Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aw6ZlY1OhABM-9f_v2CCksdYXAE.roa
File: aw6ZlY1OhABM-9f_v2CCksdYXAE.roa (raw, json)
Hash identifier: Af3EO7SGMYPlgBlqAoel6QvBsMZ49FXmkfaILVnu+Tg=
Subject key identifier: 6B:0E:99:95:8D:4E:84:00:4C:FB:D7:FF:BF:60:82:92:C7:58:5C:01
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01942828257A3790FD553B0967C1BCA67219
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aw6ZlY1OhABM-9f_v2CCksdYXAE.roa
Signing time: Thu 02 Jan 2025 17:55:07 +0000
ROA not before: Thu 02 Jan 2025 17:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199898
IP address blocks: 92.247.164.0/22 maxlen: 22
217.79.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:25:7a:37:90:fd:55:3b:09:67:c1:bc:a6:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b0e99958d4e84004cfbd7ffbf608292c7585c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:68:10:ee:60:cb:1d:2c:88:09:64:04:e6:
fc:20:b5:af:94:8b:27:d7:e4:af:86:f8:f5:58:4e:
1f:3f:3f:90:0d:4f:bd:a7:b1:57:26:a4:10:c0:de:
27:ef:f1:79:31:ba:2d:bd:25:8d:c2:b5:f4:a0:c4:
b1:a9:78:86:d2:b4:26:cd:89:ce:a6:95:c6:ad:6c:
00:94:e2:e3:32:e4:5e:84:47:29:aa:73:91:aa:f0:
0e:e0:ef:92:33:ee:ab:e8:8d:96:4d:2f:62:8b:5e:
fb:4e:df:cb:74:6a:5d:43:c3:47:f5:bf:92:76:a3:
7d:00:75:65:30:0e:26:6b:bd:3f:84:1c:fc:72:66:
d8:c5:1b:c0:e3:66:50:ae:6e:03:8e:e8:ec:92:a2:
ba:d7:ec:8b:95:52:8b:cf:50:f6:e8:64:fc:3f:6e:
2d:ea:20:81:c9:87:35:ab:97:7a:a0:dd:26:e3:6e:
8f:44:b9:e0:1e:ef:08:1b:17:36:6e:c3:a1:10:26:
1d:07:58:d9:af:17:23:2e:ac:70:ee:81:a9:3c:02:
85:17:e4:a2:69:45:3d:28:b7:ee:f4:e6:2a:3b:6c:
ab:ff:c8:63:a1:d7:b5:32:72:76:fc:13:b8:58:b5:
3f:80:82:7f:ff:4b:4e:06:d1:3a:d2:8f:31:62:dc:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:99:95:8D:4E:84:00:4C:FB:D7:FF:BF:60:82:92:C7:58:5C:01
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aw6ZlY1OhABM-9f_v2CCksdYXAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.164.0/22
217.79.38.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ee:90:17:c6:ff:55:df:18:b0:b5:6a:cf:2c:2e:3f:31:fb:
e4:c8:e5:da:3b:d9:a2:f5:61:36:02:73:d5:45:bf:1d:43:62:
da:13:f1:0c:bb:55:6d:c6:2b:dd:8c:61:3e:52:31:da:de:69:
92:65:03:b9:bc:5b:ef:10:0d:4e:6c:b0:ce:82:96:56:09:b8:
70:a2:2e:29:50:2f:c4:8d:be:ef:ba:be:d7:a5:72:2e:23:2e:
6c:50:87:ff:78:97:b5:d8:11:14:1d:31:6c:74:b9:bc:ef:c8:
53:bc:fd:c0:bb:df:3c:b4:27:73:c5:7e:7e:e8:66:78:03:2d:
70:01:e9:20:ac:92:64:16:15:a0:09:f7:08:9e:65:49:21:f1:
dc:54:3a:c4:ee:02:c1:5a:82:e0:9e:e4:66:91:75:eb:4a:35:
ac:4d:bc:15:dd:a2:ae:db:0a:38:a0:eb:58:db:f1:7a:7d:ad:
46:c2:3d:35:0a:2f:38:a0:e7:ab:1a:49:8b:14:9a:17:13:28:
65:0d:74:8d:f5:9d:f3:c0:32:5e:07:f3:02:4e:c1:ce:9c:c3:
02:e3:cf:4a:37:40:06:47:81:8c:74:6b:b2:89:30:b5:c8:89:
bb:83:75:95:d3:a7:a3:76:53:c0:c6:01:1e:8f:0b:4b:d3:b6:
85:cd:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:42 2025 by rpki-client