Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa
File: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (raw, json)
Hash identifier: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=
Subject key identifier: 9B:4C:B1:3D:41:B9:1B:58:E7:FC:CB:00:54:E1:17:41:14:AB:F3:38
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0195FB97E27929B8B461D2B8B0C298196A10
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa
Signing time: Thu 03 Apr 2025 12:19:49 +0000
ROA not before: Thu 03 Apr 2025 12:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 185.113.192.0/24 maxlen: 24
185.113.193.0/24 maxlen: 24
185.113.194.0/24 maxlen: 24
185.113.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:97:e2:79:29:b8:b4:61:d2:b8:b0:c2:98:19:6a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Apr 3 12:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4cb13d41b91b58e7fccb0054e1174114abf338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:60:20:50:b4:d0:0f:56:5d:a2:90:bd:07:
4e:c3:7e:f5:14:9f:2c:42:c0:84:de:30:fa:b6:e2:
fa:c7:a4:29:0a:36:d6:2b:f6:96:30:ec:27:e9:78:
dd:75:72:1f:35:ef:ff:0b:9a:8e:11:9b:2a:4f:e6:
33:28:a1:f9:5a:7d:5a:3d:f1:25:86:50:68:95:de:
4d:9a:b6:61:b8:d6:41:cc:ed:1b:44:3d:e5:b9:1d:
45:9e:80:d5:8f:3a:f3:b4:8d:17:ef:7d:81:41:53:
90:00:42:f2:e3:3b:c0:7e:e4:8e:ae:20:66:94:f3:
44:72:c4:25:65:b3:cf:3d:bd:c0:7f:0f:84:2e:70:
ed:0a:18:2b:df:ec:44:f0:fd:7a:bc:09:07:98:00:
82:cd:f8:2e:01:cd:32:6f:b8:f3:f8:11:1a:3e:24:
5f:64:c8:48:75:83:94:0e:f3:7b:60:5a:26:61:d8:
11:8a:c1:d8:a1:7c:aa:e8:df:8b:e4:f7:8d:53:12:
80:c5:2d:b1:59:71:f1:69:1d:0a:df:32:1f:ce:b8:
0c:fa:31:4f:b6:b8:8c:fe:a1:ee:1d:5e:69:0d:88:
e4:99:c1:9f:63:89:5c:74:c2:af:3b:3d:d8:40:4b:
f5:d0:3f:70:e3:3f:27:d7:d0:14:a8:80:9d:12:b9:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:B1:3D:41:B9:1B:58:E7:FC:CB:00:54:E1:17:41:14:AB:F3:38
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:79:ef:98:88:22:31:ab:68:29:b7:33:5c:33:ca:db:27:ac:
40:22:02:c0:89:bb:62:24:89:98:45:bc:90:a4:ca:64:24:12:
2a:0a:e1:a7:99:b9:6f:31:40:0c:89:a9:32:d0:00:8d:90:fa:
6b:d0:91:90:ae:d1:9b:22:59:b5:92:9f:83:4f:89:a4:72:97:
09:17:50:fa:6d:5d:e4:74:7e:d4:34:bf:ce:9c:cb:7d:81:e3:
59:73:08:6b:ce:1e:24:9f:d4:36:10:71:cf:e0:f4:ea:05:c3:
29:65:7c:18:db:e9:f7:3f:d8:d5:bc:f4:bb:73:c3:12:d9:db:
b3:c7:7e:e8:2f:4a:0b:4f:8a:fa:d9:18:5f:c1:bb:d7:d1:ba:
46:4d:a1:59:8c:22:49:cd:ee:05:4e:da:4d:31:cc:6f:8f:78:
ed:9e:11:80:6a:32:d2:7b:56:d5:73:89:b1:76:51:d8:88:da:
c0:5f:aa:a9:2d:4f:43:e1:66:6a:5f:44:81:c4:df:6b:24:7e:
4f:d5:71:b2:9b:4b:80:00:c5:5f:e7:e8:46:49:b2:88:8e:3b:
cb:71:8e:3a:7b:f6:0e:da:e2:82:17:6c:0d:c8:b9:ed:e5:ae:
59:c0:fe:3d:08:1d:f9:8a:63:6a:a2:cd:e3:e3:97:39:52:0f:
83:ac:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:25:44 2025 by rpki-client