Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1h8BdJU2hSMbnhOheBJOhyMExW4.roa
File: 1h8BdJU2hSMbnhOheBJOhyMExW4.roa (raw, json)
Hash identifier: i7V9SDQ6jJxkSugZka+1qcJqXoMVT3soNXp6urDR1+4=
Subject key identifier: D6:1F:01:74:95:36:85:23:1B:9E:13:A1:78:12:4E:87:23:04:C5:6E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01974E90BD331C415DED6E8060C911334BBB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1h8BdJU2hSMbnhOheBJOhyMExW4.roa
Signing time: Sun 08 Jun 2025 08:03:17 +0000
ROA not before: Sun 08 Jun 2025 08:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207536
IP address blocks: 185.228.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:90:bd:33:1c:41:5d:ed:6e:80:60:c9:11:33:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 8 08:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d61f0174953685231b9e13a178124e872304c56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:02:36:bc:ab:9f:f9:fa:f8:52:d3:0b:7f:
41:fb:89:fb:54:c4:d1:7d:5d:82:ef:23:cb:82:ad:
18:cd:55:c7:07:0f:78:61:69:28:76:ea:66:4d:9b:
d4:50:69:3f:f3:76:8c:1f:24:2a:da:12:a6:4e:78:
de:04:fb:9c:30:01:2a:c9:06:42:39:4c:fe:23:d9:
1f:cb:00:f1:4a:f2:b5:17:2d:dd:9b:b5:a2:6f:3d:
ee:e1:72:b1:9e:26:41:84:d5:bc:d0:b5:f3:bf:c6:
1d:a0:a5:d3:26:1c:da:a2:e7:c8:b6:60:c5:c5:a8:
ee:51:0b:0b:df:53:e0:c0:23:31:86:ab:3c:65:4d:
c8:44:a7:73:24:8f:8c:59:78:aa:db:a5:fe:46:f7:
52:94:aa:0a:b4:08:8c:6f:fb:3a:5b:e8:36:a9:20:
1d:38:66:2c:b8:2a:c3:f7:2c:56:d1:fa:34:b3:7e:
ab:69:8a:7d:e3:3d:e4:c8:f2:35:a3:36:41:b3:fd:
7e:e2:38:5b:5f:f6:0c:e9:99:8c:1c:ed:c7:44:02:
49:f0:38:af:1e:df:8a:c1:b2:e7:31:7a:b5:f1:55:
be:9c:f7:cd:bd:41:f9:1c:48:af:af:ef:b6:96:e5:
39:79:43:de:9f:0c:d0:54:f1:43:f2:db:c2:5c:1b:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:01:74:95:36:85:23:1B:9E:13:A1:78:12:4E:87:23:04:C5:6E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1h8BdJU2hSMbnhOheBJOhyMExW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b5:97:c6:8e:99:f2:bd:11:35:be:07:bb:b0:e6:c2:64:31:
a6:00:b0:69:fb:06:b4:a2:3f:0a:03:ba:a3:2d:50:ad:dc:fd:
1d:40:cc:23:8b:c6:cb:d4:dd:43:1a:9d:9f:06:d5:4d:f2:f0:
b9:6b:c5:09:fb:d0:17:5f:df:15:32:79:ec:07:a7:a5:2a:b7:
61:44:78:8b:ae:20:0e:c3:3a:1d:2e:bc:9b:73:0e:75:b3:21:
55:1b:17:a8:99:1e:8a:60:ea:41:55:f1:04:8b:04:17:3d:8c:
3b:2a:3d:24:b4:24:c4:ec:1b:e3:ba:e1:cf:22:f5:9d:43:b4:
f5:ac:60:76:fa:2d:bc:f5:4d:5e:9c:03:39:9a:0a:2c:37:19:
5c:92:07:cb:4e:24:66:01:f5:1c:49:f1:f8:4a:61:e1:d1:ae:
4a:a9:9e:10:11:92:a2:9f:a1:17:a7:6b:63:06:dc:1a:ee:15:
b9:0f:94:4d:a8:96:a4:7b:6f:59:85:8c:a9:65:b0:ec:7d:b8:
35:f6:d9:16:7b:32:e7:ea:c6:bf:5b:48:1a:ca:0d:0f:74:8c:
63:7c:38:7d:e6:74:62:41:ea:ed:d1:d2:eb:3d:7d:a5:21:10:
38:9f:93:64:17:c8:a3:00:89:81:20:02:09:9e:3e:bf:9c:9a:
77:c1:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:10 2025 by rpki-client