Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/6hC6fLsw7RkIS-s8k9SPmezW7a0.roa
File: 6hC6fLsw7RkIS-s8k9SPmezW7a0.roa (raw, json)
Hash identifier: VC8L1ZPAknfqgpBe50bw5lLJs0Ytomzt1toHwpXle7E=
Subject key identifier: EA:10:BA:7C:BB:30:ED:19:08:4B:EB:3C:93:D4:8F:99:EC:D6:ED:AD
Certificate issuer: /CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Certificate serial: 0194258F7CB11D306A4C5DFDF4CE65C55A9A
Authority key identifier: A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/6hC6fLsw7RkIS-s8k9SPmezW7a0.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24429
IP address blocks: 146.19.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7c:b1:1d:30:6a:4c:5d:fd:f4:ce:65:c5:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea10ba7cbb30ed19084beb3c93d48f99ecd6edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:18:28:70:9d:f9:52:bb:2b:29:6e:e6:d5:
5b:67:97:4f:66:dd:68:97:58:a0:3d:8c:12:d1:0c:
92:75:5d:f5:71:01:f4:84:c3:b7:d5:f9:c1:59:00:
73:82:4f:d8:dd:fc:c5:60:2e:76:48:4a:eb:a2:01:
ad:9f:b4:91:63:59:1a:1c:40:d8:7d:94:ac:ee:78:
c9:1b:03:b2:d9:f5:d3:5c:a7:3e:06:25:71:7f:a7:
b7:c1:80:9e:c4:dd:af:54:46:32:6a:ea:de:6a:38:
a2:33:71:03:cf:76:49:ae:0f:e9:65:e8:54:59:4b:
07:35:5e:db:c5:81:8b:92:ad:53:09:28:62:61:cb:
d3:30:17:68:1d:9d:f6:96:6a:62:55:99:79:49:1a:
db:30:b1:5e:4e:05:e7:c3:4b:22:cb:3d:7a:cc:38:
f6:f2:34:73:87:39:ab:0c:44:ef:de:4d:61:f7:b3:
2c:1e:cb:63:d7:57:d8:c4:e6:f9:81:fc:de:a4:2d:
d5:2c:20:40:46:99:69:40:be:a1:77:18:bb:ce:67:
2b:66:4b:21:1b:5d:e1:aa:f3:19:ca:68:b1:4a:3d:
af:0b:86:5a:29:b5:6e:ad:58:0a:84:15:bd:3d:7d:
e8:40:78:65:92:b0:2a:e3:d2:d8:f0:50:50:fe:76:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:10:BA:7C:BB:30:ED:19:08:4B:EB:3C:93:D4:8F:99:EC:D6:ED:AD
X509v3 Authority Key Identifier:
keyid:A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/6hC6fLsw7RkIS-s8k9SPmezW7a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.236.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:b6:e7:4e:83:57:8b:f2:4e:5a:6c:02:b5:15:95:3e:2b:5f:
de:b6:63:ed:c6:d6:f9:d4:ac:db:90:ea:b1:e3:59:1d:ea:d7:
90:48:d3:0c:9e:f7:74:be:63:5d:9a:16:08:64:e1:34:06:25:
ef:aa:7c:fc:90:ea:6a:9e:82:44:d7:83:0d:0a:9b:9b:40:a5:
c3:77:1b:80:3e:9e:b5:38:c4:42:d5:5d:ec:9b:2b:75:f6:ba:
bb:3a:00:1b:b6:02:37:8f:0e:36:9e:17:ba:58:a6:27:fd:c6:
d4:97:70:65:70:f9:e7:58:52:1c:70:ff:4b:b1:8a:eb:3a:53:
d9:ca:8d:50:6f:5b:5f:9c:47:cb:3b:df:ec:27:71:1c:55:99:
9f:72:f2:ed:75:d1:55:30:04:03:d5:c4:ad:39:7b:c4:82:08:
19:c1:3f:2a:bc:4c:60:66:a3:03:18:12:bd:34:50:fb:50:69:
8b:f9:33:c3:de:3f:2a:54:c3:b1:0e:5b:75:83:1f:28:f0:9c:
c5:dc:65:d4:73:ca:2b:9f:c1:15:1c:c7:37:4a:63:97:8e:64:
90:38:6b:69:9c:9d:be:18:1e:d8:20:5e:1c:1d:fc:cf:e8:ac:
3e:da:68:21:0c:92:b6:27:75:2a:8d:9a:92:ba:0c:cc:f2:8a:
71:af:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:12:49 2025 by rpki-client