Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/6vbfFj5TD4fDaSTru2yjQXF2OFk.roa
File: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (raw, json)
Hash identifier: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=
Subject key identifier: EA:F6:DF:16:3E:53:0F:87:C3:69:24:EB:BB:6C:A3:41:71:76:38:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 019426D8B7E341A6139506151377B1C020EE
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/6vbfFj5TD4fDaSTru2yjQXF2OFk.roa
Signing time: Thu 02 Jan 2025 11:48:44 +0000
ROA not before: Thu 02 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60414
IP address blocks: 85.194.238.0/23 maxlen: 23
89.44.211.0/24 maxlen: 24
185.31.136.0/22 maxlen: 22
2a00:bbe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:b7:e3:41:a6:13:95:06:15:13:77:b1:c0:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Jan 2 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf6df163e530f87c36924ebbb6ca34171763859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:92:83:72:e5:76:01:90:99:1c:b6:ca:45:
fc:22:17:d5:b5:2e:98:db:34:b2:78:8d:08:14:a8:
dd:35:e5:b0:41:19:5c:b4:c2:32:b7:53:b1:75:bd:
7d:54:f9:c8:71:3e:a2:6d:c3:d3:fe:38:81:d0:a6:
aa:8a:cd:8f:94:b8:0d:d3:00:3c:62:a5:13:f3:ac:
5c:4c:a3:1c:e6:09:0e:08:43:00:bb:b9:0f:48:df:
ce:de:f8:66:7b:a0:51:61:35:93:cb:f8:e2:32:cb:
53:f4:e9:7b:f0:05:8d:f7:1c:cf:f7:60:21:24:cc:
2a:b0:e9:f7:07:d9:06:c0:de:83:ae:36:4c:32:16:
9c:1e:13:32:a5:f2:a1:1b:b6:20:ed:0a:fc:9f:16:
ab:98:71:1e:7b:c1:ee:62:95:89:22:25:f8:d3:14:
3d:ec:ab:34:13:41:bb:f8:a7:86:99:4e:c7:28:e3:
f9:95:d9:b6:2e:c8:12:87:9c:04:59:83:f5:1c:2e:
3a:3a:e8:a5:e0:e3:11:dc:f7:8b:cd:0d:29:e8:d9:
ed:31:e6:a3:07:b6:97:03:bf:b0:08:ac:c7:88:a5:
d8:34:eb:50:3a:87:b6:68:d5:1b:75:e7:c5:62:74:
fa:90:2d:33:2d:9a:bb:18:92:f1:65:31:e1:4f:a2:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:DF:16:3E:53:0F:87:C3:69:24:EB:BB:6C:A3:41:71:76:38:59
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/6vbfFj5TD4fDaSTru2yjQXF2OFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.238.0/23
89.44.211.0/24
185.31.136.0/22
IPv6:
2a00:bbe0::/29
Signature Algorithm: sha256WithRSAEncryption
02:23:69:09:4a:8b:04:49:21:8f:d9:b5:f8:c0:5c:d3:d1:dc:
4b:c4:ff:17:05:f7:25:14:92:a3:4f:7e:8a:39:f9:d8:34:37:
6f:d5:31:9d:e3:b7:8c:a6:8a:22:ba:a0:0f:bd:12:00:57:1e:
ea:65:d3:38:7e:ae:6d:93:1d:4f:f2:94:af:69:85:80:07:32:
0e:ff:7b:ad:d7:b2:1e:86:6f:9b:10:39:31:a2:88:99:cc:06:
cb:5d:71:c3:a5:73:aa:f5:32:c3:fb:a7:55:d2:ea:42:ff:b0:
77:3a:36:07:51:0f:82:5c:d7:d2:20:e0:e2:97:ba:18:6c:5e:
b6:7b:3f:e0:d4:88:99:f4:42:fb:9e:36:2f:f2:a6:78:29:15:
e6:3a:e5:88:10:39:26:fc:78:c1:2e:98:99:60:c2:22:6e:56:
1c:90:07:e4:86:aa:cb:cd:f5:be:81:5d:88:ad:c4:76:99:7b:
49:ce:f8:1b:90:03:5f:d4:e9:94:08:4d:5e:bf:32:04:75:a0:
70:cc:d6:f6:21:a6:23:22:36:1e:8f:1c:2d:11:eb:3e:b7:ee:
c3:f7:3b:96:70:d5:5d:9d:d0:de:cc:67:ff:75:4c:b4:74:97:
d9:81:aa:e2:91:e4:eb:64:c2:d8:6b:02:34:d9:d4:78:ce:6c:
e5:c2:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:18 2025 by rpki-client