Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/6_d9VSWBVNToOGPNlpWA61QmprM.roa
File: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (raw, json)
Hash identifier: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=
Subject key identifier: EB:F7:7D:55:25:81:54:D4:E8:38:63:CD:96:95:80:EB:54:26:A6:B3
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019422FB856CC7828B15508B4894E7FF5EDF
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/6_d9VSWBVNToOGPNlpWA61QmprM.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8839
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:85:6c:c7:82:8b:15:50:8b:48:94:e7:ff:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf77d55258154d4e83863cd969580eb5426a6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:7a:66:09:dd:00:55:5d:b6:70:f5:27:a0:
54:b3:42:76:9c:e9:d2:ae:a7:fb:40:60:f8:84:f8:
60:24:35:5c:d1:4c:80:74:47:31:60:a9:b9:be:71:
59:36:74:d5:a2:a8:7e:5f:10:ca:99:dc:05:98:57:
cc:e8:a3:6b:6d:5b:16:82:96:8f:82:f8:6d:6f:15:
5a:00:fb:1d:c8:8c:6b:6b:b8:1c:2c:55:7c:0e:98:
37:f5:e7:6d:be:18:ea:4e:fc:38:86:f7:1e:3a:81:
7b:71:d7:e7:0a:32:48:0c:98:8d:c6:92:33:51:b5:
fd:1e:c7:ec:73:8b:aa:f1:19:c3:7a:98:74:a5:63:
15:f0:98:bd:15:a2:5b:3f:8e:09:39:bb:69:16:b1:
e4:65:18:f3:1b:dc:b5:b1:a7:de:22:37:97:cd:f5:
b9:fe:59:be:91:14:dc:6d:50:3a:bc:2a:ee:7a:26:
70:92:23:af:5c:3b:55:2d:11:d8:a0:9d:11:ae:cd:
58:02:ef:5f:82:06:59:ca:bb:44:73:4e:20:e3:f6:
79:94:f4:47:8e:7a:a2:94:7e:ec:16:74:e2:d6:18:
c3:51:73:68:a1:3f:b4:d4:17:e7:b0:31:11:6b:43:
32:45:18:8d:89:a0:5d:c8:cc:c5:b3:e5:4c:ac:0e:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:7D:55:25:81:54:D4:E8:38:63:CD:96:95:80:EB:54:26:A6:B3
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/6_d9VSWBVNToOGPNlpWA61QmprM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1f:5d:93:d6:74:dc:c6:cc:10:43:11:71:06:bf:b6:ca:5e:
2b:6b:51:ed:14:14:38:f9:b0:e9:9f:9f:aa:31:fd:fc:d0:a1:
7f:0e:a1:43:67:45:b6:0d:ae:d7:c6:a8:ac:fa:28:c4:b9:9e:
14:d6:f6:54:e0:13:b3:d8:41:3f:ef:0d:67:03:3b:00:a2:9a:
0d:3d:24:08:17:2a:49:cf:6e:a7:8b:46:b7:37:90:85:40:6e:
97:7e:b1:96:9c:da:ba:04:32:85:bd:d8:8a:e9:16:10:3a:f5:
65:d8:47:e5:da:94:56:13:0f:60:0c:bb:64:c0:b8:4a:90:c1:
81:61:c1:39:81:96:be:dc:73:71:49:ab:61:e8:8c:7c:ec:cc:
d6:9f:9a:2b:a3:ae:7c:75:0c:c5:37:dc:f0:ca:a9:ec:b6:b1:
8e:81:a2:ee:cf:a0:8d:93:94:5a:5e:60:87:89:b7:3e:db:ca:
57:b3:96:82:55:ae:ce:f8:5e:01:7a:04:ea:cf:dc:bb:43:79:
4f:1d:a7:b2:d0:63:31:e2:84:7c:e4:c3:98:f7:c3:34:eb:12:
ee:47:79:17:c2:d2:ae:e0:b9:7c:b5:d2:b2:35:1a:b5:11:42:
14:86:95:cc:d9:8d:28:46:12:a9:fd:ef:0f:5c:a2:b4:c4:c4:
e7:28:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:52 2025 by rpki-client