Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6iHbX_9pP-jY_Y83cWEh4HtqsV8.roa
File: 6iHbX_9pP-jY_Y83cWEh4HtqsV8.roa (raw, json)
Hash identifier: 5ThzvQgVX/w74eeoardd4oRet2SThmRnauzLjdWWIz0=
Subject key identifier: EA:21:DB:5F:FF:69:3F:E8:D8:FD:8F:37:71:61:21:E0:7B:6A:B1:5F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422205002A34B1B06E5C4DB8A0C281593
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6iHbX_9pP-jY_Y83cWEh4HtqsV8.roa
Signing time: Wed 01 Jan 2025 13:48:50 +0000
ROA not before: Wed 01 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212830
IP address blocks: 185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.223.60.0/22 maxlen: 24
194.124.68.0/23 maxlen: 24
194.124.68.0/24 maxlen: 24
194.124.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:50:02:a3:4b:1b:06:e5:c4:db:8a:0c:28:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea21db5fff693fe8d8fd8f37716121e07b6ab15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:09:f1:79:3d:ab:6e:c3:52:b1:12:a5:c5:
78:7b:95:20:4d:d7:eb:70:b3:26:c1:eb:ad:86:48:
6e:22:28:44:a1:f2:71:d4:32:75:62:b9:3b:fe:db:
9b:b8:30:5f:9c:a4:ba:87:7c:06:1b:16:c7:7f:48:
6f:db:ac:a2:53:8d:f6:77:bb:c9:e3:29:1d:0c:13:
e6:f1:4c:f4:b7:6a:bc:d8:0a:d3:8b:79:e8:87:1f:
2a:04:53:10:c6:01:7d:73:48:dc:96:86:f6:d8:36:
c0:38:aa:72:05:c7:4a:83:a1:0d:b6:d3:06:b7:f4:
6d:e8:bd:c3:d2:04:b8:77:76:d7:ba:91:46:e9:aa:
75:e8:26:00:82:61:4b:d5:de:e9:a6:ee:0c:11:31:
4e:54:de:86:cb:36:27:e2:9c:5e:00:6d:f5:14:82:
67:de:5b:f7:0a:0e:ea:43:e1:80:50:e9:d1:65:aa:
de:e7:68:38:bb:3c:f5:e5:74:50:93:5d:c5:3c:70:
2d:09:93:22:e0:fb:c3:a1:85:5a:24:48:d1:3f:0d:
d7:f8:68:95:33:4f:d0:56:5c:4c:ad:45:3d:32:91:
33:9f:0b:73:66:2b:35:f8:63:bd:cc:a8:bf:86:e8:
ab:00:fb:63:d4:ff:75:bf:03:00:d9:68:cb:70:19:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:DB:5F:FF:69:3F:E8:D8:FD:8F:37:71:61:21:E0:7B:6A:B1:5F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6iHbX_9pP-jY_Y83cWEh4HtqsV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.48.0/22
185.128.52.0/22
185.175.152.0/22
185.199.44.0/22
185.223.60.0/22
194.124.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ad:40:2c:8c:6b:b9:5b:a9:00:c1:6f:de:3d:42:06:8d:cf:
83:29:30:4d:5d:1e:cc:87:a2:0f:77:de:b2:e8:45:a1:7e:e5:
92:cb:aa:23:0c:0f:54:34:84:ae:5a:d3:f6:75:42:e2:aa:01:
06:ea:2a:a4:51:55:14:84:1f:54:ca:67:46:bd:c3:a4:15:cd:
aa:03:9a:91:72:66:49:2b:ec:31:23:79:2d:82:b7:23:9c:c5:
b4:ed:b7:2d:5a:bf:f1:fb:b6:35:05:7d:a3:70:69:f9:f4:44:
cd:5b:02:23:85:77:44:00:d2:18:b3:56:fd:98:17:8c:16:41:
af:59:5b:2e:0a:7a:75:0d:82:17:23:57:1d:97:96:12:7e:2f:
f1:6a:88:68:52:df:46:34:dc:2e:ab:bb:97:8e:70:26:21:13:
4c:15:34:ca:17:74:e7:ed:b8:1a:87:95:cb:7d:dc:75:4c:13:
05:3e:e4:eb:a6:60:b9:a0:a6:1b:cf:98:e0:7e:e6:4c:42:a6:
0c:d0:84:6b:e4:1e:3d:d8:78:77:2b:c1:70:ec:06:c9:e0:10:
0f:48:37:b4:38:c1:a5:1b:c9:ba:d4:81:5e:0a:2b:09:bc:56:
6f:b2:50:2e:b7:d7:b8:70:df:69:ee:84:1d:db:a3:4c:d8:ba:
b9:ac:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:09 2025 by rpki-client