60:d2:42:
95:e5:63:81:be:01:86:d1:19:df:a4:50:63:8a:d2:
48:6f:07:46:72:5e:3e:20:49:a7:d6:a6:5c:18:19:
4f:58:05:36:1f:46:33:4c:e7:c3:18:36:d4:bb:bd:
c8:a5:46:e8:46:e9:c3:fb:f3:46:c9:95:45:49:19:
3d:da:be:a1:6e:cd:84:10:e5:15:7a:96:09:df:9e:
9b:e7:30:53:14:7f:7b:61:a7:cd:6b:1f:55:82:21:
91:02:a5:d4:be:6d:4a:56:69:3e:7e:96:6f:f8:85:
af:c8:a7:58:87:f6:5b:0d:8f:05:92:3a:fd:c0:cf:
e1:48:5e:88:38:b6:29:31:7f:cb:82:11:f3:66:18:
f8:49:c0:bf:4c:06:e6:fd:34:b5:05:cb:8d:e1:5c:
13:8a:bd:9a:91:61:2a:9a:d7:a3:66:99:ae:e7:95:
a0:7f:97:99:99:d2:9d:9e:50:dd:75:32:fb:4a:28:
e7:ef:4a:95:e9:ae:bf:69:2f:b9:2c:91:69:82:44:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:3D:00:D7:F8:11:5A:F8:45:88:AA:C5:88:88:3F:96:2B:B0:60
X509v3 Authority Key Identifier:
keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.48.0/22
IPv6:
2a06:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:7b:65:bf:76:f3:78:4b:3e:72:62:ad:a2:96:0c:95:89:3e:
30:9f:fb:a6:7c:8e:2b:a0:6c:4b:a1:f6:58:02:a5:cd:93:33:
51:85:28:a3:88:8c:4d:3d:f5:0f:5f:e6:05:9a:81:a4:d7:a0:
b3:a2:b1:de:99:f7:11:e4:67:a7:0f:bf:83:a4:14:9c:f1:a1:
a7:73:b5:33:17:09:2d:94:c6:36:72:03:cb:d3:22:b5:27:ca:
bb:ac:39:36:69:d7:6e:ab:aa:b9:ba:0b:1b:26:a3:75:e6:f1:
c1:69:af:2a:21:7a:4b:7a:e8:ae:60:ca:a7:b8:1e:f4:34:56:
06:dd:0c:15:b4:c2:1d:c5:67:5e:89:5c:55:4b:a9:59:69:d5:
9c:9c:91:e4:56:65:6a:fd:2c:a7:c8:db:eb:0f:cd:4d:c3:ba:
9a:58:3c:bd:31:e2:f5:1e:3d:d7:58:9f:f3:35:d4:f3:93:ae:
88:7a:0c:94:67:3c:bc:ac:2f:e4:b7:ac:bb:21:80:c4:27:69:
f9:14:f6:4c:ca:a8:c8:36:96:18:46:bb:83:cc:a0:7c:e9:b3:
3a:02:11:fe:88:d2:0d:15:1d:76:e8:75:c4:0b:26:99:70:10:
2c:9e:be:ea:f4:83:22:fd:d2:44:b8:7b:de:c9:c5:17:f8:0c:
e5:18:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:42:03 2025 by rpki-client