Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/6wOJsAVY-euwnRWmrQyAWiR15SI.roa
File: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (raw, json)
Hash identifier: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=
Subject key identifier: EB:03:89:B0:05:58:F9:EB:B0:9D:15:A6:AD:0C:80:5A:24:75:E5:22
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 019546F3E081BC53A25D32383253E1A0C8E4
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/6wOJsAVY-euwnRWmrQyAWiR15SI.roa
Signing time: Thu 27 Feb 2025 10:29:02 +0000
ROA not before: Thu 27 Feb 2025 10:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 185.176.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:f3:e0:81:bc:53:a2:5d:32:38:32:53:e1:a0:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Feb 27 10:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0389b00558f9ebb09d15a6ad0c805a2475e522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:6b:ed:06:cb:8d:48:3a:6b:98:b6:ab:b2:
6e:66:d1:91:3f:1b:95:d3:1c:2a:2e:88:5c:68:71:
cc:80:45:b3:0c:a8:8d:28:ac:94:34:af:27:02:0b:
6a:9e:85:8d:06:d7:b3:68:ef:e8:ec:f2:cb:b5:de:
6e:1b:1d:a6:27:40:29:c9:40:69:cf:6c:3f:77:7a:
70:98:c6:aa:6a:ac:3e:3d:9a:4f:9c:f7:b6:03:b6:
c8:07:df:67:81:54:ab:7d:18:d6:47:98:2f:ff:83:
dd:ba:d7:8e:f8:b0:ee:15:27:d0:10:75:df:5d:e4:
f3:11:c7:a2:89:81:eb:75:5a:d2:ca:41:b9:05:24:
e7:c6:18:9e:40:05:92:77:8d:27:12:55:e8:17:06:
ff:67:a2:98:de:82:50:59:6e:36:5c:52:ee:da:5c:
85:db:6d:0f:5e:59:03:bd:61:9d:5e:43:e7:d6:67:
63:37:7a:66:81:41:c1:a1:30:24:c0:85:7b:fe:b6:
d3:20:c4:c6:32:64:a3:ab:86:bd:6d:37:b7:2c:60:
be:1c:f1:02:c1:f4:02:51:86:4a:18:a5:59:b3:9b:
db:9b:9e:3e:92:a2:2d:c9:8c:10:6e:ef:1b:25:2e:
78:ea:67:84:8e:eb:8d:8a:c8:13:fa:c5:a6:be:24:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:89:B0:05:58:F9:EB:B0:9D:15:A6:AD:0C:80:5A:24:75:E5:22
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/6wOJsAVY-euwnRWmrQyAWiR15SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:0d:80:a2:69:f4:f7:8c:d6:39:6c:e4:61:8f:7b:44:7e:
10:ae:95:da:8d:9f:1a:83:ad:cd:21:f5:73:45:b3:df:4b:05:
07:35:cc:cc:e7:42:26:13:e6:b6:b5:fa:d5:35:05:c0:c2:ea:
f1:77:85:11:b8:63:1e:c5:2d:ab:5d:4b:4e:66:02:8c:61:92:
9e:88:09:49:95:c6:14:05:61:f6:29:3c:2e:e3:f9:3f:9e:fd:
b1:b2:88:6c:27:0e:f2:b8:5b:61:9d:22:59:8d:38:5a:18:65:
37:b0:ca:d8:7b:3f:f8:70:e8:f4:94:38:b5:aa:b4:7f:a4:3b:
6f:42:75:3a:9e:61:b4:a6:a8:3d:19:84:6d:63:a0:67:b6:df:
8e:ae:67:a0:4e:ce:a8:ee:ed:d2:8f:61:fc:83:31:f5:7f:81:
1a:49:5f:d5:bb:97:3a:db:eb:b6:2e:61:cd:b5:22:2d:fb:12:
4c:67:37:43:44:8e:7c:5a:69:78:8a:71:7b:f1:14:52:ab:3a:
bf:d9:b4:66:aa:96:e0:91:f3:68:5f:3f:d2:d9:82:66:cb:8f:
84:4c:48:95:42:0f:4e:e8:ac:98:5d:24:2c:22:bd:d9:67:7e:
ad:c1:29:29:5f:43:19:d8:d9:a3:37:b2:e7:91:5e:55:36:e4:
70:60:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:34 2025 by rpki-client