Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/6JYNh-n5WyyjhpESG3f33euXdz0.roa
File: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (raw, json)
Hash identifier: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=
Subject key identifier: E8:96:0D:87:E9:F9:5B:2C:A3:86:91:12:1B:77:F7:DD:EB:97:77:3D
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019427B638E49FB67CEA3EC89F793BF9B6CB
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/6JYNh-n5WyyjhpESG3f33euXdz0.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15721
IP address blocks: 217.21.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:38:e4:9f:b6:7c:ea:3e:c8:9f:79:3b:f9:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8960d87e9f95b2ca38691121b77f7ddeb97773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:e8:15:69:8c:54:02:d2:2e:6a:7d:35:ef:
c3:48:b3:da:2b:f0:14:4b:88:e8:d3:ca:6f:de:2c:
90:e4:15:9c:ab:95:1e:e2:9b:3b:af:ab:55:bc:3d:
1b:2f:92:63:cd:f1:d7:6f:86:e2:15:ab:e8:ab:b7:
28:6b:78:66:9a:1b:c0:46:95:6a:d3:f5:85:64:e7:
73:0c:c6:6c:06:80:6e:9d:1d:c6:70:96:1c:0c:b5:
42:26:44:c5:d0:cd:9a:28:95:1a:3a:78:ed:62:d5:
3f:af:84:8d:30:d1:b0:c3:d6:55:0f:53:c2:4b:1a:
dc:1f:95:ea:1f:eb:be:79:54:f7:14:aa:92:06:59:
ee:51:c0:55:9e:d5:79:85:c6:23:c1:ce:3b:2d:a6:
ce:55:03:00:a2:05:7e:89:1f:a2:9b:4d:27:da:46:
0d:08:28:10:8f:ef:0e:7f:cf:74:c8:07:4d:4d:6a:
b2:09:82:b0:2f:1a:91:21:95:d8:fb:90:dc:04:ac:
60:ab:9a:63:e1:08:ee:7c:25:34:2e:a8:0c:58:6d:
fe:03:92:c3:cd:35:5a:14:d2:bd:50:a5:57:81:fa:
7e:21:1b:58:b3:21:7b:b0:a1:8c:de:08:ad:15:30:
4b:b4:f6:20:35:29:6d:2d:ce:77:a6:42:05:08:50:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:0D:87:E9:F9:5B:2C:A3:86:91:12:1B:77:F7:DD:EB:97:77:3D
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/6JYNh-n5WyyjhpESG3f33euXdz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:01:15:0d:30:14:5b:0b:5d:50:f3:01:e3:43:4d:d4:94:05:
70:6f:fa:1f:1d:5d:08:8b:1c:3e:93:9c:d1:f5:4d:a7:6f:52:
26:5c:71:cd:eb:29:b9:f2:37:46:5e:9e:fc:bc:c3:f8:c0:5d:
f2:4b:35:5a:58:ac:21:6d:e1:d1:ae:58:fd:86:99:88:a5:14:
ba:96:f5:c4:eb:15:de:e9:33:74:6e:69:60:04:ce:01:23:eb:
9f:fe:80:47:01:6a:49:69:0f:65:d6:52:d8:9f:07:03:94:a0:
46:db:ac:0a:9a:26:1b:5b:6a:df:13:7c:bf:b8:74:45:c2:a2:
73:c8:53:c6:0a:41:6d:c1:85:fe:4f:19:87:31:4a:a2:2f:67:
73:15:8f:62:c5:f1:18:80:7b:7c:f3:32:5b:bf:c0:0a:75:c7:
2a:80:9a:ea:1d:0b:f2:96:2e:80:c1:fc:09:41:b2:40:d8:29:
65:f1:5c:13:8c:8f:07:e1:6e:9b:ae:d7:5e:ae:b6:99:54:8f:
f6:f5:1b:cb:8d:73:e5:71:19:3a:58:af:6d:57:f0:de:2e:7c:
2a:12:28:28:bd:5d:06:4c:b9:e1:12:64:12:73:73:ac:7b:c1:
0c:cc:09:0f:3f:ad:ef:a2:bb:23:d1:33:3d:fc:97:6e:ce:86:
d0:aa:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:22:59 2025 by rpki-client