Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/6AZTajZMqZoSwaR7hhqu_H7CdE0.roa
File: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (raw, json)
Hash identifier: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=
Subject key identifier: E8:06:53:6A:36:4C:A9:9A:12:C1:A4:7B:86:1A:AE:FC:7E:C2:74:4D
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019594D25F2B07CC48286F19BDCAF1F55EC0
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/6AZTajZMqZoSwaR7hhqu_H7CdE0.roa
Signing time: Fri 14 Mar 2025 13:22:49 +0000
ROA not before: Fri 14 Mar 2025 13:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210298
IP address blocks: 185.44.200.0/22 maxlen: 22
185.44.200.0/23 maxlen: 23
185.44.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:d2:5f:2b:07:cc:48:28:6f:19:bd:ca:f1:f5:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Mar 14 13:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e806536a364ca99a12c1a47b861aaefc7ec2744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:7d:28:b6:4c:32:65:04:21:85:b1:69:4a:
9e:d6:9a:1e:73:bd:e4:66:47:eb:60:4a:73:e8:aa:
50:d0:ed:6a:f5:90:e6:48:27:9f:50:ca:41:24:db:
8a:50:72:43:2d:64:e5:6f:e0:4b:b2:af:91:1a:98:
4a:5b:84:b8:31:51:a0:8c:37:55:c3:0c:2b:67:6c:
cd:17:0c:b7:15:76:26:6c:f2:31:56:d2:7d:7d:4b:
b8:00:93:37:c5:2f:4f:19:90:ba:7d:ba:4a:41:4a:
0d:59:45:92:7a:a3:88:b8:73:ee:98:f2:49:de:bb:
2c:f0:7f:7c:45:1d:30:53:64:85:96:aa:83:28:04:
1d:16:d6:40:a3:92:b6:ea:ba:bf:0d:2d:a4:02:84:
31:f4:2b:92:44:1b:d4:d2:45:2a:e1:0c:08:8b:2a:
40:16:97:54:ef:00:97:32:ef:82:98:09:c2:20:33:
ad:d6:13:ef:64:16:cd:bc:c0:e9:f6:fb:c4:2c:38:
f5:2e:f0:4e:3b:b3:c1:cb:4d:72:f9:10:09:48:20:
4e:e8:cb:c8:08:cf:26:ac:e9:96:a6:80:0b:01:07:
8b:b3:20:01:90:99:6c:7a:ff:33:fd:e9:b1:5c:19:
43:7b:ba:ca:62:dd:f2:1f:7b:88:e9:f6:1b:fb:68:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:53:6A:36:4C:A9:9A:12:C1:A4:7B:86:1A:AE:FC:7E:C2:74:4D
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/6AZTajZMqZoSwaR7hhqu_H7CdE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.200.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ae:7e:25:5e:5f:7b:0e:04:de:5b:b2:19:9e:53:f3:65:e1:
39:84:7e:4d:9f:a3:e4:48:a7:10:c0:67:c7:c5:10:d8:6d:f6:
c8:a4:c9:6a:8f:22:30:4a:85:34:0f:19:cb:fb:c2:e5:da:53:
87:ee:b2:5b:b2:c1:7b:b3:35:a4:ca:6e:ec:5a:fd:ef:0b:dc:
5b:7b:dd:41:70:97:c9:86:7d:44:ed:7a:6c:ac:4e:4d:7b:45:
c8:93:cb:dd:8d:9f:ec:71:b6:db:87:c3:f7:87:86:e7:01:76:
29:60:b9:ad:d6:a7:07:e5:2d:4e:a4:0f:c7:fe:d1:42:c3:26:
5b:30:54:38:2b:f0:1e:a6:f7:86:28:78:4c:0b:1f:46:20:7b:
2a:67:6a:b6:2b:e0:6b:38:a3:e9:5f:f4:ee:20:08:cf:79:fe:
ce:94:07:96:db:04:ea:02:46:a8:f8:2c:b5:fc:84:9b:98:fc:
98:22:89:49:94:8c:d4:11:76:ef:1e:7a:1e:4c:bb:99:06:64:
e6:09:21:ea:26:6b:56:35:99:4f:c9:85:36:87:9a:e9:34:bc:
5c:7e:a4:90:40:41:47:ae:95:41:ab:15:44:18:c8:9f:02:bc:
c1:f0:8c:40:52:0c:c3:0b:b0:4b:ff:48:f6:b0:ee:a6:25:29:
f6:f7:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:50 2025 by rpki-client