Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/6fbinwZffloM0LKbfaH0b2eS-Sw.roa
File: 6fbinwZffloM0LKbfaH0b2eS-Sw.roa (raw, json)
Hash identifier: qKNkqQbtbvk3OgnwHN7CkwuLiUcFr56z8lyxMpVt8JU=
Subject key identifier: E9:F6:E2:9F:06:5F:7E:5A:0C:D0:B2:9B:7D:A1:F4:6F:67:92:F9:2C
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01959EB2249C9E4D27865794D0ADD908B436
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/6fbinwZffloM0LKbfaH0b2eS-Sw.roa
Signing time: Sun 16 Mar 2025 11:23:49 +0000
ROA not before: Sun 16 Mar 2025 11:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.15.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:b2:24:9c:9e:4d:27:86:57:94:d0:ad:d9:08:b4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Mar 16 11:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9f6e29f065f7e5a0cd0b29b7da1f46f6792f92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:ec:76:18:7d:4c:dd:db:64:2d:64:25:da:
01:22:77:c4:3c:d1:a4:8a:01:78:4d:c3:95:3f:61:
d3:b1:29:bd:ab:2a:e6:c3:a2:1f:da:c8:85:86:d4:
f6:32:67:b3:20:a6:0a:bc:51:67:a0:6a:64:3c:db:
40:58:31:54:bc:ac:29:6b:79:b2:ac:17:16:4f:d3:
2d:fe:35:b1:93:31:1b:48:5a:eb:0d:c0:c8:7b:ec:
de:b3:31:8d:0e:8c:40:75:0f:a6:92:3a:10:61:6b:
75:49:98:5c:5b:f1:8d:3d:33:43:2b:5b:2c:b7:c9:
99:32:37:be:f1:55:4c:08:01:4f:3b:d2:97:d5:ca:
89:e4:01:94:28:c1:25:21:8a:ca:d3:d3:81:35:68:
38:24:e0:8f:1c:4a:50:e0:0e:4f:c8:80:b8:4f:79:
3a:ff:c2:7e:90:c8:d1:0e:c1:35:0a:a6:b4:0c:86:
e7:bf:e8:28:69:b2:f8:1d:f7:00:75:6c:9b:35:e6:
b6:c5:d2:f8:02:41:04:dd:7e:d0:70:04:7f:87:57:
e1:84:3d:cb:32:ca:71:d7:04:4d:be:f1:af:b5:82:
9f:84:fd:6c:c4:a5:55:6b:85:51:19:5a:1b:47:c0:
ab:26:a2:19:fa:b8:6d:d0:56:ac:ce:92:12:d7:b9:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:E2:9F:06:5F:7E:5A:0C:D0:B2:9B:7D:A1:F4:6F:67:92:F9:2C
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/6fbinwZffloM0LKbfaH0b2eS-Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:5f:31:60:63:44:17:c8:2b:3c:f2:0e:6b:6e:b6:b9:d6:f1:
51:e3:c2:96:44:9c:2b:1b:1c:0f:eb:78:f0:80:37:38:b7:8c:
48:ff:e5:7b:87:dd:ab:b7:12:c6:f0:21:7d:40:cd:fd:f0:87:
db:ea:06:75:5a:d2:4c:a1:69:43:90:55:c6:1c:fd:3e:da:34:
79:ee:ad:89:bf:36:dd:98:d5:8e:48:13:83:81:dd:0d:e2:0e:
85:30:52:91:a0:19:87:be:39:48:bc:f4:1b:69:56:22:e2:72:
fe:4d:00:4b:c2:20:fb:c7:eb:a4:fe:62:14:0f:37:73:a3:ad:
ce:a0:0e:85:63:21:0f:02:15:6f:9a:f2:34:c3:59:2e:d2:bc:
2b:0c:c0:17:e7:b4:99:93:b9:51:d3:21:9b:49:6d:ce:17:1e:
72:bf:be:28:56:f7:c8:4f:23:43:9f:ea:4b:4a:63:aa:c5:d9:
b3:ca:3d:80:3d:d5:9a:24:13:7e:97:84:ec:4e:cb:47:5a:ed:
f6:22:c0:88:e3:3a:a5:2f:14:47:19:95:2c:4c:5c:d1:39:b8:
eb:47:40:a0:80:2a:78:a5:50:c2:2e:87:36:ce:8e:b0:e8:c1:
cf:50:bb:e5:97:db:65:88:28:33:5f:ec:b4:cd:f3:e4:4d:cf:
fc:e9:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:28 2025 by rpki-client