Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DavsYWGteXa2bnL-veVvjeYgmI.roa
File: 0DavsYWGteXa2bnL-veVvjeYgmI.roa (raw, json)
Hash identifier: mQdRYu+HGmfNtvXCwFwNsEEa3vmd8k2Ds+md66LsuAs=
Subject key identifier: D0:36:AF:B1:85:86:B5:E5:DA:D9:B9:CB:FA:F7:95:BE:37:98:82:62
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196F1DDEAB4A7FB286A23CC793914113E96
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DavsYWGteXa2bnL-veVvjeYgmI.roa
Signing time: Wed 21 May 2025 08:02:54 +0000
ROA not before: Wed 21 May 2025 08:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 185.246.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:dd:ea:b4:a7:fb:28:6a:23:cc:79:39:14:11:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 08:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d036afb18586b5e5dad9b9cbfaf795be37988262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:99:7a:1c:26:6b:9a:b3:77:29:c1:c0:f1:
3c:86:d5:98:08:23:df:0c:60:d3:2c:17:e5:43:c4:
fe:c3:25:cf:a6:31:7f:4c:5a:0f:ab:c4:c9:0c:72:
6d:ab:dc:21:75:3f:a7:04:43:dc:ab:11:8b:da:b6:
d1:88:c4:54:38:07:4b:b4:3e:92:e8:9f:d5:f6:2c:
5c:6c:ea:4a:11:c2:60:0a:05:10:4f:c1:20:69:9e:
f0:ca:11:4a:b6:d2:80:e5:7d:21:35:59:45:87:a5:
03:6f:7b:13:64:25:50:72:ad:3f:cf:2e:54:65:6e:
35:b3:cf:c6:8f:73:23:92:9b:f5:a3:09:f9:50:57:
4e:f8:34:dd:61:57:f8:3b:95:e7:14:22:c0:1b:78:
e2:36:58:d6:d0:fe:5d:95:e4:79:5e:26:5a:63:34:
2e:dd:41:db:7c:44:6c:0c:43:b2:2f:23:e7:ab:84:
a7:98:d7:ba:0e:fd:c2:0e:f3:e1:6c:42:8a:4c:f2:
03:ac:d9:79:f0:d8:f9:d9:bf:41:16:e7:18:28:13:
c3:62:85:3e:6c:ef:ec:23:e7:ef:5a:a0:33:8a:ea:
fa:8f:e1:0e:55:77:7d:fb:d9:53:5f:dd:4e:03:83:
dc:db:ab:a0:a7:45:2a:42:90:27:1e:cb:cb:ce:f7:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:AF:B1:85:86:B5:E5:DA:D9:B9:CB:FA:F7:95:BE:37:98:82:62
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DavsYWGteXa2bnL-veVvjeYgmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
49:27:1a:ec:87:d8:15:a3:5b:49:47:e1:8f:20:45:ab:0d:59:
45:90:b7:1e:71:8d:f8:5b:c0:2d:58:2c:e7:65:b0:44:d3:71:
5e:03:4f:5a:1d:03:25:e4:b1:34:61:ba:cb:14:33:3c:a7:f3:
b3:33:4e:67:7e:4d:01:39:8e:ac:68:34:d0:3b:68:6f:00:3d:
d6:e4:74:04:78:0a:0c:8b:a5:9f:f9:73:5b:c5:5a:27:a9:d9:
3b:1f:f2:cc:51:40:de:3e:4f:0e:dd:7e:34:0e:a3:81:1a:2b:
6f:fe:92:d2:2e:a6:ee:7f:2f:de:ff:45:58:e0:fa:fa:78:da:
7a:8b:a1:7a:d5:27:f4:a0:c0:3a:cf:0d:cc:88:92:dc:5a:cf:
25:c9:7d:9b:20:b1:6c:c1:50:23:64:c9:48:5a:dd:73:75:19:
e2:4d:26:4b:dc:05:ef:d3:fc:8b:67:52:f1:4b:53:68:61:83:
1e:f1:a4:77:0c:c3:7d:1e:16:27:77:15:20:1c:4d:5b:77:a1:
01:43:31:ae:84:56:8f:13:3e:a3:d9:e0:b4:99:f5:0a:3a:41:
8d:d1:59:fd:4f:cc:4b:81:82:9a:e3:d7:b2:91:77:e4:8e:ae:
c3:99:bb:0d:70:f9:68:a2:c8:71:47:44:89:62:da:a2:84:fd:
90:ec:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:07:06 2025 by rpki-client