Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa
File: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (raw, json)
Hash identifier: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=
Subject key identifier: 46:61:0A:7F:90:0C:72:FF:86:95:78:09:F0:26:42:69:9F:92:F9:B0
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0194228E1FDA2223992C7F285A4414A35613
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39537
IP address blocks: 185.105.64.0/23 maxlen: 24
185.105.66.0/23 maxlen: 24
2a09:fd40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1f:da:22:23:99:2c:7f:28:5a:44:14:a3:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46610a7f900c72ff86957809f02642699f92f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:61:23:73:0d:ee:58:c9:54:2f:3c:72:bc:
82:67:94:1b:6e:b7:a4:8a:07:7a:4b:b9:c8:e2:3f:
4c:dd:39:ee:39:64:81:43:6a:5c:7f:ac:8b:f4:9b:
81:d4:02:90:d6:67:02:33:97:f4:34:be:e2:8c:81:
94:59:8e:da:72:fc:a4:60:f2:d2:8b:44:21:a5:aa:
80:ea:65:1c:dd:52:8f:8c:b5:ef:26:59:10:6a:cf:
ba:50:f8:f2:32:74:b6:51:2a:42:30:95:67:35:de:
21:a3:f6:f7:83:4e:26:d7:04:86:2e:7f:db:f8:8c:
9c:00:7f:03:a4:04:17:f9:dc:37:88:da:e3:8c:a3:
dd:ef:85:e5:f3:07:d1:70:90:2c:58:d3:53:55:68:
b8:38:7c:cb:7d:0d:2b:b5:a6:71:b2:21:1d:c5:af:
bb:f0:e3:ae:4a:ca:af:0a:91:c4:57:88:25:9d:44:
d1:ba:38:a1:e8:06:8d:c6:22:b7:4b:de:2a:dd:e1:
71:af:11:ec:c1:e9:b3:f7:75:ed:ad:b2:8f:78:51:
c6:ac:c0:8e:87:fa:56:25:e3:f3:f4:6e:f8:fd:c6:
49:c4:d4:c2:21:a2:e1:44:35:b8:cc:e9:d6:c6:1d:
e4:b7:d3:d7:22:4d:ec:7f:33:37:43:86:a6:77:cf:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:0A:7F:90:0C:72:FF:86:95:78:09:F0:26:42:69:9F:92:F9:B0
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.64.0/22
IPv6:
2a09:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
53:0e:00:c9:d0:4a:5f:f4:e2:88:ff:3d:b3:95:94:1c:ff:a9:
68:46:2d:14:e5:95:21:33:3c:57:6c:bc:12:7d:de:c5:65:ec:
d3:f9:58:64:b2:5d:f3:c7:fe:ac:df:7d:fb:16:82:3c:89:f2:
55:54:2e:6f:c2:ea:78:1f:eb:9e:f3:cd:f8:65:10:d2:d5:89:
0a:03:a0:09:86:0b:94:aa:68:ee:39:9b:24:e5:35:eb:40:c7:
c7:fc:1e:e0:35:24:5e:30:b9:5f:8b:1e:14:f0:eb:b1:d4:3a:
1e:6d:ce:39:d7:ff:b1:30:9c:f1:0e:7c:46:06:a8:68:4c:88:
29:5c:7f:49:ed:96:6c:52:5e:66:68:6d:0e:42:49:a1:f5:63:
d4:62:98:f5:fb:dc:a5:96:a9:23:e4:da:03:00:9b:26:7f:aa:
4d:a5:91:1e:eb:2c:00:37:74:9d:0b:fa:66:3a:51:df:c0:d7:
f0:c7:84:a8:80:9c:f2:8a:14:dd:8a:87:45:ac:4c:49:f7:aa:
f1:42:26:05:3e:69:75:12:72:77:75:1e:ac:20:71:20:a7:19:
fa:2c:3e:2d:67:c3:49:dd:b6:c4:27:b2:14:c6:9e:be:29:5a:
df:00:bf:83:22:3c:b4:7d:a2:c4:15:2f:c5:ef:b5:a7:f2:89:
77:b8:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:59:00 2025 by rpki-client