Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ROvv9TPkeXPRWLxqUW28g2--6Y0.roa
File: ROvv9TPkeXPRWLxqUW28g2--6Y0.roa (raw, json)
Hash identifier: hKGeweYQK0tQ0ZG087pAPfuVznSePT17k/lDAGg+mDE=
Subject key identifier: 44:EB:EF:F5:33:E4:79:73:D1:58:BC:6A:51:6D:BC:83:6F:BE:E9:8D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422202571449909496337E6DAE26D5F70
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ROvv9TPkeXPRWLxqUW28g2--6Y0.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:25:71:44:99:09:49:63:37:e6:da:e2:6d:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ebeff533e47973d158bc6a516dbc836fbee98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:f0:dd:80:55:64:11:76:84:09:9d:02:a7:
33:72:ac:21:0c:fa:8e:27:63:81:23:aa:8b:ea:bf:
4a:a4:1b:2f:ec:43:f3:32:23:6b:8c:9d:e9:5d:22:
b0:65:a3:4d:94:8b:2c:95:66:59:12:cb:47:74:38:
50:90:a6:19:f4:c0:9a:fe:70:9d:45:9a:48:d6:93:
37:cf:41:b3:ad:e5:22:7f:2e:e3:a0:fa:1a:c2:28:
04:d7:7d:c5:9f:46:22:07:40:66:9e:da:63:e8:39:
87:01:49:f3:51:82:37:84:80:bf:93:ab:cf:e7:a4:
32:f8:29:a5:d3:8f:d0:fc:bd:a4:95:de:63:72:cb:
de:5a:f4:71:07:1e:87:0e:5f:7d:a7:d4:c2:f8:cd:
c0:0d:92:b2:46:40:71:41:0d:41:3a:db:e1:87:d4:
f0:c4:95:d5:ee:c2:bb:e6:d4:76:28:0d:d3:4b:3e:
1d:2a:bd:b6:47:cc:3a:64:af:da:93:fe:7a:58:c8:
c1:fc:62:f1:29:aa:3f:8f:d0:6b:71:9d:17:82:d9:
37:7e:52:05:2d:63:c7:b3:4c:6a:86:68:f6:3f:39:
eb:00:b2:05:19:94:c3:9e:91:08:05:45:8e:46:aa:
a4:15:0b:01:5c:07:3e:9f:d9:f5:b6:72:92:32:df:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:EF:F5:33:E4:79:73:D1:58:BC:6A:51:6D:BC:83:6F:BE:E9:8D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ROvv9TPkeXPRWLxqUW28g2--6Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
51:98:a7:58:1a:8b:9c:82:c0:e9:74:da:82:13:1b:09:0a:ed:
17:fb:56:14:43:fb:18:02:61:dc:cd:c0:a7:7d:6f:04:e0:44:
3d:d0:a8:2b:f6:71:2d:16:c1:60:fe:d2:1f:6b:4f:ec:d1:44:
e5:93:61:57:cc:f7:9d:29:5b:77:b6:33:1e:c8:14:76:d6:15:
d1:19:0c:d8:69:87:5d:23:14:02:14:6c:14:02:04:10:87:f9:
52:18:70:44:76:7b:c1:11:ce:57:63:c3:c7:df:a6:1a:9e:a5:
a2:b5:d5:d2:c5:6f:75:c8:b3:d3:45:e2:46:e8:da:7c:34:fa:
fe:46:b7:43:36:09:b5:09:a6:3f:42:e6:69:8f:96:e0:8b:40:
0e:dc:7b:20:e1:92:fc:94:bd:5e:a2:9a:ff:ca:78:74:63:99:
da:ef:23:16:9c:ce:f2:12:58:4d:48:a9:06:f9:6c:9a:08:27:
53:57:35:78:2e:27:87:a6:80:7f:24:6d:75:ce:5e:e4:01:54:
c1:0b:78:cd:b5:29:16:3e:1e:a3:39:be:05:3e:b1:36:ac:85:
b6:cc:08:72:7c:35:47:23:5f:8a:df:cc:f7:34:6a:0f:8c:19:
e5:93:13:09:9c:1d:db:c1:3d:30:2f:dc:be:82:70:00:16:1d:
43:d1:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:27 2025 by rpki-client