Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/6gQb_YrXJIkOy1ffV5AywwaDFKA.roa
File: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (raw, json)
Hash identifier: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=
Subject key identifier: EA:04:1B:FD:8A:D7:24:89:0E:CB:57:DF:57:90:32:C3:06:83:14:A0
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FC01ABD063ECE250D6725D03D0C5B
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/6gQb_YrXJIkOy1ffV5AywwaDFKA.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50917
IP address blocks: 89.37.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c0:1a:bd:06:3e:ce:25:0d:67:25:d0:3d:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea041bfd8ad724890ecb57df579032c3068314a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:18:18:93:84:1a:cf:7f:87:44:ed:66:cc:
bd:f1:6d:34:27:25:45:e8:65:15:90:f1:3e:b4:2f:
cd:7a:34:fc:ec:9c:ac:29:8e:8b:c8:42:00:d6:2b:
f8:fc:6a:5d:63:1b:72:01:23:3c:91:fc:c8:95:5f:
0f:4b:e6:c2:1f:d3:2e:0c:15:43:7f:32:f5:bb:32:
74:f5:ff:f5:bf:8b:0e:0e:49:1a:20:01:fc:d8:c5:
b2:57:c3:ee:ae:78:ac:6e:ac:f2:69:99:26:93:f6:
67:7f:24:2f:e5:1b:69:27:bd:ac:8d:5c:6e:ae:53:
22:d8:b0:d5:d1:53:10:8b:42:71:bb:9f:ad:26:d2:
a2:df:d2:0b:d8:5b:35:69:4e:88:5c:7f:aa:f1:8e:
cd:89:10:1b:98:f6:c7:84:14:ee:9a:11:53:87:a6:
85:2f:5c:71:48:b8:dd:21:0f:1f:ed:ff:0a:6d:40:
49:6b:46:77:8d:7c:ca:14:d5:9a:77:7f:cd:33:b2:
7b:6a:ec:c4:bb:d2:4c:d7:62:24:61:bf:bb:6a:cc:
ec:7b:bd:04:91:b8:66:bb:f8:cf:d8:82:17:6d:46:
e2:69:22:28:0d:33:0c:c3:06:2b:f3:0b:4f:8a:6f:
43:9c:39:6b:59:bd:73:81:cb:99:ba:2b:74:d9:b6:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:1B:FD:8A:D7:24:89:0E:CB:57:DF:57:90:32:C3:06:83:14:A0
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/6gQb_YrXJIkOy1ffV5AywwaDFKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:02:1f:69:71:3a:76:40:e9:ac:9a:dc:8d:8a:32:8f:ce:bb:
20:6a:91:63:d9:a9:a9:73:45:f2:ae:f7:41:18:be:df:30:55:
80:e3:77:3a:d2:9d:8c:e5:86:96:fd:60:f7:b4:85:39:4a:0e:
3c:27:10:ab:98:12:79:f9:33:35:dc:cb:a1:21:a9:60:a3:0c:
e1:30:90:c9:54:e2:36:e6:b6:df:a7:c1:74:83:7b:a9:a9:49:
0c:40:a8:5a:f6:1c:08:46:6d:ca:7b:07:3c:72:22:5a:0b:09:
23:2e:f8:3c:c3:c7:3d:33:68:47:9b:8e:8e:59:50:3a:e7:cf:
5c:ce:6b:58:d5:ed:66:af:0a:32:36:9a:11:b9:cd:76:78:91:
53:86:db:22:d2:8b:94:84:ab:12:13:00:6d:9c:e0:8d:15:07:
c1:5d:46:58:26:a4:e3:de:fc:f3:de:1b:2f:54:7a:3f:36:a7:
df:7b:14:70:5e:e6:a8:d6:fc:ce:4c:c6:ea:ba:c0:f0:e4:02:
78:7c:06:4f:1f:6e:20:5a:42:ef:69:5a:02:87:cb:9b:63:55:
6a:2f:ba:0f:48:70:4b:8c:50:dd:81:b9:69:c2:a9:b4:b8:82:
a2:a6:bf:b3:ba:60:33:90:23:94:53:87:b6:73:ae:aa:42:65:
af:ca:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:34 2025 by rpki-client