Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/b6ZEK46tBFQpFeGihP04dAsRVEs.roa
File: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (raw, json)
Hash identifier: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=
Subject key identifier: 6F:A6:44:2B:8E:AD:04:54:29:15:E1:A2:84:FD:38:74:0B:11:54:4B
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 0194282569973CFAC876F43D0CF92D9E3C71
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/b6ZEK46tBFQpFeGihP04dAsRVEs.roa
Signing time: Thu 02 Jan 2025 17:52:07 +0000
ROA not before: Thu 02 Jan 2025 17:52:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212761
IP address blocks: 185.41.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:69:97:3c:fa:c8:76:f4:3d:0c:f9:2d:9e:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 17:52:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa6442b8ead04542915e1a284fd38740b11544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:af:d3:cf:e4:8b:ee:f6:f7:88:2a:37:e2:
68:b0:5a:e9:a1:6d:9e:a1:33:3d:16:1d:e0:75:fd:
dd:50:34:4e:fd:a0:ea:b3:19:d6:17:1d:0e:a1:96:
8e:d0:4c:7f:cd:ba:4c:18:42:52:69:f3:fc:80:47:
b5:95:b1:f7:b7:31:c0:ab:b3:b2:a2:e5:c7:82:ba:
57:dc:35:f3:85:54:6c:73:ca:33:ac:8a:06:dd:2f:
9e:af:e1:34:ea:37:bf:f3:f7:8e:28:94:e0:f3:27:
ee:2f:90:82:21:b7:85:58:1b:85:c5:73:6c:85:f2:
ec:88:7e:99:f3:52:c7:19:3d:7a:b0:79:65:8b:e2:
3b:79:44:da:fc:1f:c7:9d:29:9b:3c:08:60:be:8b:
4f:d6:aa:af:c7:1c:b3:ac:d4:3b:b0:1d:ea:24:74:
87:1a:ab:d6:77:b2:0a:34:d2:24:a1:83:c0:fe:c6:
98:c9:6c:cf:2d:26:b4:7c:c7:49:d9:3d:a0:88:42:
04:58:ed:64:55:d3:45:01:1e:1f:74:3a:a3:a5:97:
77:a1:27:03:0f:e9:9d:c9:46:57:2f:af:2e:28:87:
5b:05:b3:7b:21:1a:9a:df:38:3f:0c:2f:20:e4:30:
ab:74:d0:7c:cb:4b:af:36:aa:8a:85:b7:d7:43:36:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:44:2B:8E:AD:04:54:29:15:E1:A2:84:FD:38:74:0B:11:54:4B
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/b6ZEK46tBFQpFeGihP04dAsRVEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:48:91:50:b7:8c:63:23:26:c9:b6:37:2a:ea:3f:c9:01:84:
a4:b4:7a:2e:16:d8:11:79:3f:a6:63:de:36:66:a8:e3:46:e9:
b0:31:ec:97:a6:8b:68:80:4c:c3:20:90:de:0c:c8:65:22:ca:
9a:5b:03:7d:d2:4c:eb:0d:19:19:e1:ff:6a:3f:cb:a9:35:68:
62:e7:89:49:4c:55:53:b7:81:e8:d9:97:a0:c0:9a:39:e0:93:
7e:b2:93:a5:13:11:c3:8e:ed:16:2c:65:6b:6c:50:5a:c1:52:
f7:c8:3a:ff:47:5e:91:0f:13:b9:03:19:b7:d4:23:02:2d:42:
ba:ed:1b:54:05:6c:fb:7b:eb:00:4f:53:f5:6c:f6:04:1c:7d:
16:0a:30:2f:d7:18:9d:a7:63:cf:d4:bf:28:26:12:bf:a3:32:
10:7b:b2:7c:54:06:2f:7a:d5:2f:09:df:fe:1b:89:20:44:fa:
67:fd:b0:6c:ff:99:80:d9:6e:59:1c:de:53:af:e0:5e:86:a5:
5b:a7:72:5b:fc:7d:67:92:e6:0f:ec:6b:4b:fb:e7:6a:2c:19:
54:3e:63:2b:ab:4b:e3:25:d9:19:57:50:bb:e5:c7:21:9f:18:
3d:57:0e:79:94:0b:4b:82:c4:ef:7d:07:37:91:e6:de:04:f1:
90:f6:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:09:05 2025 by rpki-client