Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4v6H15JGDHhIA6VDyeQZn7ZQP0Y.roa
File: 4v6H15JGDHhIA6VDyeQZn7ZQP0Y.roa (raw, json)
Hash identifier: NMwztjoPf8DYiCnV/EHz+S9h6jVh1RzYLvfDVrFc1xU=
Subject key identifier: E2:FE:87:D7:92:46:0C:78:48:03:A5:43:C9:E4:19:9F:B6:50:3F:46
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019620C0DCF63C68E35951BAD9DCAE01D0E3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4v6H15JGDHhIA6VDyeQZn7ZQP0Y.roa
Signing time: Thu 10 Apr 2025 17:30:32 +0000
ROA not before: Thu 10 Apr 2025 17:30:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 185.209.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:c0:dc:f6:3c:68:e3:59:51:ba:d9:dc:ae:01:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 10 17:30:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2fe87d792460c784803a543c9e4199fb6503f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:cc:79:3e:c7:d0:22:68:83:9e:da:fc:6b:
92:0c:29:af:af:0f:64:da:2c:74:7a:18:7c:0b:97:
2b:c0:a6:b8:28:f3:48:ab:85:39:89:12:0c:be:78:
ba:9d:63:64:e2:ca:6f:90:96:9b:ae:65:e1:8d:5a:
62:98:5f:40:06:26:e5:08:3e:57:88:97:58:f0:40:
7c:c3:2a:c6:d2:72:64:be:c5:e0:e2:2e:81:ba:08:
d8:53:9b:7b:27:a3:83:14:88:b2:bf:28:8e:7b:bb:
fb:38:4a:d1:f1:68:d8:20:07:ab:93:8a:51:3f:78:
13:e2:18:6d:e1:ad:0f:40:bf:a2:c8:3a:b1:d4:c2:
53:c6:31:e4:bd:26:92:ac:c4:6e:51:67:20:5d:4d:
74:d2:9a:fb:7c:a5:63:8d:33:36:f2:88:ac:db:af:
a9:ac:3f:5d:a4:03:51:b8:eb:e0:6b:6a:dd:0f:82:
3b:c8:c7:87:74:e1:57:2e:9a:be:1e:ed:3d:2b:b0:
10:77:f0:ae:42:ef:3b:5a:1f:74:4f:40:31:6b:6e:
11:0a:36:2a:c4:03:46:e1:a6:99:9c:29:b1:3d:85:
92:87:0e:df:ff:a4:17:62:78:b2:4c:ca:3d:87:a6:
d3:47:09:ae:0a:ef:3b:10:f4:d3:f2:63:9a:4e:49:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:87:D7:92:46:0C:78:48:03:A5:43:C9:E4:19:9F:B6:50:3F:46
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4v6H15JGDHhIA6VDyeQZn7ZQP0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.74.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:c2:0d:cd:2f:df:3f:dd:76:5c:22:47:f2:d1:d9:bc:48:
17:7f:3f:b0:98:43:00:da:2b:b7:3b:6f:57:6d:fd:37:5e:56:
6f:ed:3f:e0:03:24:ba:be:0e:67:8d:87:9a:d3:ae:c0:cd:29:
84:dd:a3:9d:e3:6f:d4:53:20:8a:d5:28:85:2b:07:78:47:87:
cf:7e:4b:4b:fe:2f:5b:7e:a7:75:88:f6:82:24:39:a3:83:cc:
2f:7d:97:24:6e:35:96:1f:9b:f9:80:02:41:04:b0:c1:a0:bd:
f7:80:b8:e3:6b:b5:ff:47:28:0c:68:bd:dd:d0:ad:12:13:4a:
6f:cd:b3:c8:2d:8e:d0:c8:9f:3c:fa:74:90:7d:73:70:f8:63:
40:34:f1:d4:16:52:12:9a:2a:9e:26:52:12:92:ec:41:a8:5b:
72:34:c8:71:1a:7b:8e:bd:4c:2d:a6:24:5e:e7:80:9a:2f:9e:
3b:6e:40:b7:bb:34:62:62:1e:61:db:8d:e7:3f:bc:8c:03:26:
7c:2e:98:fd:22:ee:db:01:d7:29:69:90:f9:8b:18:d2:8d:cf:
78:c1:93:57:73:82:1d:ae:92:5d:8f:c7:c8:98:d0:1b:0e:64:
51:0c:77:f1:d9:aa:b5:57:b9:53:f3:37:50:04:50:f4:77:cc:
8d:2f:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:09:06 2025 by rpki-client