Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/9v1danHKthvigEC35X1SKZS-6Og.roa
File: 9v1danHKthvigEC35X1SKZS-6Og.roa (raw, json)
Hash identifier: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=
Subject key identifier: F6:FD:5D:6A:71:CA:B6:1B:E2:80:40:B7:E5:7D:52:29:94:BE:E8:E8
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019523B9EE5FCBDAAC1DF998B8D133F07BD8
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/9v1danHKthvigEC35X1SKZS-6Og.roa
Signing time: Thu 20 Feb 2025 14:19:02 +0000
ROA not before: Thu 20 Feb 2025 14:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216329
IP address blocks: 86.104.181.0/24 maxlen: 24
185.97.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:b9:ee:5f:cb:da:ac:1d:f9:98:b8:d1:33:f0:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Feb 20 14:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6fd5d6a71cab61be28040b7e57d522994bee8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:08:0a:89:1a:c5:e0:bd:f8:60:dd:59:b3:
3d:eb:9f:88:76:61:d7:c8:4d:82:da:c4:83:f3:0c:
da:fd:98:8f:33:09:de:7a:2e:d2:a8:ed:72:2a:17:
68:1d:19:68:ec:51:5a:3d:3a:33:7b:a5:a4:92:24:
5d:fe:43:67:32:75:f5:9d:2b:10:e4:f8:d5:8f:1c:
bb:a3:5f:04:7a:30:53:96:35:a2:11:b8:41:59:9c:
d2:b9:4c:1e:3e:f9:eb:d7:b6:55:1b:4f:62:15:e6:
14:95:84:49:c8:45:0d:0d:15:8b:61:ad:01:7d:06:
0c:a3:34:16:51:68:ed:1f:83:95:81:02:8b:4c:4c:
d9:38:97:33:19:cd:19:97:6a:38:60:9e:3e:67:54:
81:45:84:a6:fa:22:0c:fd:6d:b0:9e:de:d9:c5:22:
83:6f:15:30:22:90:25:5d:fc:93:cd:5c:fe:31:28:
96:06:9c:1f:ba:23:57:01:a3:ae:99:d7:29:54:8e:
c9:88:22:05:18:d5:49:e0:0d:0c:f9:ed:e3:6f:05:
84:89:5f:b8:e3:0c:ec:f0:6f:9f:ec:af:3c:39:74:
72:de:1c:c7:bf:12:df:06:6f:0f:4d:a2:d3:6a:b1:
97:d7:9c:18:85:1d:4f:e0:6f:97:51:c7:b4:5d:89:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:5D:6A:71:CA:B6:1B:E2:80:40:B7:E5:7D:52:29:94:BE:E8:E8
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/9v1danHKthvigEC35X1SKZS-6Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.181.0/24
185.97.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:87:ab:a3:b3:94:d4:60:5c:0b:5c:a5:fd:af:31:1e:6a:98:
eb:e3:86:1c:b9:7d:a4:57:dc:df:db:41:42:99:3f:9a:dc:0a:
d9:84:66:93:90:b5:73:f0:c8:cb:cf:e3:d6:d4:0b:4f:29:a3:
db:0c:3f:76:20:d9:27:85:2d:e6:ce:a3:8c:6c:5b:29:19:52:
5b:6d:08:1c:b2:f2:75:c2:08:5d:25:8d:aa:80:65:ea:0f:94:
dd:2b:9e:b1:ee:cf:d4:5d:66:9b:20:66:c6:76:47:c8:35:cd:
e5:58:9c:1b:5e:76:8f:12:5b:42:e9:70:29:8c:31:34:7f:93:
70:ed:20:50:d4:11:56:f6:4f:14:af:d0:93:16:da:49:e0:10:
d2:55:20:de:2f:86:4d:0d:37:55:f7:dc:65:a0:a7:86:75:5e:
e4:a1:e8:17:d2:07:c6:24:e5:e4:11:77:21:de:92:33:2b:20:
08:72:8c:4b:49:95:4b:0a:4e:11:bd:1d:f6:e5:dc:34:fc:8a:
08:7f:ca:98:69:fd:2e:65:9b:07:7b:09:90:d5:dc:78:e8:6c:
74:fd:67:8e:ab:a5:f5:a1:f0:3e:0f:0b:c1:c4:72:6b:19:25:
25:72:75:1c:7d:07:96:85:8d:dc:75:0f:cf:bb:1e:5a:ee:4d:
83:a5:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:31 2025 by rpki-client