Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/6tr1rrCgjeuxrkgAXDLatxAPpWk.roa
File: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (raw, json)
Hash identifier: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=
Subject key identifier: EA:DA:F5:AE:B0:A0:8D:EB:B1:AE:48:00:5C:32:DA:B7:10:0F:A5:69
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0194258FA199AC20E0B2D74AAC66599FE02E
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/6tr1rrCgjeuxrkgAXDLatxAPpWk.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196877
IP address blocks: 193.104.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:99:ac:20:e0:b2:d7:4a:ac:66:59:9f:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eadaf5aeb0a08debb1ae48005c32dab7100fa569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:fb:c4:d2:51:e2:23:85:a6:99:ce:3c:b7:
9f:e3:3d:49:87:c0:58:b0:50:dc:34:fc:c3:31:f1:
9e:bc:f3:d7:ea:b4:68:76:d7:2a:d1:0c:71:c9:8d:
97:f9:0a:c0:06:03:e0:e1:79:45:fe:0c:1c:93:12:
d7:9f:27:17:91:4b:79:da:99:c4:62:b7:26:13:18:
7c:20:83:6d:c4:84:3d:d6:27:9a:4a:a5:ec:69:c1:
ef:6c:be:ff:60:9e:13:20:bc:2c:47:7d:1a:f0:4c:
45:8f:c3:0e:37:a1:47:15:2e:03:d0:d2:cc:0f:05:
42:d1:61:37:31:c6:17:07:a6:e7:c8:ca:b0:6b:05:
44:40:13:78:1c:52:98:ba:b4:9d:06:54:a2:65:c8:
7c:a1:c4:d3:7e:91:fd:bd:01:a1:b6:47:58:d0:f0:
93:70:1a:f9:55:e8:ee:b1:a8:43:c0:aa:e1:10:ef:
50:fc:25:56:f8:37:56:6f:d2:3a:2d:d2:c6:cd:db:
53:82:39:8d:36:5d:ed:d2:bf:2d:62:a4:22:47:f1:
60:36:77:74:6f:98:19:11:f1:eb:a4:95:17:d0:93:
7b:d4:2c:1e:6a:8a:cf:cf:c8:0a:1b:92:ab:6c:ff:
a0:14:8b:06:06:51:fc:fd:d8:34:3d:44:05:5f:5e:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:F5:AE:B0:A0:8D:EB:B1:AE:48:00:5C:32:DA:B7:10:0F:A5:69
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/6tr1rrCgjeuxrkgAXDLatxAPpWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4e:95:c4:d6:cd:3c:6e:40:b0:da:0d:fc:ca:74:44:5e:96:
48:8a:5d:64:44:81:43:45:97:7d:cc:3d:a1:09:ae:67:09:d5:
75:e1:57:0e:0a:e3:24:59:21:40:40:0c:88:77:61:3b:81:f6:
28:f1:b3:99:56:91:5e:88:0a:de:75:41:02:15:5a:cd:5f:0c:
9c:84:cb:d8:2a:5c:46:9d:67:91:bf:91:c3:e5:ab:73:75:f4:
fd:41:c5:d0:f4:a2:d5:4e:af:fc:9f:13:22:9c:c5:83:be:8b:
58:32:e5:c3:2b:c4:97:61:cc:93:cf:30:4f:e8:2f:41:85:a6:
48:f7:93:bc:2d:52:05:9b:6a:9b:8c:22:07:51:7f:81:3b:e3:
68:73:0c:7c:61:66:6b:22:5d:70:be:bd:37:36:c0:ed:7a:2f:
c5:3b:e6:ff:5b:61:66:fa:df:c2:fb:a9:4f:a5:a5:bc:6f:8d:
30:28:4e:ab:81:f4:89:bf:7b:dd:66:6d:a1:65:84:88:7d:e8:
6a:ee:ed:04:38:0c:83:4a:18:b4:a3:0f:68:4a:cc:ce:a5:26:
8d:47:7f:bf:c2:a5:82:f9:6f:bf:9e:2c:5f:96:47:5c:61:c1:
cc:ec:a8:40:f6:8d:f2:e4:00:4e:c6:93:6f:76:32:74:9d:e1:
9a:11:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:22:21 2025 by rpki-client