Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa
File: 6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa (raw, json)
Hash identifier: SVipuhy3Ehx0A2p8/qYN8eYS0y6FZ2XI+LhGjs2fICo=
Subject key identifier: EA:67:23:14:7A:02:11:F4:5C:50:CC:A3:67:AC:68:85:63:F8:FE:7E
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0194221FC1D02C135CE3E38C39F5AE043AB0
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207163
IP address blocks: 93.96.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c1:d0:2c:13:5c:e3:e3:8c:39:f5:ae:04:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea6723147a0211f45c50cca367ac688563f8fe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:ed:c5:d1:7a:cd:16:82:de:28:b5:f1:9c:
95:5f:60:a8:14:87:12:ed:b3:ca:05:03:06:72:53:
0d:9a:af:d7:d6:24:13:25:a7:0e:e0:6e:28:f6:d5:
fe:12:ac:8d:04:98:de:2b:8f:7a:af:9b:0e:6e:85:
09:3b:6b:bf:94:75:f2:84:56:f3:86:f0:ba:37:7c:
48:b0:7d:7c:a4:91:af:9f:b0:10:07:01:92:ff:8b:
51:30:20:72:6b:b1:52:25:1c:cc:41:ba:23:3b:e8:
86:8a:b7:15:1b:1b:87:12:fd:85:47:b0:b9:03:0f:
07:d1:bd:48:2c:6e:bc:b8:29:72:63:76:a2:e4:0d:
fe:1c:a5:52:ed:32:57:1f:6f:7d:de:d0:74:00:77:
41:2f:37:f6:0c:0c:28:1c:2f:f5:76:c3:72:49:5b:
ec:77:7d:a9:c2:9e:28:85:69:d3:f0:10:ec:a6:b1:
4a:e5:8f:9a:fe:aa:58:9e:43:80:59:8d:d1:c3:97:
40:c3:89:15:dc:b4:5a:e3:b2:1f:2c:d7:c8:8e:8b:
ce:93:a3:4c:10:08:ff:26:d2:4b:1b:c3:26:4d:4a:
fe:1e:92:f8:8a:2c:8a:e3:80:89:42:1c:20:28:78:
ae:6b:b6:be:0a:d5:2b:b3:fb:ef:4c:91:60:70:21:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:23:14:7A:02:11:F4:5C:50:CC:A3:67:AC:68:85:63:F8:FE:7E
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.96.192.0/19
Signature Algorithm: sha256WithRSAEncryption
51:19:84:50:85:40:3a:6f:55:3a:11:f6:cf:e9:53:4e:4f:15:
34:29:cc:ad:36:9a:f2:ca:41:b6:23:71:66:74:9d:09:e4:9d:
87:04:25:64:d8:56:d6:6a:d3:15:d7:fa:30:20:29:4c:08:7a:
b4:ba:2f:5a:f3:a3:25:d9:7d:6f:a6:97:94:45:44:27:22:6c:
3e:19:97:6c:84:b8:86:28:ce:6f:ef:25:d4:f4:91:bc:ab:64:
bb:23:cb:c9:31:ad:62:1c:4f:db:86:db:67:83:b1:58:96:37:
71:6c:83:6d:45:43:c4:06:d9:b0:e0:65:48:0a:24:c4:49:7e:
28:30:fe:74:2d:6a:75:5e:d7:7c:cf:b2:08:9c:78:0e:03:57:
fd:b5:55:68:e1:68:99:dc:e0:34:fa:82:75:9a:0f:b1:6b:a5:
28:91:2f:05:c2:49:48:07:28:69:8b:49:8d:ec:ec:54:97:1e:
c5:3b:bc:52:a5:a1:f0:7a:58:93:e8:7e:3a:be:82:ba:1c:89:
c1:64:0c:4e:ae:83:7a:aa:4f:f7:79:bf:f1:10:d2:2a:48:34:
a3:0e:c3:5d:d8:55:33:39:c7:1a:70:37:2d:e0:55:d0:c2:a8:
c6:97:c7:e6:b1:66:23:48:05:3d:56:de:d3:f0:9c:9e:55:ba:
b9:04:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:33 2025 by rpki-client