Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rKy6KsnSJRH2g8BR9nBTp4q-p1c.roa
File: rKy6KsnSJRH2g8BR9nBTp4q-p1c.roa (raw, json)
Hash identifier: MfZDE0CtyumcANq7r3xNyx7xQQoZ7ENjKyb87BoBGXA=
Subject key identifier: AC:AC:BA:2A:C9:D2:25:11:F6:83:C0:51:F6:70:53:A7:8A:BE:A7:57
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A5100004293C61718D5F81F67CFF6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rKy6KsnSJRH2g8BR9nBTp4q-p1c.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209669
IP address blocks: 185.251.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:51:00:00:42:93:c6:17:18:d5:f8:1f:67:cf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acacba2ac9d22511f683c051f67053a78abea757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:96:96:98:d3:ac:c8:83:1a:70:8a:aa:0e:
9b:62:3d:48:63:2d:9d:9c:df:3e:57:2e:48:df:61:
15:f2:ca:f9:b8:0a:f6:13:4e:86:26:62:11:a8:d3:
05:ea:07:26:50:01:ba:6c:84:dd:9d:c2:59:a9:72:
35:62:fb:51:8f:18:69:d7:14:e0:b0:d1:99:04:e4:
2a:09:30:da:0d:a7:d3:d1:a4:cf:2e:96:0a:33:9c:
70:34:ec:6c:55:5e:91:9d:db:18:f6:89:35:48:7a:
a1:4c:23:39:ad:c3:5f:0e:61:f5:e0:f7:95:06:16:
1b:c8:29:16:06:80:75:6d:9c:e1:9b:d9:af:50:68:
35:19:05:0a:c9:eb:39:10:71:88:b3:52:cc:15:2d:
f2:28:2e:6d:d0:cf:af:e8:4e:8d:6c:3a:65:91:98:
c8:51:40:47:c1:a8:e1:b1:8e:41:bb:85:04:cd:09:
fa:9d:f7:22:23:8e:4a:72:36:a7:f7:08:02:61:c1:
13:b7:fa:5e:93:fe:85:53:11:78:34:73:4a:17:5f:
a8:6d:bc:db:ec:c3:7e:ac:17:23:37:e6:e8:c6:d6:
ee:f2:fb:f5:88:57:1c:b5:6b:c8:ed:31:b3:95:8c:
74:4e:86:9d:9f:32:bd:aa:a1:d8:c2:02:1b:e4:2d:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:BA:2A:C9:D2:25:11:F6:83:C0:51:F6:70:53:A7:8A:BE:A7:57
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rKy6KsnSJRH2g8BR9nBTp4q-p1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.232.0/24
Signature Algorithm: sha256WithRSAEncryption
23:61:fe:0c:45:6b:05:d8:9a:19:63:14:91:fb:ea:ac:00:e0:
91:8a:d9:d3:ce:ba:58:e9:e2:45:db:7f:ef:7f:ad:69:f5:b3:
2b:42:7c:0f:0f:f8:43:4b:9f:4e:60:55:66:85:33:62:d8:e3:
13:f1:93:b9:2b:c2:a1:3f:00:9c:ab:09:13:29:1a:fa:99:3d:
6b:6d:f3:fc:cd:52:19:4d:48:fc:18:72:4a:4d:ed:a5:dd:1a:
cc:90:4d:9c:75:5b:88:51:84:ea:eb:dc:f6:cd:11:ed:36:2b:
3b:f3:fc:d6:a0:44:63:0a:66:93:1f:4f:3b:2c:9c:7a:9a:bb:
36:25:28:f1:13:7a:c7:8d:19:85:78:3f:4d:c5:fb:e1:d7:b5:
70:32:20:fe:95:68:70:5c:f9:93:09:ac:30:2f:7b:60:7f:44:
89:52:2d:db:28:a5:39:7b:5b:86:f6:63:cc:49:9d:96:92:eb:
c6:22:11:1f:92:7a:ea:46:b2:8d:77:f4:c0:cb:d2:7b:4e:b1:
4d:fd:73:7c:63:f1:48:6d:0b:77:e6:8a:b6:6e:d0:e3:13:7f:
e2:6e:54:af:fe:e2:19:89:58:ed:ce:e0:fc:88:5e:09:dd:c0:
f4:ef:df:5d:57:a3:e7:50:e1:c3:0f:ff:ce:00:0a:2f:00:48:
d2:59:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:26 2025 by rpki-client