Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6s7ehVBwUy09FSD_EM5uX0O1QoI.roa
File: 6s7ehVBwUy09FSD_EM5uX0O1QoI.roa (raw, json)
Hash identifier: rgxdOM661TwWMF/h1UvgMdipV8FwMGMKAvvZ2vpzXkg=
Subject key identifier: EA:CE:DE:85:50:70:53:2D:3D:15:20:FF:10:CE:6E:5F:43:B5:42:82
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824ED4217935FB80D38F06A7D97C75B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6s7ehVBwUy09FSD_EM5uX0O1QoI.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47540
IP address blocks: 195.58.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ed:42:17:93:5f:b8:0d:38:f0:6a:7d:97:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eacede855070532d3d1520ff10ce6e5f43b54282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:82:75:4d:9f:68:9d:ce:79:26:8c:14:6e:
cf:2d:ad:b0:2e:4f:d7:6f:25:f1:18:07:19:44:39:
c2:ee:1a:0f:c4:b9:37:3d:76:50:81:ea:fe:1c:e9:
2d:01:df:68:1c:37:a1:7c:aa:85:83:17:b4:f0:80:
59:77:76:a9:e3:9c:71:fb:44:62:93:ae:ee:19:da:
c4:22:6f:96:15:c8:d4:5a:8a:4f:d0:04:d2:b5:d8:
6f:b8:0d:8c:67:c2:4f:75:15:9f:a0:d7:ac:88:a7:
bb:9f:0d:d7:fd:8b:a4:b5:ce:89:63:2d:1e:07:a7:
70:35:2b:cf:de:be:64:85:36:eb:da:b5:e3:87:3e:
f1:37:39:b2:8e:01:9b:65:11:43:65:a7:ae:a4:e2:
f3:c0:47:30:35:e6:e1:29:c2:ae:ef:e9:84:13:99:
a7:69:ee:ac:3d:91:87:2e:5f:21:b2:fb:c6:e9:91:
af:de:8d:4b:62:e2:42:b2:7d:9e:2b:98:56:85:38:
a4:e3:13:af:6b:c4:7c:5a:80:39:10:17:83:53:ff:
3f:d1:ce:0d:71:b3:e8:3f:fe:1f:92:50:60:06:b3:
a0:56:47:8e:3d:0b:96:6c:d9:cb:49:9b:19:de:e5:
5a:6a:8e:34:2b:36:2c:12:f4:7a:5a:75:2f:6d:d8:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:DE:85:50:70:53:2D:3D:15:20:FF:10:CE:6E:5F:43:B5:42:82
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6s7ehVBwUy09FSD_EM5uX0O1QoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:af:14:f5:05:69:0c:4b:4b:96:4f:2b:12:b7:e2:b9:eb:48:
79:dc:e6:36:3a:e6:12:7d:2f:1d:62:46:24:dc:4c:57:ff:7d:
a2:93:77:f7:44:2f:3e:5e:51:a9:71:72:8b:92:0f:ed:94:18:
b6:cc:ea:4b:18:92:d7:f5:b7:01:20:75:23:7c:23:cf:e7:5a:
29:52:51:82:4e:48:3d:4a:a1:ef:a9:17:68:4a:b3:82:6e:b6:
7d:fb:76:ca:59:75:2f:1e:d3:7b:bd:19:4a:6d:ad:a2:fc:fc:
49:32:39:7a:98:6e:68:a5:d7:71:a8:e9:f4:6d:d8:97:9e:a7:
42:5e:3a:10:13:9b:e9:23:a0:a5:ca:cb:a7:8f:9b:68:61:b0:
f7:3a:dd:d6:05:75:cd:66:c6:c1:51:0e:46:13:67:7d:5c:b1:
20:6a:a3:af:0f:2a:c6:32:db:69:96:39:73:69:4f:0f:c3:6a:
3b:aa:82:ef:f9:24:75:35:3b:4d:74:4a:3e:e1:75:e3:19:20:
e8:71:b7:b9:2b:5a:6a:22:00:6a:3b:a5:91:1e:31:11:b2:d5:
f6:04:b7:50:9e:87:e8:7a:ad:94:65:cc:20:14:65:f5:a0:7f:
bc:2c:8b:7b:ff:dc:58:4c:36:ab:04:83:6e:f9:dc:e4:a7:a6:
e3:4c:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:02 2025 by rpki-client