Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa
File: 6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa (raw, json)
Hash identifier: j9i6HiiS4nI4wcr2RV5FEZkxxBV0ISD5E9GgIlD6ABE=
Subject key identifier: E8:EB:82:1C:26:B7:94:19:74:A9:4C:F3:BC:CC:CD:23:EA:4C:11:9E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019560A549A31AD9615EDF4D6B892688E7EB
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa
Signing time: Tue 04 Mar 2025 10:13:19 +0000
ROA not before: Tue 04 Mar 2025 10:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41989
IP address blocks: 85.239.152.0/22 maxlen: 22
178.239.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:a5:49:a3:1a:d9:61:5e:df:4d:6b:89:26:88:e7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 4 10:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8eb821c26b7941974a94cf3bccccd23ea4c119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:cb:78:a9:65:8f:f1:6f:16:22:13:9b:bf:
da:29:87:ec:ee:e7:28:1f:00:b8:06:1f:2b:64:28:
6b:c2:b6:a7:27:83:34:3e:92:64:0f:62:56:a3:ef:
36:2b:56:97:8f:e6:21:44:5b:b7:2d:03:51:50:e4:
e1:fa:af:38:61:e5:22:b2:b9:b2:fa:58:bd:40:8d:
00:c8:96:e7:53:99:8e:6e:e2:7c:bd:5d:7a:45:96:
2d:8b:2f:65:0b:7a:06:eb:4e:42:7d:64:77:6b:8a:
0b:cb:c4:38:38:c3:4b:90:45:72:2e:5f:79:06:c0:
9d:7e:55:6f:ba:a8:e7:79:43:48:ad:72:b4:35:d6:
53:fd:5c:85:22:48:c8:c0:48:6a:c2:f1:87:94:72:
a9:63:b1:70:7f:3f:1a:c4:71:ba:46:dc:4d:71:e0:
82:22:28:f2:68:51:d9:62:ca:1b:00:d7:e6:3b:57:
d5:ef:70:20:ec:ca:2d:c5:2f:42:92:d8:bc:f2:71:
cb:65:8a:48:7f:25:be:19:73:ce:fd:7f:a3:ad:e4:
9f:ae:37:fd:59:7c:e0:fc:27:46:68:46:db:d2:86:
f8:be:88:3f:dc:a0:b6:e4:53:1b:97:d5:36:de:1c:
f2:60:5d:45:71:93:9a:16:70:f4:4d:8a:82:8c:c2:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:82:1C:26:B7:94:19:74:A9:4C:F3:BC:CC:CD:23:EA:4C:11:9E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.152.0/22
178.239.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:cd:6a:24:a6:50:1b:88:48:28:5a:e7:f9:90:61:09:00:38:
e5:48:1b:b8:ab:af:f4:fe:6b:6c:a1:e6:cc:91:7e:b3:ba:aa:
4e:59:d4:db:9e:fb:d3:06:22:c1:ec:c6:4e:2a:c5:78:14:bf:
cc:53:4a:ba:3e:fa:95:7c:cf:5b:a6:8b:a4:41:84:bc:f2:b7:
3e:0a:bd:5a:3d:49:b9:af:7b:24:ca:83:e6:c0:ad:26:68:de:
25:bc:19:d4:10:09:a9:67:1e:be:90:40:22:4a:84:4d:19:ca:
0e:15:d0:f0:5a:f7:07:05:d6:f3:1a:6b:de:d2:8a:18:29:47:
79:ff:a8:02:8a:ea:f5:b9:5d:d9:6d:e2:9c:c8:17:ef:96:5a:
99:d9:ce:25:00:68:ec:df:e1:fe:3c:d8:0b:0b:49:4d:ac:38:
b3:4d:16:e1:0b:8c:11:84:ad:f3:f9:14:7a:3b:03:8e:91:8d:
6e:24:d0:af:70:3c:23:28:31:8a:1e:15:82:e5:ef:e9:f1:d0:
2f:4b:31:4c:73:e7:bd:2f:50:a7:4b:cd:1c:c3:dd:ea:f7:be:
27:61:b6:ca:59:71:97:2b:fa:55:13:85:28:3e:a8:98:9e:f0:
c1:9e:b6:02:03:23:55:e7:8b:ee:9f:9f:cb:b3:3e:47:f7:0d:
ce:74:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:12 2025 by rpki-client