Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IZeFyAfIsaIT39LrzqkOgPPsx-U.roa
File: IZeFyAfIsaIT39LrzqkOgPPsx-U.roa (raw, json)
Hash identifier: 2/r3wV86QBZIpgLEEhS3BAY8PlEVjDQvaBpdEe9CdYY=
Subject key identifier: 21:97:85:C8:07:C8:B1:A2:13:DF:D2:EB:CE:A9:0E:80:F3:EC:C7:E5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01961BBF1E5407A8A1D021F2116AB2999254
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IZeFyAfIsaIT39LrzqkOgPPsx-U.roa
Signing time: Wed 09 Apr 2025 18:10:32 +0000
ROA not before: Wed 09 Apr 2025 18:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 185.192.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:bf:1e:54:07:a8:a1:d0:21:f2:11:6a:b2:99:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 9 18:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=219785c807c8b1a213dfd2ebcea90e80f3ecc7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:41:15:6b:4e:55:0b:9c:90:3d:a3:15:59:
22:b1:5f:d0:8b:c0:9d:88:a4:60:80:03:c3:01:b6:
ba:19:33:ea:f1:82:e9:bf:45:d7:db:ec:86:11:84:
04:b7:bb:77:ae:61:2e:bf:a4:17:43:93:e9:98:52:
36:6f:72:05:69:e9:5d:b0:47:1f:33:74:22:54:a3:
f0:72:25:90:5d:db:d1:03:8a:70:21:0c:e4:91:77:
ce:69:c5:93:ac:6e:ed:ae:39:b3:18:14:85:69:32:
3c:9e:b4:e7:aa:4f:ba:06:19:e6:65:d2:73:ff:4b:
7e:ed:84:d4:10:17:49:a3:22:06:a8:5a:b4:50:14:
ce:e9:18:c5:2b:f0:2c:a5:fd:7b:7a:7b:ec:c3:33:
36:57:d5:05:af:fb:fd:4e:6a:a3:f4:8c:52:2f:25:
86:f7:72:83:e3:8c:de:12:45:94:88:2e:09:ce:a8:
82:ed:9d:23:64:41:9c:2d:79:f4:fe:b2:9e:08:0f:
88:e9:9b:e0:8b:bb:fd:bb:0b:e0:f7:1a:fa:a5:73:
7b:63:f1:9e:79:3e:fd:d9:88:10:46:9a:25:2f:f8:
9b:0f:63:f3:dc:42:e4:1c:59:e9:fd:11:50:9b:1a:
69:f7:74:e6:50:4a:cc:1e:df:ae:0e:10:b4:7b:9c:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:85:C8:07:C8:B1:A2:13:DF:D2:EB:CE:A9:0E:80:F3:EC:C7:E5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IZeFyAfIsaIT39LrzqkOgPPsx-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c8:fb:dc:d2:a4:da:ae:c8:e1:2a:70:bd:df:4b:f9:e7:57:
a7:b1:ca:48:fb:05:70:e1:92:82:80:9e:bf:10:6a:93:da:11:
6d:89:9d:81:54:07:d9:67:6b:bb:17:df:b5:44:7f:ad:cd:af:
49:b1:ef:f4:4a:0f:eb:23:9b:9a:b6:ac:00:a1:24:c0:70:23:
5e:65:42:c4:f9:32:4f:05:ce:0f:2d:02:d5:b4:7a:72:7e:49:
31:76:9b:2a:86:28:aa:45:f9:4a:bf:6d:65:7d:f9:aa:9d:31:
75:9b:0c:75:4f:0f:63:c1:76:bc:36:62:2f:c5:41:e7:05:63:
45:ea:ba:e2:d0:7f:f6:0a:00:7c:47:df:db:4c:4f:71:88:e5:
1a:1d:80:74:c3:56:8a:f8:3b:4b:0b:d2:45:cf:69:14:a3:23:
a7:e8:cd:bd:b3:89:44:aa:e9:68:08:53:aa:da:71:88:f2:e4:
0d:f9:28:e6:9b:d1:21:0b:b5:2a:ba:7b:bb:52:ad:5a:6f:f7:
46:0d:89:b2:08:6a:2d:df:d6:df:7b:46:5d:56:3a:d7:80:52:
8d:d7:e4:59:99:78:d1:80:1e:04:03:27:fa:4a:0d:cf:30:59:
3a:3d:97:16:c1:90:b7:19:1f:22:10:98:d9:ed:5e:bd:f6:ce:
77:51:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:26:17 2025 by rpki-client