Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/DWowDQGQ5yNgx6ayhodRq1LUBHY.roa
File: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (raw, json)
Hash identifier: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=
Subject key identifier: 0D:6A:30:0D:01:90:E7:23:60:C7:A6:B2:86:87:51:AB:52:D4:04:76
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01942369404D9742A8293FA6B90D713D3CC1
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/DWowDQGQ5yNgx6ayhodRq1LUBHY.roa
Signing time: Wed 01 Jan 2025 19:48:07 +0000
ROA not before: Wed 01 Jan 2025 19:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200924
IP address blocks: 91.198.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:40:4d:97:42:a8:29:3f:a6:b9:0d:71:3d:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jan 1 19:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d6a300d0190e72360c7a6b2868751ab52d40476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:11:d5:ca:9f:f8:3b:a6:1a:9f:4b:09:53:
d4:40:ed:a7:8e:89:55:74:94:91:d5:55:96:f5:5c:
9a:5b:74:8e:c8:5a:06:27:b8:7e:5c:0a:29:73:56:
08:d7:f0:7f:36:43:2b:3d:e8:94:80:e6:56:01:27:
d5:1e:db:03:1a:8c:c6:76:df:08:25:2a:e9:d3:58:
e0:39:f2:30:27:4d:1e:4e:f3:48:20:53:fe:ab:5c:
88:b5:2f:cf:30:df:98:ae:9e:c8:2a:1c:0c:ab:69:
34:af:03:25:ac:d4:c9:88:78:cc:3c:21:11:33:85:
c8:6e:7b:90:d2:10:42:78:54:ae:33:ca:e4:58:38:
bc:f5:bb:d8:b4:62:73:a5:6d:9e:3d:78:3e:a7:85:
f4:aa:ff:95:4d:2c:88:1f:d0:b7:2b:22:86:0c:14:
74:79:fe:12:56:97:7f:fe:ea:fa:75:cc:a0:59:96:
02:87:f2:4f:e4:fa:85:3d:c6:e3:71:e6:0e:0d:72:
67:8a:4f:a2:e1:da:60:98:98:76:b3:f0:ac:f7:7b:
25:96:ef:4a:2a:18:ac:c6:05:f9:e5:af:a6:c5:a1:
44:85:e9:4e:31:58:19:30:86:fd:52:0e:5e:f5:04:
cb:80:dc:39:1f:e3:d7:24:9e:9b:72:f2:d9:f8:e8:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:30:0D:01:90:E7:23:60:C7:A6:B2:86:87:51:AB:52:D4:04:76
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/DWowDQGQ5yNgx6ayhodRq1LUBHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.238.0/24
Signature Algorithm: sha256WithRSAEncryption
16:71:ee:c8:8b:b5:c5:46:63:39:b6:06:dd:47:72:23:e7:90:
16:b0:ba:52:a4:d0:2c:ad:10:df:47:57:f3:9a:b0:98:4d:09:
76:08:8b:4a:3a:06:4b:a4:23:79:3d:ee:6a:3a:fa:d3:4d:38:
9d:3b:55:de:77:3a:59:90:62:05:2b:44:18:fa:54:90:81:b1:
34:a7:60:a7:57:f3:29:e6:4f:48:f6:c7:a9:b1:bc:69:ff:e6:
51:c5:1c:df:a3:7b:00:57:53:39:f1:60:16:8c:8c:8b:a0:a3:
0d:c6:1c:79:9f:22:b2:43:c0:a9:ef:7d:53:09:97:fe:2e:b3:
bd:2f:be:fb:df:fc:e1:c3:19:7c:98:32:ab:c5:4e:25:ad:67:
14:c2:16:61:53:b5:70:8d:41:a0:e0:9e:7f:4f:ee:5c:e2:7e:
6f:1c:fc:c5:ab:14:3e:49:77:35:7f:7e:1b:7b:14:eb:34:3c:
dc:4f:e3:4c:bb:2c:5e:ca:03:1b:e0:2a:cc:08:8c:b8:69:0b:
0d:e6:1f:4a:28:d7:15:96:a8:fb:0d:e1:0e:5f:c4:24:ac:00:
99:d0:81:74:52:56:89:cd:c5:73:fd:52:13:b6:b6:41:1c:a1:
d0:31:b7:e1:9f:c0:ce:65:1c:0e:cc:79:b6:2c:ab:6b:fd:fa:
01:bf:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:39 2025 by rpki-client