Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zEztA1YIsqgvjUE56U9Yo7Z_gyw.roa
File: zEztA1YIsqgvjUE56U9Yo7Z_gyw.roa (raw, json)
Hash identifier: aMUC3H01I2bSdSbJCqTqJGZPNZqBLvPRY7A/NJEURUk=
Subject key identifier: CC:4C:ED:03:56:08:B2:A8:2F:8D:41:39:E9:4F:58:A3:B6:7F:83:2C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203539FA9DCB0A117D1C263B596140
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zEztA1YIsqgvjUE56U9Yo7Z_gyw.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198193
IP address blocks: 185.246.56.0/23 maxlen: 23
185.246.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:39:fa:9d:cb:0a:11:7d:1c:26:3b:59:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc4ced035608b2a82f8d4139e94f58a3b67f832c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:5b:05:4c:ed:21:22:7f:c8:98:b1:db:4b:
20:09:42:77:1c:ae:45:bf:80:b9:49:97:b1:6e:44:
77:0f:84:10:39:78:34:ac:78:91:4f:1d:78:a9:9d:
13:87:0f:7e:1b:67:4d:b5:84:3c:16:8c:58:8b:d2:
85:77:6d:cc:6b:d7:7a:32:e3:fb:77:66:e5:37:3f:
e6:5e:4a:98:88:e5:53:51:8b:1c:82:cd:42:27:57:
49:e6:1d:a1:b8:6c:35:42:7d:96:99:aa:52:f1:7f:
b0:e3:77:98:ac:1e:11:c0:13:d0:4e:ed:29:39:e1:
4a:3f:56:86:e1:61:32:a3:08:ba:0f:4c:c4:f3:ee:
86:f0:06:b0:70:0a:cb:1e:8c:7b:84:2a:b9:88:94:
06:04:ea:1a:71:38:e9:ee:dd:95:5d:fc:12:0c:6b:
f1:4e:d9:b0:4f:77:37:2b:a3:2c:85:75:34:87:ca:
53:51:7c:1d:ea:76:37:0f:fa:7e:f0:e1:3f:05:86:
3a:d5:7d:3d:5d:be:02:38:bb:9a:99:ca:d3:0d:47:
75:22:6a:e0:85:c4:00:7e:59:d5:d2:71:47:4b:4c:
d6:27:af:36:90:2a:3c:1f:b9:81:aa:9c:6f:6d:dc:
e2:bd:a8:ef:7f:f4:96:90:29:96:11:39:c6:2a:d7:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:ED:03:56:08:B2:A8:2F:8D:41:39:E9:4F:58:A3:B6:7F:83:2C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zEztA1YIsqgvjUE56U9Yo7Z_gyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:99:19:b2:9f:b7:39:c2:1d:e7:e0:bf:3d:ea:da:af:72:b2:
5c:18:99:49:df:2c:d6:2f:19:64:29:cf:04:b3:5f:71:22:a7:
af:86:05:c7:55:e8:1d:8e:27:f6:66:01:03:6e:43:e0:22:7c:
1c:57:02:ff:7a:10:6a:d1:66:d6:df:2e:29:60:ce:a9:f8:dd:
5a:ef:d9:b1:b2:75:16:1d:c9:47:4b:ad:48:e0:43:05:72:47:
f9:56:b7:27:03:94:6b:90:6a:d9:a3:68:3b:ad:f7:e0:2a:5b:
6b:3e:db:95:85:9d:e5:65:1f:60:0a:45:4b:10:b9:6c:c4:53:
4a:38:93:33:4c:27:43:d0:fa:d1:72:f9:b2:86:91:8d:a8:96:
aa:71:59:e2:9d:92:7f:61:3e:8f:c7:93:d0:4e:1e:3e:d8:ef:
c9:6e:dc:cf:ec:ab:af:94:66:98:4c:92:d3:71:34:6b:2a:aa:
7e:ac:80:7c:4c:49:fb:51:b3:47:61:38:6f:41:69:48:9f:ff:
fe:1f:31:f7:c6:d4:bf:22:07:75:da:3a:0b:3b:29:24:8c:a5:
94:da:eb:88:1b:9a:6c:d3:f2:2e:01:5b:0f:f2:ae:11:71:5c:
3a:97:0e:98:ca:7c:dd:6b:b8:f5:29:a2:2e:1f:fe:e7:f9:c1:
6d:bc:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:33:37 2025 by rpki-client