Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2myKP1Xo3HV2idUGZ1qX4712HM4.roa
File: 2myKP1Xo3HV2idUGZ1qX4712HM4.roa (raw, json)
Hash identifier: 6yC8Panx1JaZ7cTBdp62WY781lJjZavtQloXQKYSy3M=
Subject key identifier: DA:6C:8A:3F:55:E8:DC:75:76:89:D5:06:67:5A:97:E3:BD:76:1C:CE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422202945BF1122E79B331DC5DD0B3F47
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2myKP1Xo3HV2idUGZ1qX4712HM4.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:45:bf:11:22:e7:9b:33:1d:c5:dd:0b:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6c8a3f55e8dc757689d506675a97e3bd761cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:e9:0d:59:1d:05:62:21:48:d5:8c:7d:0f:
0f:e7:f3:15:ac:42:51:06:fd:c5:0f:b5:85:0d:9a:
6d:a3:fd:c9:05:89:a1:c3:44:ab:42:1e:fc:53:e7:
63:33:d4:64:2f:b2:ef:4c:19:4d:ad:17:0e:fc:bb:
36:a7:4a:50:2a:12:67:9c:dd:25:a7:6a:ee:58:b2:
e5:8c:a8:f7:f9:5a:6c:1c:ed:60:66:83:00:d2:7a:
2c:09:f3:f1:ef:fb:4a:7e:d1:e2:98:6f:89:fb:a8:
e9:aa:ed:32:81:81:51:8f:12:01:3c:75:d8:3c:cb:
2d:21:24:36:eb:7b:37:bb:ff:22:bb:74:6a:2a:f4:
fe:96:8b:fd:97:7b:d5:05:ff:7b:f4:06:10:25:60:
2b:e7:ba:a8:23:4e:4f:58:e2:aa:33:4f:0b:7e:87:
ec:a9:c1:2e:20:8e:1c:1c:c4:c0:8f:62:0c:f9:90:
96:35:32:9e:e8:b3:64:3e:43:17:01:eb:13:eb:b1:
c5:b3:34:c1:f4:30:ac:b7:92:83:4e:90:72:a4:ca:
51:1d:d1:6f:a8:20:14:13:cd:9a:c6:2f:35:1e:b9:
de:ae:5d:1c:aa:7e:45:9d:0b:3c:81:98:96:7a:03:
68:64:95:06:d8:8c:9a:df:53:fe:ad:26:d6:df:78:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:8A:3F:55:E8:DC:75:76:89:D5:06:67:5A:97:E3:BD:76:1C:CE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2myKP1Xo3HV2idUGZ1qX4712HM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:90:bf:a8:76:dc:9b:1d:48:64:06:a5:da:09:59:05:15:ce:
04:7b:db:b3:1c:c7:5e:22:91:c1:b4:cd:87:63:a8:2d:d5:2f:
0a:d6:1e:71:40:0c:dc:af:f2:de:2a:a2:79:a7:f3:a0:77:a1:
db:ad:5b:76:ad:9c:7b:2d:a2:a2:f5:68:21:05:d6:c8:59:10:
16:30:f1:ab:ed:78:c7:40:70:79:88:5e:d8:e0:a4:f5:39:9b:
81:bb:a8:7e:85:9b:58:48:03:e0:fc:00:18:62:d7:4e:ba:78:
75:5e:eb:50:87:02:41:cd:23:e7:ea:5a:14:f3:7b:52:f2:a3:
ed:d1:67:d4:4c:1d:3e:bd:cf:93:46:c2:e1:d9:c3:7e:e6:12:
25:83:99:b3:54:9e:bf:80:2e:0c:60:dd:bf:97:04:67:c5:f1:
6c:e0:99:6f:14:ab:58:cb:6d:5a:80:91:5d:f0:84:80:07:db:
f8:4d:0e:25:5b:b4:cb:1c:c9:08:54:7a:bb:09:22:0c:f5:2a:
b6:63:ad:54:68:4c:61:94:67:86:62:3f:cf:ed:be:41:67:d7:
c7:be:1f:e8:4d:66:ff:e9:f6:65:ed:c6:b5:cd:4f:06:f1:ef:
d8:e5:c4:c7:7a:ee:54:90:e5:28:b9:4a:6e:88:3a:df:a7:b0:
19:e1:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:52 2025 by rpki-client