Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/ed0N60OI4_qO1SXPxnCTduptr6Y.roa
File: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (raw, json)
Hash identifier: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=
Subject key identifier: 79:DD:0D:EB:43:88:E3:FA:8E:D5:25:CF:C6:70:93:76:EA:6D:AF:A6
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0194258F06FA58464752B0CF9E05AC02433A
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/ed0N60OI4_qO1SXPxnCTduptr6Y.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206641
IP address blocks: 185.180.60.0/22 maxlen: 22
185.180.60.0/24 maxlen: 24
185.180.61.0/24 maxlen: 24
185.180.62.0/24 maxlen: 24
185.180.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:06:fa:58:46:47:52:b0:cf:9e:05:ac:02:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79dd0deb4388e3fa8ed525cfc6709376ea6dafa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:a3:bb:a3:7d:48:1a:4b:6d:4b:85:2f:2a:
22:0d:3e:12:80:37:85:04:f2:dd:d9:5a:63:eb:e3:
e9:60:98:c4:50:74:bf:c4:9a:05:d5:69:10:4b:30:
93:28:c0:d6:8f:a4:62:2f:75:62:3f:cc:a4:7c:30:
12:49:0e:20:85:1e:2d:d9:f4:79:0e:f4:6b:c3:09:
d4:42:5e:e6:fe:d1:94:8e:ec:7b:51:36:9d:43:41:
d4:e4:3c:96:dd:00:7b:a8:12:e9:72:dc:5e:60:98:
a4:30:3f:8a:12:fb:42:3f:9c:ab:08:74:fb:e0:45:
cf:a8:25:5f:62:4e:49:67:25:c2:bb:6d:7f:21:fa:
4b:0a:c6:d1:48:b8:5f:ef:99:23:b6:95:e6:cd:2d:
79:fa:e4:47:15:45:2a:a3:e7:df:99:a2:ea:89:f1:
26:6b:4d:ba:f1:68:e1:e0:9e:ec:d0:12:23:28:57:
57:35:ad:dd:a6:e9:09:00:fb:89:a3:d2:5e:c6:fc:
2e:f3:1e:6d:57:d6:fa:4d:ac:ba:be:fc:46:3f:10:
77:78:d5:32:8a:1a:58:cd:00:ed:53:94:06:71:ce:
47:2e:5e:3b:1f:cd:19:cf:c3:df:04:a2:63:7c:0b:
0d:e7:f9:c3:4f:0b:84:ce:b6:16:db:84:d5:2c:e7:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:0D:EB:43:88:E3:FA:8E:D5:25:CF:C6:70:93:76:EA:6D:AF:A6
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/ed0N60OI4_qO1SXPxnCTduptr6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.60.0/22
Signature Algorithm: sha256WithRSAEncryption
66:0e:76:81:d3:29:10:9d:b8:11:49:15:ce:f7:f5:14:c7:75:
cb:71:64:7a:96:2d:69:f0:a7:6f:4b:3d:36:25:57:58:ee:61:
65:0e:43:a5:12:e5:44:d7:06:6c:d3:ba:b6:6b:98:89:24:c2:
ff:a7:f4:55:02:a8:e4:20:be:75:85:eb:7e:51:ae:63:fc:99:
a6:c6:21:2d:ca:18:fc:75:ee:74:85:b4:ab:f6:8d:eb:61:29:
e3:16:1b:91:5d:4a:8f:a7:02:75:d6:24:4d:e6:b1:40:7f:b4:
79:cf:05:66:95:53:c1:09:05:fe:1a:dd:94:1a:8a:18:3e:81:
23:6a:39:c1:b6:28:76:8d:53:3e:fb:da:64:aa:18:47:91:ef:
df:15:86:c2:ff:2a:ae:18:05:e5:51:f0:dc:66:50:0e:33:be:
eb:e3:46:6c:7d:33:96:5b:2b:3f:d8:d8:d3:1c:74:9e:74:c2:
99:6e:43:a3:4d:8e:50:1a:91:fb:84:9f:bf:4d:8f:78:ed:5e:
19:23:49:54:9c:20:23:7a:5a:31:c7:b6:ee:3c:65:a6:e2:e0:
f6:55:00:be:c7:d9:8e:e8:57:a7:33:dc:f2:25:ae:ab:45:08:
c3:38:14:cc:bd:4b:70:00:c4:c1:89:26:fd:a7:f7:a5:14:42:
ec:28:bb:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwb6WEZHUrDPngWsAkM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj
Y2U0YTQwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRkMGRlYjQzODhlM2ZhOGVkNTI1Y2ZjNjcwOTM3NmVhNmRhZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/eju6N9SBpLbUuFLyoiDT4SgDeF
BPLd2Vpj6+PpYJjEUHS/xJoF1WkQSzCTKMDWj6RiL3ViP8ykfDASSQ4ghR4t2fR5
DvRrwwnUQl7m/tGUjux7UTadQ0HU5DyW3QB7qBLpctxeYJikMD+KEvtCP5yrCHT7
4EXPqCVfYk5JZyXCu21/IfpLCsbRSLhf75kjtpXmzS15+uRHFUUqo+ffmaLqifEm
a0268Wjh4J7s0BIjKFdXNa3dpukJAPuJo9Jexvwu8x5tV9b6Tay6vvxGPxB3eNUy
ihpYzQDtU5QGcc5HLl47H80Zz8PfBKJjfAsN5/nDTwuEzrYW24TVLOeHFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHndDetDiOP6jtUlz8Zwk3bqba+mMB8GA1UdIwQY
MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt
MTRmYWIwMjQ0OTQ4LzEvZWQwTjYwT0k0X3FPMVNYUHhuQ1RkdXB0cjZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4
LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubQ8MA0G
CSqGSIb3DQEBCwUAA4IBAQBmDnaB0ykQnbgRSRXO9/UUx3XLcWR6li1p8KdvSz02
JVdY7mFlDkOlEuVE1wZs07q2a5iJJML/p/RVAqjkIL51het+Ua5j/JmmxiEtyhj8
de50hbSr9o3rYSnjFhuRXUqPpwJ11iRN5rFAf7R5zwVmlVPBCQX+Gt2UGooYPoEj
ajnBtih2jVM++9pkqhhHke/fFYbC/yquGAXlUfDcZlAOM77r40ZsfTOWWys/2NjT
HHSedMKZbkOjTY5QGpH7hJ+/TY947V4ZI0lUnCAjeloxx7buPGWm4uD2VQC+x9mO
6FenM9zyJa6rRQjDOBTMvUtwAMTBiSb9p/elFELsKLse
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:21:18 2025 by rpki-client