Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/zmy93HOVaR95SsJ_nMqWvP0tGkI.roa
File: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (raw, json)
Hash identifier: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=
Subject key identifier: CE:6C:BD:DC:73:95:69:1F:79:4A:C2:7F:9C:CA:96:BC:FD:2D:1A:42
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019454E8341DC324C3703A69E6EBFECDD7D5
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/zmy93HOVaR95SsJ_nMqWvP0tGkI.roa
Signing time: Sat 11 Jan 2025 10:28:11 +0000
ROA not before: Sat 11 Jan 2025 10:28:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206360
IP address blocks: 185.220.136.0/24 maxlen: 24
185.220.136.0/30 maxlen: 30
185.220.136.4/30 maxlen: 30
185.220.136.8/29 maxlen: 29
185.220.136.16/29 maxlen: 29
185.220.136.32/28 maxlen: 28
185.220.137.0/24 maxlen: 24
185.220.137.4/30 maxlen: 30
185.220.137.8/29 maxlen: 29
185.220.138.0/24 maxlen: 24
185.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:e8:34:1d:c3:24:c3:70:3a:69:e6:eb:fe:cd:d7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Jan 11 10:28:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce6cbddc7395691f794ac27f9cca96bcfd2d1a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:69:70:d9:d0:98:1d:86:98:e5:3f:7a:c7:
3c:bb:ba:87:52:4d:ed:55:9d:2b:75:51:e9:09:f0:
a6:af:99:37:b4:1b:ed:47:13:11:4f:b9:c7:4e:03:
ee:32:50:57:be:41:19:35:f9:2c:17:e3:82:a1:02:
9f:2e:38:dc:23:ea:8c:29:3a:c0:8c:d6:1b:9e:dc:
31:75:e7:bb:79:e6:fb:b0:05:07:dc:40:54:20:2c:
1a:1b:3a:75:03:e0:76:f6:02:f0:7b:79:bd:ff:e1:
e8:d3:aa:ef:ee:c1:fe:76:a3:66:63:79:50:39:18:
72:1d:e2:21:2e:5b:cb:7f:cb:35:b2:b6:b3:e6:f5:
d4:7d:df:b2:7d:13:e2:74:15:49:de:dd:e5:03:8a:
98:2c:a4:dd:04:9e:73:32:d1:85:82:8d:af:b9:f6:
28:5e:46:ca:78:ec:9a:92:9a:93:00:d9:43:fa:93:
15:d1:34:c2:1a:99:35:9e:43:c9:74:02:bd:4c:3b:
26:54:73:9a:95:2d:7f:a2:af:b6:b5:44:7e:69:79:
f0:a3:f6:05:6d:fc:38:0d:f4:20:c7:6f:95:73:ac:
f8:3b:68:42:6a:d9:af:3a:8d:4f:af:8a:0c:e3:b8:
a4:a7:0a:68:12:24:01:1d:b0:75:4e:7a:7d:d8:30:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:BD:DC:73:95:69:1F:79:4A:C2:7F:9C:CA:96:BC:FD:2D:1A:42
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/zmy93HOVaR95SsJ_nMqWvP0tGkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.136.0/22
Signature Algorithm: sha256WithRSAEncryption
69:76:5c:51:66:32:ab:f6:9c:0f:7b:42:6b:cd:41:11:c8:c5:
d7:7b:5c:7c:0f:08:14:4f:61:91:86:2b:57:f5:f9:e0:d7:48:
ab:ea:b8:fa:25:81:5f:36:48:b6:cb:44:f2:c7:86:92:28:4e:
f3:59:7a:7e:cb:d5:87:00:9b:83:56:07:7c:42:a7:7e:0c:74:
ee:63:8e:94:18:c4:9d:2d:3f:f1:54:fe:25:6e:af:f5:13:19:
d4:ef:b0:a3:96:14:98:7e:fd:08:f7:4c:af:b6:8e:5f:d7:8d:
bb:6e:41:2e:a6:c2:fd:8a:ab:05:57:0f:40:86:ee:93:3c:a8:
ef:91:34:f1:49:f1:54:36:47:47:5e:13:ee:33:f8:e5:73:67:
71:8c:9d:20:c7:10:ec:e3:21:12:ad:07:a4:2c:ef:ce:f4:07:
61:3d:29:61:80:21:98:e5:e2:4f:6a:b3:0a:d2:9a:5f:34:68:
ee:8e:d1:bd:5c:c0:71:c9:80:95:f4:cc:17:48:d7:7c:b9:b5:
81:c3:bf:a3:42:0a:2b:3e:36:f3:0a:a9:38:ce:1c:87:44:50:
df:66:8d:c9:cf:24:97:e3:55:b0:6d:e9:4b:4d:f4:f0:33:3a:
86:75:f1:c6:e8:22:dd:e6:83:7e:57:44:3f:f3:8e:b4:d3:48:
f8:7f:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:05:52 2025 by rpki-client