Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa
File: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (raw, json)
Hash identifier: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=
Subject key identifier: 0B:65:9C:1F:A5:79:41:1B:45:E1:B0:DD:97:D4:F7:64:92:36:B1:B8
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01942067F03F5E8CA4D6FBA606ABE2941AD5
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13101
IP address blocks: 185.60.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f0:3f:5e:8c:a4:d6:fb:a6:06:ab:e2:94:1a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b659c1fa579411b45e1b0dd97d4f7649236b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:89:fe:3a:52:6f:ec:d0:27:17:0d:cf:89:
91:38:2f:c5:25:35:c1:c7:7e:0b:ad:c8:98:6c:f4:
1d:ca:69:81:05:ef:a6:b5:a9:00:ff:72:51:c1:d6:
88:8e:56:e2:b4:52:bc:ed:7b:83:d1:03:58:bc:90:
36:01:91:69:fb:33:bf:d9:13:4f:3d:09:55:05:6b:
73:4f:14:f2:be:44:88:ac:dd:2f:32:30:49:b4:d1:
68:0b:7c:7c:e8:b2:b8:7c:2b:45:3d:24:21:83:8d:
8b:9a:32:d7:52:2c:0e:f6:92:1a:cf:ec:22:24:9a:
17:e5:e2:e6:54:f5:c5:6a:05:d8:7c:32:20:29:a7:
a6:cd:70:06:46:bb:c9:c8:fb:85:86:fd:04:dd:74:
7f:29:04:b3:bd:b5:15:0c:07:de:3e:dd:59:77:f7:
18:18:f3:22:0f:21:4f:8e:97:a5:f8:7a:7a:bd:a8:
1f:ba:13:c3:40:56:7b:6a:ca:0f:34:71:69:79:77:
2e:4e:6b:63:83:6a:f2:e2:fe:92:93:e7:58:b4:99:
78:a1:fe:d2:48:97:49:45:19:99:d8:78:8c:6d:cb:
00:71:c8:59:ba:0b:a4:bf:ab:83:c8:f5:a1:97:5b:
22:3d:28:bd:f0:b8:c5:81:f1:09:b5:6d:3e:40:bb:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:9C:1F:A5:79:41:1B:45:E1:B0:DD:97:D4:F7:64:92:36:B1:B8
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c1:0f:0e:a5:49:b2:ff:9b:f0:42:10:b8:eb:e1:8f:c3:08:
40:c5:c6:48:53:0e:fb:9e:b9:7d:03:d8:be:b9:2f:b0:b9:ea:
ca:42:d5:46:12:41:33:6c:af:69:af:0c:08:d9:8d:4e:03:69:
80:9d:17:bd:fc:eb:b5:16:5e:64:e3:f5:46:5d:1d:24:ee:2b:
e6:a6:41:88:74:2e:30:9a:e8:ca:50:b2:cf:a3:5b:ff:be:33:
2e:bd:6f:07:d1:a1:e1:ff:44:4b:25:e8:bc:05:da:34:c7:a0:
8d:22:40:11:1c:b1:89:87:47:fb:1d:81:7c:1d:53:03:04:bd:
fc:20:7c:de:fa:7c:9d:c7:24:d1:10:00:58:72:dd:15:a3:b5:
ba:11:fe:a7:5b:0e:aa:5d:86:3a:39:a1:8d:0a:95:f0:8f:2e:
21:4a:08:f8:23:d3:b2:0c:b9:91:1a:8f:38:e2:9e:9a:f4:2d:
5b:31:1b:41:66:06:1d:5f:4a:03:f1:01:b1:e1:1d:33:24:67:
8b:55:b0:9e:21:97:52:ed:08:88:58:d0:0a:ed:fe:b3:7f:7e:
44:fd:0d:e1:92:92:49:6d:75:34:b5:c3:d6:40:3e:01:78:fe:
61:35:5f:9c:e6:fb:63:fb:28:cc:6b:f1:df:e3:75:25:21:3d:
9b:de:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:39 2025 by rpki-client