Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZED-DKs4wE3CfBl4UhrsHHPMKk.roa
File: 6ZED-DKs4wE3CfBl4UhrsHHPMKk.roa (raw, json)
Hash identifier: RoserLRy6Sca/yXPcfZ2Cg/W1YTbE/B2p5hmyt+gX/4=
Subject key identifier: E9:91:03:F8:32:AC:E3:01:37:09:F0:65:E1:48:6B:B0:71:CF:30:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247411A05ACE6785EE3975B356250C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZED-DKs4wE3CfBl4UhrsHHPMKk.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36666
IP address blocks: 83.143.115.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:74:11:a0:5a:ce:67:85:ee:39:75:b3:56:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99103f832ace3013709f065e1486bb071cf30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:5a:73:81:3c:75:2f:f7:60:db:7e:a4:2f:
38:8d:91:f2:0e:35:81:85:81:47:3b:fb:73:fc:6b:
8f:26:d1:f3:1b:86:1f:4b:d8:36:eb:d0:c0:c7:62:
a1:c1:63:6a:e9:60:d8:67:70:87:e9:c4:7f:34:d1:
c6:41:e2:61:f1:c5:b5:ee:7e:21:2b:64:6c:ec:f7:
20:2f:a9:ca:91:92:12:a3:59:ff:01:d9:1c:11:56:
e6:f8:28:44:3c:3e:50:48:8f:e0:a6:a3:c0:01:aa:
75:3f:ec:d7:19:94:b0:b5:bf:c2:16:e2:a0:62:ec:
10:64:55:73:e1:eb:31:62:5b:f9:9e:0f:d5:0b:a8:
86:38:e5:8b:9e:35:70:27:15:6b:5d:8e:91:7b:8c:
8f:cc:6d:ac:5b:73:24:87:0b:ac:a9:e0:75:a4:99:
86:af:87:b0:0b:60:ff:06:01:ca:7a:37:1d:b6:5e:
0c:bd:c6:a0:40:b1:f3:06:96:1f:11:45:b5:47:08:
d0:e0:b7:f6:83:9f:48:8b:08:c6:5b:2d:1d:54:2d:
0e:7e:de:0e:36:d1:09:28:b5:50:58:7c:1a:05:23:
48:1b:31:a5:a3:42:5e:e8:f0:d5:b6:86:fb:85:7b:
f1:6e:c2:40:50:38:87:14:0f:47:d7:84:20:6b:be:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:03:F8:32:AC:E3:01:37:09:F0:65:E1:48:6B:B0:71:CF:30:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6ZED-DKs4wE3CfBl4UhrsHHPMKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.115.0/24
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c5:56:8f:53:93:26:9e:76:23:24:28:18:41:44:9e:fe:4d:
6c:40:ee:69:10:3a:f7:91:74:14:33:51:f1:8b:8c:5e:7f:a7:
45:80:d4:e3:67:d6:3d:0d:d2:50:cc:7b:06:17:67:a4:6d:16:
5c:50:be:fb:0a:fd:29:d0:10:bc:c7:4a:46:41:09:42:e8:10:
be:7d:0c:ae:43:a4:19:02:4a:9e:d1:d3:c3:7d:38:3d:6a:b4:
0f:27:bd:46:f1:b8:cf:bc:4a:fc:1c:9c:e9:55:8d:08:35:14:
40:2c:c1:ae:fe:d1:d6:6a:c4:86:76:0d:a3:44:22:df:31:00:
98:7d:fb:0c:ee:d5:54:e8:ba:e9:75:27:2b:2b:1b:50:14:2a:
80:3f:b5:9b:90:ba:34:02:e7:8e:66:d3:80:ef:32:78:80:06:
1f:c4:7f:8a:05:69:6e:05:7a:bc:90:d4:a1:b1:8c:04:8a:da:
fe:48:40:7f:4d:f6:99:54:5a:57:19:83:02:62:22:63:35:7a:
0f:cc:9c:88:34:9d:ed:d0:6e:a4:43:1c:71:d9:a5:f8:de:b4:
f6:bf:61:c9:e3:79:b6:e2:5e:a0:51:b6:1e:e3:56:24:68:d9:
9e:e3:ed:d0:6a:e8:39:61:d6:a0:38:4d:5d:5c:fc:7e:f8:a2:
71:43:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:00 2025 by rpki-client