Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rMv3anKmZ4dFbEWWtlyD1YunAWo.roa
File: rMv3anKmZ4dFbEWWtlyD1YunAWo.roa (raw, json)
Hash identifier: 9+PCvYEN2PKI1wRsAGekrlOvNG7VQBbTkB5xEe5vkss=
Subject key identifier: AC:CB:F7:6A:72:A6:67:87:45:6C:45:96:B6:5C:83:D5:8B:A7:01:6A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4BC94090D70CF7FD87E2A30B2BF6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rMv3anKmZ4dFbEWWtlyD1YunAWo.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138145
IP address blocks: 85.209.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:c9:40:90:d7:0c:f7:fd:87:e2:a3:0b:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=accbf76a72a66787456c4596b65c83d58ba7016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:69:e9:42:b6:d9:b3:29:00:f7:09:21:75:
68:78:10:1a:e1:4a:68:89:f0:0f:ef:00:93:ee:ff:
4f:91:0e:d5:f2:49:64:7c:a0:21:89:fa:1a:52:65:
e9:b7:a0:08:66:5b:9b:9d:9a:4a:7a:fe:28:d8:b4:
06:bd:4e:44:0d:fd:45:f5:4a:33:ed:3f:8d:39:66:
73:e5:fe:c7:6f:2e:26:d8:21:87:af:eb:bd:29:1c:
a7:21:ed:45:e3:3f:17:3b:c5:d2:48:79:51:64:8d:
5a:a9:bd:46:65:ea:70:de:7e:e0:4e:b8:3f:72:3b:
5b:bf:e6:18:04:78:78:ba:20:96:dc:51:d6:e1:ad:
9c:b4:43:77:97:72:73:87:69:ef:82:46:47:98:82:
bc:b4:8c:67:94:b6:96:46:03:30:57:ad:77:4d:69:
06:ce:bc:d5:9e:4f:96:f0:d1:7d:c8:1d:d2:a9:c2:
b9:91:e2:ab:a6:72:98:86:a2:d8:0e:3a:34:01:5c:
3d:90:71:d5:6b:a7:75:e1:f3:da:6c:b9:45:4e:f6:
53:11:4c:40:64:55:37:49:15:42:69:37:ac:34:cf:
47:29:78:75:8a:2c:ba:02:9c:2e:65:2d:b0:e3:4a:
5e:e9:bc:8c:4b:2e:aa:2e:13:77:d3:87:b0:0d:bc:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:F7:6A:72:A6:67:87:45:6C:45:96:B6:5C:83:D5:8B:A7:01:6A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rMv3anKmZ4dFbEWWtlyD1YunAWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:70:6b:09:6b:d3:90:02:85:4f:d7:d5:db:a0:7e:4d:a2:98:
d3:38:ea:72:29:54:b0:c7:fc:04:69:76:42:66:7f:c8:e6:bf:
f2:a4:30:b6:cd:ce:bc:b3:6a:2c:86:55:62:23:52:e2:fa:62:
c6:63:73:14:83:36:5a:bb:be:ef:42:5d:f8:fa:d7:63:d7:87:
62:e4:cd:41:e2:3d:e2:e9:0f:6b:f6:23:24:31:b3:2a:a9:bd:
ba:9f:83:b5:61:49:51:b0:79:dc:f3:62:eb:47:bf:66:cf:12:
21:78:db:6f:3f:2f:5b:96:d9:06:1c:6d:f3:97:db:a7:d3:4e:
1d:f4:7c:23:8f:4e:52:b7:af:65:7d:79:b3:54:3d:7b:df:fc:
da:54:a0:25:98:d9:f0:c1:be:2a:81:1a:48:4d:b2:26:08:35:
99:82:9b:0b:7d:1a:3d:9f:dd:89:fb:46:6a:81:c7:0b:72:95:
9c:4a:14:e2:5d:0d:e0:68:96:ad:40:d5:61:5f:6e:ed:72:a4:
93:c4:28:b3:36:ae:e0:65:46:14:8f:e6:f3:c9:3a:2e:cb:b7:
ec:7e:c7:a9:c7:ab:cc:92:8b:95:50:fa:54:eb:d0:a3:18:29:
a0:bd:a4:a6:8c:60:34:d3:42:71:d8:0f:04:a1:1c:25:df:9c:
c8:a3:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:22 2025 by rpki-client