Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/R6K2-Venb6Wtwd_ojBW6jmXIjFY.roa
File: R6K2-Venb6Wtwd_ojBW6jmXIjFY.roa (raw, json)
Hash identifier: SnJbW5v5QRMppCTP0QGAgOQQYSTLIvVwnju+m0H6k44=
Subject key identifier: 47:A2:B6:F9:57:A7:6F:A5:AD:C1:DF:E8:8C:15:BA:8E:65:C8:8C:56
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71D9D2D6D10AFE8678975654C6B38
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/R6K2-Venb6Wtwd_ojBW6jmXIjFY.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 185.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1d:9d:2d:6d:10:af:e8:67:89:75:65:4c:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47a2b6f957a76fa5adc1dfe88c15ba8e65c88c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:30:41:e0:b3:cc:2a:5b:28:bf:00:6a:7b:
d1:25:cd:31:44:b8:9e:55:52:3f:7d:9d:77:97:6b:
bb:b7:6f:ec:06:cc:fa:2b:0e:6f:47:ac:cf:35:f1:
bb:2c:f2:2e:65:10:2b:b5:d9:e4:5f:ea:72:d9:a1:
da:a5:61:c1:97:2d:9e:7f:7c:a0:4c:7b:0a:c3:8b:
40:d4:b8:4e:24:43:16:90:5b:2d:4d:ef:9e:bf:57:
84:3c:8a:29:79:07:be:66:0f:42:a2:9d:4f:f7:a9:
f0:27:ea:a8:e6:6c:fb:51:f2:e0:d5:82:43:ba:4b:
48:da:36:1d:b7:a6:25:dc:b0:84:e3:fc:87:8f:05:
03:b0:3a:57:d0:71:69:c1:6b:21:a4:ca:45:b0:b9:
ad:bd:5c:1c:06:20:5c:ca:85:b0:0f:cc:5e:a4:a9:
52:46:4f:b1:6c:0a:2a:7f:58:aa:70:0c:b6:b3:e7:
37:ae:c8:ac:8b:f6:6c:9a:7e:25:f1:eb:87:32:90:
ac:49:26:c0:0b:0a:82:cb:b4:84:e7:c6:b1:9b:4b:
30:c3:26:93:98:0c:67:d2:18:28:ad:8b:08:f3:a6:
4b:a6:da:a5:4c:ba:93:eb:b2:94:01:f3:c0:38:ea:
5f:44:76:74:d4:9d:f9:09:5c:ea:fa:f2:c0:3c:97:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:B6:F9:57:A7:6F:A5:AD:C1:DF:E8:8C:15:BA:8E:65:C8:8C:56
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/R6K2-Venb6Wtwd_ojBW6jmXIjFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0d:30:9f:e0:76:b3:50:10:0d:46:79:08:9e:51:5b:47:46:
ab:80:f6:92:50:2f:43:88:ea:c4:cc:16:c7:95:b7:e5:51:4e:
89:bf:a6:0a:b8:31:e2:8a:22:35:8b:32:a5:bf:7d:d5:46:22:
f3:c5:b7:f0:f8:83:fa:a1:32:66:97:93:2b:21:8d:19:a6:6d:
2a:d5:4c:33:42:f7:70:e9:bf:da:22:da:f9:9d:86:39:ed:52:
07:22:41:84:b6:52:64:bd:cc:df:b7:20:9f:fa:23:25:60:36:
84:7e:41:d9:a5:92:1c:65:00:6d:25:2d:c1:60:0d:2b:7e:81:
78:e0:72:d3:1a:b7:c1:e4:bc:f0:7d:3a:09:fc:87:ac:b6:95:
d0:be:89:23:d5:49:03:c7:a7:0a:dd:53:8b:88:ad:24:41:ac:
8d:26:7c:e6:a0:91:42:56:80:b7:5c:aa:7c:60:5b:c1:f5:2f:
db:a3:b4:d4:90:83:d5:84:5c:8d:99:c9:b2:68:64:34:b1:e2:
08:ef:ad:34:da:83:46:2e:55:ad:0b:6e:1f:66:0c:da:95:92:
28:ae:4f:55:5f:1c:28:b8:41:1f:35:66:1c:f7:2e:ae:16:ec:
3b:1a:9f:0e:8c:4b:85:36:e0:e0:97:8c:d5:a2:40:61:1e:39:
64:cc:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:42 2025 by rpki-client