Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/63o-_PEDVGcrdV7Bgi2toHySFlk.roa
File: 63o-_PEDVGcrdV7Bgi2toHySFlk.roa (raw, json)
Hash identifier: 0y8sb4KpuKm+TioBZ+61oUD6+dI0ZD86gR4wRX+mbCE=
Subject key identifier: EB:7A:3E:FC:F1:03:54:67:2B:75:5E:C1:82:2D:AD:A0:7C:92:16:59
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 0196B1EB9C3BF2C9616EA7CA43CC40128F46
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/63o-_PEDVGcrdV7Bgi2toHySFlk.roa
Signing time: Thu 08 May 2025 22:02:10 +0000
ROA not before: Thu 08 May 2025 22:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 185.164.20.0/24 maxlen: 24
185.164.21.0/24 maxlen: 24
185.164.22.0/24 maxlen: 24
185.164.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:eb:9c:3b:f2:c9:61:6e:a7:ca:43:cc:40:12:8f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: May 8 22:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb7a3efcf10354672b755ec1822dada07c921659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:48:92:98:02:e3:34:43:6a:a9:53:18:97:
52:0d:b3:23:67:fb:56:2f:1f:74:ee:a4:54:83:19:
1d:e8:8f:a1:f2:a9:7d:4d:2e:c1:7c:b9:ce:92:8f:
de:07:5d:34:7d:aa:9a:10:73:83:f3:7e:2a:38:76:
31:86:6f:d4:61:91:6e:bf:c9:e9:90:8e:4b:ac:a4:
93:78:59:25:1a:67:41:e9:9a:bc:c0:c5:9c:85:4d:
28:72:e4:21:83:34:8b:1b:10:dd:20:2c:e2:12:01:
b4:9d:a6:bd:c3:0a:8e:7d:78:79:f5:3b:76:b5:28:
de:e3:65:bc:1d:64:11:59:bd:ed:44:98:53:e2:f5:
37:2f:b1:bd:93:1b:8f:d9:65:4f:cf:cb:b3:34:a7:
5f:e3:39:48:a2:1d:73:74:f7:1f:d5:ab:87:91:9a:
35:9b:14:ef:35:81:6b:1a:fa:a7:79:7f:6f:9e:47:
15:49:a4:78:3e:c4:48:9f:d9:80:b9:99:43:dc:61:
e2:ad:69:5e:49:92:0b:75:05:c2:02:8c:3b:0a:1e:
c6:3f:f8:29:3d:79:b9:df:e9:01:36:ce:9e:18:07:
a9:63:1a:a5:17:f5:ff:52:91:e8:3d:e3:f9:c1:82:
87:98:ab:e3:fa:d9:f5:30:f4:00:11:32:2a:20:c4:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:3E:FC:F1:03:54:67:2B:75:5E:C1:82:2D:AD:A0:7C:92:16:59
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/63o-_PEDVGcrdV7Bgi2toHySFlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.20.0/22
Signature Algorithm: sha256WithRSAEncryption
78:bc:52:d9:6e:25:89:b2:7e:61:7f:f0:49:bf:e3:43:2c:89:
b0:5c:f3:e8:e5:a4:6f:f2:6b:da:4e:94:99:12:2b:68:89:28:
46:97:9c:71:70:5c:7b:c3:94:eb:f1:65:3d:37:6a:8c:30:10:
a4:ca:2c:a4:33:5d:b9:79:4f:27:2b:a8:a2:b2:ad:0e:4b:74:
a1:8e:e4:48:7d:e2:0d:e8:e9:b6:cd:2f:32:a3:5d:9c:81:53:
c5:93:81:b6:15:7c:a4:24:df:b8:65:f1:01:f0:a7:8a:08:64:
94:c2:87:fa:be:8e:ba:18:f0:ca:70:eb:e5:9e:30:1a:6c:cc:
fb:37:b5:48:dd:a0:11:6e:27:dc:3c:d2:3e:9b:f1:58:ed:82:
5b:74:86:e9:33:a0:bf:27:92:20:7d:b1:38:87:f1:a7:f2:49:
33:a0:32:6a:73:34:fb:1d:ee:17:72:4a:28:6b:d0:fd:68:4e:
77:97:da:a3:ba:3f:91:30:a3:5e:71:93:3b:4f:29:89:12:fc:
4e:74:94:07:61:7e:d3:c9:e5:11:a3:1b:a1:f1:ab:8b:48:69:
45:a7:19:56:b0:0e:0a:32:f6:b9:78:6f:2d:4d:e6:38:71:17:
cd:ff:d2:36:c6:58:30:5f:60:ab:b9:dd:9d:6f:cb:c6:7e:4e:
3b:ff:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:49:43 2025 by rpki-client