Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/a_tI6HP1FzzUH0r0poa89IN3meo.roa
File: a_tI6HP1FzzUH0r0poa89IN3meo.roa (raw, json)
Hash identifier: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=
Subject key identifier: 6B:FB:48:E8:73:F5:17:3C:D4:1F:4A:F4:A6:86:BC:F4:83:77:99:EA
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 01942368E63BD7C9342C97E5C3EC4485F44F
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/a_tI6HP1FzzUH0r0poa89IN3meo.roa
Signing time: Wed 01 Jan 2025 19:47:44 +0000
ROA not before: Wed 01 Jan 2025 19:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205373
IP address blocks: 185.220.160.0/22 maxlen: 24
2a0b:f940::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e6:3b:d7:c9:34:2c:97:e5:c3:ec:44:85:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jan 1 19:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bfb48e873f5173cd41f4af4a686bcf4837799ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:e8:e7:6a:33:c2:cd:f8:e1:25:26:1c:d4:
98:c9:9e:12:bc:38:9c:0b:4d:ef:a1:1d:4c:2f:69:
85:fa:b4:75:08:7d:1a:7f:d5:f9:11:a8:b5:e7:c8:
84:05:6b:78:22:09:26:b3:06:a4:f7:b5:34:cb:b8:
e3:f0:30:6c:f1:64:b5:b1:eb:b1:7c:81:17:3d:b6:
7f:c0:10:2d:39:9c:92:40:d4:2e:7d:4d:ce:7b:01:
02:d0:6e:ef:32:1d:fe:d9:c4:7c:6c:7a:bc:06:1e:
00:1e:d9:a1:36:64:f8:4c:9f:b8:18:4a:e6:8c:d4:
72:08:21:5e:b1:9e:0c:6e:3a:53:e1:f7:55:4b:28:
db:37:91:98:09:51:a1:aa:51:6b:1d:ea:77:49:02:
06:d6:41:b1:6e:62:12:8b:cb:9b:7c:0b:bd:c9:0a:
3f:50:52:de:8b:17:de:86:dd:86:f8:a2:7b:d0:f5:
e4:2a:31:70:b9:79:45:a2:a4:77:e6:a1:e1:5e:de:
f8:b5:f5:23:b9:1b:8d:33:7b:3c:6b:1e:36:e2:4c:
4a:a7:f7:61:de:42:ee:92:46:d6:1a:6e:9e:9a:2b:
28:1d:f6:99:a4:fe:b5:de:e0:1b:89:4b:b7:84:03:
ed:d9:08:59:fc:f3:b1:17:5c:82:dd:58:2f:dd:2f:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:48:E8:73:F5:17:3C:D4:1F:4A:F4:A6:86:BC:F4:83:77:99:EA
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/a_tI6HP1FzzUH0r0poa89IN3meo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.160.0/22
IPv6:
2a0b:f940::/32
Signature Algorithm: sha256WithRSAEncryption
4f:0b:cd:cd:fc:46:db:49:5e:6a:91:6f:04:ed:ba:53:03:06:
9d:79:ab:51:9d:70:d2:7f:ad:9d:4a:22:44:93:a2:cb:6f:96:
d2:2d:91:11:b9:3d:82:c1:9d:19:15:87:a8:47:ed:cd:af:f9:
f0:1b:b6:f3:89:34:32:22:fb:fd:4b:13:d4:a7:7d:41:92:38:
02:ef:6b:6d:53:56:08:ca:94:50:14:0b:c0:99:04:a4:d8:89:
88:49:30:56:e8:db:f1:c7:8f:ca:a6:78:2b:6c:a9:80:ff:83:
9a:09:76:f7:44:60:df:ab:08:d9:17:c4:6d:5f:13:8c:ab:36:
6f:ac:cf:ab:8c:0e:99:7f:b6:67:df:bd:4a:be:aa:15:13:55:
ba:09:6a:8e:fe:f6:23:7f:8f:9d:47:6b:11:94:21:64:e9:bd:
59:1b:55:e4:4f:b1:12:3a:82:f7:e3:a9:79:ad:7a:1f:44:2e:
fe:31:ec:f2:1d:0f:51:14:98:0b:d6:c9:d8:33:6f:e0:76:e0:
e5:f0:db:17:d1:b4:65:1c:52:ef:e0:93:54:a9:81:41:ac:2c:
6b:fe:51:cd:33:6c:f7:2d:2f:f6:0f:fc:57:45:22:12:c2:39:
e9:b8:4e:bc:7b:eb:ca:86:53:c8:2c:19:54:94:26:74:56:e3:
ce:4c:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:44:19 2025 by rpki-client