Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/SX0Et8xCJ-oQPSZhA1vLwpgECss.roa
File: SX0Et8xCJ-oQPSZhA1vLwpgECss.roa (raw, json)
Hash identifier: GtBoUqmPl7+e01rEjLRBIu11uahmgFfyYOp4+G1ts2k=
Subject key identifier: 49:7D:04:B7:CC:42:27:EA:10:3D:26:61:03:5B:CB:C2:98:04:0A:CB
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 0194258F9A017104592F479A44A40CBFC382
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/SX0Et8xCJ-oQPSZhA1vLwpgECss.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202085
IP address blocks: 185.160.140.0/24 maxlen: 24
2a0d:1580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:01:71:04:59:2f:47:9a:44:a4:0c:bf:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497d04b7cc4227ea103d2661035bcbc298040acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:d0:59:90:a6:cd:66:4a:c7:0a:05:00:e4:
9d:f8:61:18:99:fc:7c:0e:8a:17:09:da:77:d9:02:
76:4b:05:8f:d9:7e:36:bc:1a:0e:65:19:a7:92:e5:
fc:42:68:c2:11:03:70:b7:c7:03:73:19:4e:b8:64:
7c:21:08:5f:9c:67:63:2b:bf:02:1b:ee:8b:d4:45:
4c:5b:9a:b6:31:b2:fe:40:14:89:a6:92:32:a6:df:
22:96:de:e6:6e:50:2a:e7:d2:c5:1b:28:34:f4:79:
8c:d9:fa:4a:c8:5c:93:37:ee:39:26:2e:fc:97:b2:
33:15:bb:9f:5d:6a:1f:d2:13:f3:1c:a9:80:0e:1c:
f1:e0:4d:b3:17:8a:7e:d8:8b:b1:a4:f4:17:7c:b8:
b2:3b:ea:28:2f:ce:f6:fc:c0:05:e3:ec:e3:0c:eb:
f1:1e:f0:10:76:58:32:f8:ca:59:3d:e6:7f:34:e8:
49:cf:67:ac:dc:29:85:d7:7c:e9:66:49:77:ab:9d:
e6:af:86:32:1b:d2:1f:76:01:c1:26:b1:7e:b9:9e:
28:2d:6b:ff:18:9c:07:40:17:05:08:e6:5e:6f:f3:
ca:75:ce:b4:6d:dd:05:4a:49:f7:5d:b9:aa:6f:80:
3e:f0:95:3c:d9:84:f6:76:00:78:10:aa:a7:91:05:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:04:B7:CC:42:27:EA:10:3D:26:61:03:5B:CB:C2:98:04:0A:CB
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/SX0Et8xCJ-oQPSZhA1vLwpgECss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.140.0/24
IPv6:
2a0d:1580::/48
Signature Algorithm: sha256WithRSAEncryption
4b:b2:ac:8d:1c:53:67:66:72:aa:b4:33:63:87:df:92:44:33:
0d:3f:55:e1:20:1e:dc:fc:02:3e:02:90:61:da:a6:f5:b7:81:
24:81:24:27:20:03:7b:30:5a:aa:2f:82:7e:30:71:df:57:cf:
c0:46:09:fc:8b:30:08:4e:82:84:54:56:39:6a:06:f1:ac:91:
cc:97:14:c7:e7:f7:6c:3e:f7:40:79:77:52:9c:7f:1e:a7:43:
7a:d3:36:c7:b2:ef:86:49:37:39:1d:6d:a7:9e:ac:91:47:7a:
cc:fc:ee:14:9f:1d:3a:d5:fa:63:65:e8:30:02:a9:f2:3e:4f:
06:3f:c2:20:f9:c5:77:1d:b7:cf:e8:9b:05:d4:3e:0f:7d:01:
6a:3a:a9:ca:0e:ee:86:7a:f4:16:03:03:68:b8:ce:17:18:35:
cd:86:35:6b:0c:0a:5f:0f:aa:5e:36:e5:30:ec:ed:37:18:37:
b6:b1:24:d7:27:75:6e:c1:61:0d:29:9b:d0:8a:0e:b3:08:f0:
2d:a6:46:ec:f7:84:1d:b1:83:90:0d:ac:7b:29:67:84:45:19:
46:de:8f:3b:4d:9e:13:74:f9:bd:97:1b:f6:fa:84:b3:c2:3f:
d0:a6:23:88:32:10:a4:d3:c9:c3:bd:b4:69:e6:d6:44:83:76:
94:b3:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:27 2025 by rpki-client