Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa
File: 6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa (raw, json)
Hash identifier: BmkvGfb9KA/kpLVgShUXMCUOS/qU/B+L76KUE0JlgVE=
Subject key identifier: E8:05:5A:0A:31:F2:5F:30:A6:5F:D4:4A:BE:C2:4D:78:14:56:B1:7D
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194DF1471BC3BB957CAD9B6389DF286CA09
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa
Signing time: Fri 07 Feb 2025 06:24:06 +0000
ROA not before: Fri 07 Feb 2025 06:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 92.62.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:14:71:bc:3b:b9:57:ca:d9:b6:38:9d:f2:86:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 7 06:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8055a0a31f25f30a65fd44abec24d781456b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:19:d3:f4:16:81:0d:98:c7:8b:da:43:f4:
2a:79:d3:cc:72:99:86:65:9b:f5:32:f0:6a:c9:65:
af:42:ab:b8:6d:b7:db:49:9b:f8:55:8f:56:17:72:
f2:60:09:1a:ee:8f:d3:52:3c:3b:11:50:07:a9:63:
45:6a:63:76:28:65:e5:6a:f4:5f:5b:7a:78:04:41:
e8:ca:56:00:71:83:45:8d:51:70:28:ee:44:a9:56:
22:e1:5e:a5:76:03:9b:7b:2e:7c:b9:15:e1:41:5d:
b0:e6:d9:e7:a4:eb:00:6e:b3:99:ca:16:84:b3:fc:
88:34:e8:06:29:b9:e8:8d:62:65:b2:cf:d0:c1:cb:
09:57:00:67:1d:ac:be:45:b8:74:f3:44:a1:4e:db:
90:85:ef:a6:75:4c:48:72:f4:54:71:a7:ec:2d:b6:
a4:71:3b:72:13:b6:6c:25:d5:6b:3c:0f:c6:44:14:
1f:98:5c:c0:1a:39:e5:7d:a4:1b:19:61:20:68:d9:
8e:41:9f:1e:5f:80:69:03:8a:f6:58:10:9e:2f:31:
ce:d5:7a:c2:49:90:fc:01:da:6c:80:27:48:c5:26:
21:76:a3:db:ba:b5:b8:03:db:6b:c3:72:d1:5a:2f:
15:c6:51:05:ef:ec:07:97:45:e3:50:67:dd:2e:16:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:5A:0A:31:F2:5F:30:A6:5F:D4:4A:BE:C2:4D:78:14:56:B1:7D
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5d:85:c1:c3:b8:f8:eb:c6:2d:bb:cc:b1:24:ee:56:e4:0f:
cd:1e:52:55:b9:fd:87:1b:9c:22:ff:60:17:29:bd:b8:0d:73:
41:93:e7:66:9a:37:f5:c6:ba:db:b9:a0:dd:dc:84:57:56:ea:
19:db:0f:12:c4:d6:7b:ec:3d:cc:1f:38:2a:1c:89:cf:c0:75:
67:4d:0f:46:69:6b:53:ec:62:b1:61:16:e6:18:d7:db:9f:0e:
aa:ac:51:65:c5:45:b7:52:7f:57:3e:dc:b0:6e:30:5e:35:55:
3f:db:d2:8f:70:81:78:3f:6d:3c:4f:e1:d4:fc:0a:cd:fa:f2:
2f:ae:3e:c6:16:78:e9:18:37:69:c7:1e:84:f2:e0:00:e2:fa:
d6:98:68:7b:b9:ea:4c:1e:17:bb:f8:3e:dd:ee:d0:a2:a4:e4:
9a:b4:dc:f4:87:69:29:eb:53:b2:ea:58:92:17:a9:9f:c2:65:
1e:84:15:32:30:16:1b:2b:c6:fa:0e:c1:1e:51:e2:f6:e6:2a:
ba:67:68:4e:71:12:4a:5b:f5:06:34:b2:fb:51:61:76:94:9b:
ec:36:a8:ee:64:28:0b:25:cd:46:3c:6f:21:1b:12:52:49:8c:
c6:96:61:ad:68:04:c5:18:5c:b1:d7:f7:ca:e1:ba:b4:bd:18:
35:51:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:54 2025 by rpki-client