Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa
File: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (raw, json)
Hash identifier: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=
Subject key identifier: E9:DF:4C:97:6F:16:3B:67:C0:8D:35:56:EC:C5:13:E2:9E:88:B8:87
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01941FFA40FA11FB84095C60E7B06523398F
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214360
IP address blocks: 185.220.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:fa:11:fb:84:09:5c:60:e7:b0:65:23:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9df4c976f163b67c08d3556ecc513e29e88b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:41:fd:ea:2f:b4:41:69:5b:b5:05:f1:d3:
ee:f1:87:55:eb:65:c5:52:ce:0c:92:6a:b9:56:a0:
d6:79:cb:83:b8:f8:1e:e0:ef:d2:32:0c:c7:90:24:
1f:e1:ad:42:af:65:54:c4:50:78:25:8b:ec:d8:83:
c9:cd:f0:3f:93:d0:45:67:4a:af:bf:d9:c9:d6:06:
3b:e6:eb:ee:4c:4e:b2:0e:ea:34:72:f3:7c:6b:82:
6b:fc:79:5b:8c:ec:fb:a1:4f:57:83:e8:40:b1:1e:
cc:97:4e:84:7d:10:da:10:b6:da:df:20:4c:92:ff:
64:c7:1c:08:90:ff:1f:b6:91:9a:d8:fe:d5:2a:90:
9f:21:c1:47:6a:93:66:30:65:60:61:50:d2:ea:7e:
49:54:2c:8a:a1:a2:44:c9:d0:aa:8f:13:c3:7b:8d:
ba:9a:a8:64:ad:c3:19:13:1e:be:11:1b:bb:eb:bc:
30:1a:1f:c6:d9:f6:d2:e6:8a:47:a4:e3:6f:45:c4:
1e:e4:8f:e9:64:fc:ea:6a:ef:0b:b5:5f:01:ba:42:
77:36:8b:b1:b4:e5:92:2f:c0:79:3a:08:5e:c0:3b:
e9:dd:48:9f:6c:c9:fd:70:5a:52:11:c2:69:3a:5c:
5b:cf:e5:eb:03:57:0b:d6:2f:54:05:07:b5:2b:74:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:4C:97:6F:16:3B:67:C0:8D:35:56:EC:C5:13:E2:9E:88:B8:87
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.118.0/24
Signature Algorithm: sha256WithRSAEncryption
35:20:16:6d:bc:7a:00:a0:59:d0:e4:d4:a7:eb:40:dc:a5:28:
12:0a:65:04:ac:b5:fe:6a:43:be:26:e7:03:9c:09:bd:74:e8:
97:54:95:53:4d:52:17:64:48:b7:a5:d4:d2:4e:28:db:d4:e0:
3d:41:7a:35:65:91:61:20:94:62:da:ba:22:a4:78:6a:79:fb:
65:ba:ce:59:40:1e:01:ae:7f:67:a1:c5:62:97:37:3c:b7:26:
5e:49:65:c4:f4:82:a3:f7:af:f1:49:47:c2:0b:0a:d4:99:e3:
0a:e4:68:7b:9a:8e:c7:10:7a:ba:04:ca:92:22:d1:58:19:20:
3f:7f:b2:19:83:b9:9e:41:ff:89:97:7b:38:ca:8f:bd:09:47:
59:b3:7a:c9:3d:71:a1:c8:26:49:5a:2c:83:0b:86:e6:fc:90:
d8:b9:2c:2f:e3:ef:0f:bd:97:fd:a5:14:6f:23:92:bb:c3:3e:
57:72:50:9b:fa:1b:89:8e:a1:47:5f:ec:d2:fc:5b:ab:c1:e1:
66:8b:f0:4a:3e:3a:69:51:cb:e8:33:55:f3:f9:48:4d:3f:c0:
83:56:0d:97:1f:4e:62:dd:8f:be:58:61:59:88:81:6c:3b:ed:
10:7f:69:2d:1b:76:53:e2:9c:ae:40:4b:34:2a:d1:9b:f6:b8:
61:34:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:59 2025 by rpki-client