Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/pkTSWC0kyyJmikpwefrKy0hYNBc.roa
File: pkTSWC0kyyJmikpwefrKy0hYNBc.roa (raw, json)
Hash identifier: uJAe5aUPI71DUshehwa1+fSKLZdP9CODCdcESePQJgY=
Subject key identifier: A6:44:D2:58:2D:24:CB:22:66:8A:4A:70:79:FA:CA:CB:48:58:34:17
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 0197180E2E71F977C0D3ED049E09BC0328E2
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/pkTSWC0kyyJmikpwefrKy0hYNBc.roa
Signing time: Wed 28 May 2025 18:01:11 +0000
ROA not before: Wed 28 May 2025 18:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39067
IP address blocks: 185.160.143.0/24 maxlen: 24
2a0d:1580:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:0e:2e:71:f9:77:c0:d3:ed:04:9e:09:bc:03:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: May 28 18:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a644d2582d24cb22668a4a7079facacb48583417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:c5:f2:73:a2:8a:33:bf:6e:71:95:a8:88:
27:54:d0:d7:27:a9:b2:e2:79:30:ac:47:15:25:64:
11:d8:c3:af:8c:d7:e4:2b:e1:61:9e:fa:27:db:23:
ff:25:93:55:cb:2d:fa:44:ef:c0:4f:19:86:e8:8a:
95:5f:36:4a:65:a0:ed:43:c9:aa:f1:12:45:65:ff:
9b:e0:ec:ef:f1:f2:da:3e:2f:c1:20:b3:1e:f8:c0:
66:db:16:0c:53:38:52:d7:bb:dd:1b:aa:c6:31:53:
19:13:d6:eb:4d:f6:12:4e:b0:a4:70:3e:d7:f9:3c:
85:40:38:93:91:b1:16:4a:7f:ae:9f:ee:85:87:44:
f6:3a:88:76:48:7e:56:50:84:4c:7c:a4:71:93:76:
4f:8f:a1:83:10:52:47:9f:07:20:19:e0:45:60:54:
b0:a5:c0:b2:6b:ca:c4:70:ab:8f:eb:e6:15:a7:d7:
3e:57:f6:66:42:4c:7a:8b:73:e8:55:90:e5:22:0b:
53:c7:99:1c:c0:cb:d4:7f:13:6e:bf:f9:3d:e8:df:
41:df:87:77:21:90:d5:b9:1a:b2:ea:6d:c3:b1:cb:
9d:ba:e9:98:ee:e8:33:56:45:a7:d7:a4:58:72:f7:
96:0f:30:09:a4:c9:66:25:f9:01:dc:13:6a:35:29:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:D2:58:2D:24:CB:22:66:8A:4A:70:79:FA:CA:CB:48:58:34:17
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/pkTSWC0kyyJmikpwefrKy0hYNBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.143.0/24
IPv6:
2a0d:1580:10::/48
Signature Algorithm: sha256WithRSAEncryption
6d:ab:5b:2a:8f:22:dd:4a:47:67:2d:e5:48:19:b9:40:9c:40:
aa:91:19:83:da:8a:d9:29:3a:78:b5:2d:8a:e7:3c:6e:2d:81:
04:c2:75:7b:6b:84:37:77:8b:42:0c:51:4e:75:0c:39:20:80:
d9:d1:ed:0c:a4:42:14:60:e4:c6:6a:08:ae:d2:9e:bf:ae:f9:
cc:1c:9e:55:24:cf:5d:dd:87:66:e4:1b:81:cb:dd:3c:21:22:
82:d6:6a:fe:a1:4b:15:56:52:a2:d8:e7:fe:da:cd:0f:a6:31:
13:19:fc:10:fa:fc:b9:62:0d:67:74:fd:f4:1f:ee:7b:60:bb:
b8:7e:ba:78:d9:08:e8:fc:9d:c7:0a:36:a0:ed:35:30:a2:e9:
7b:74:35:68:f0:cb:df:2b:2d:6b:5b:e8:6c:a6:40:cd:bd:8f:
93:d9:e6:a0:8d:1b:2b:c4:8c:fe:2d:6e:df:5e:87:a8:d7:44:
10:8d:88:2c:fc:0c:5c:e5:a4:fd:ce:9b:b5:e4:bc:4d:03:53:
0b:65:9c:5e:3a:19:d3:20:15:46:de:e9:1c:58:15:6a:4c:47:
56:44:b0:2c:ba:08:3d:d4:da:07:ad:ea:73:a5:8c:fd:03:98:
b7:82:6c:b2:8c:d3:d8:1b:9e:41:39:fc:42:9f:cd:ae:95:db:
67:e0:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:53:21 2025 by rpki-client