Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6iMaTHFTsqUj9C6N3n1kNSre4jY.roa
File: 6iMaTHFTsqUj9C6N3n1kNSre4jY.roa (raw, json)
Hash identifier: kA+UJLoF1RPJVX0sIZK0dbgoCX7eXwgY8Eh7cxBhopQ=
Subject key identifier: EA:23:1A:4C:71:53:B2:A5:23:F4:2E:8D:DE:7D:64:35:2A:DE:E2:36
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B2428CCDF968412DA76D7D0C72D2CC
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6iMaTHFTsqUj9C6N3n1kNSre4jY.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212271
IP address blocks: 152.89.170.0/24 maxlen: 24
152.89.171.0/24 maxlen: 24
185.57.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:8c:cd:f9:68:41:2d:a7:6d:7d:0c:72:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea231a4c7153b2a523f42e8dde7d64352adee236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:8c:0f:26:a1:bf:62:6f:c9:1e:c1:10:c3:
e1:42:a4:82:97:5f:27:e5:07:e2:f1:d6:85:13:bb:
e3:1b:02:5e:f8:65:f1:26:da:5f:96:67:ea:4f:60:
0e:db:58:99:3a:31:85:ec:64:ac:2c:e2:84:dd:2c:
94:d4:4b:70:c1:ff:78:13:93:45:e0:57:fd:3c:58:
ea:e9:0b:06:30:fb:a5:d2:b4:c6:99:b9:46:10:ce:
5d:17:1e:0a:b3:1e:0d:a6:19:28:69:2f:64:60:b9:
c7:6d:9f:36:50:57:9f:b3:c1:11:21:c1:5c:a3:54:
c2:b9:c0:2a:e6:10:66:ad:78:7e:df:85:18:9d:92:
d2:fd:54:8d:b3:0c:80:ad:94:78:9c:5d:78:b9:60:
a1:4f:fa:51:9b:17:29:09:58:27:eb:f1:bc:95:0d:
f1:65:c2:e4:46:33:d6:9f:4d:ee:ba:7f:6d:7e:fa:
0f:13:e4:8b:ba:6a:67:62:97:44:fb:70:72:64:d5:
fc:00:e8:83:69:0b:45:5a:3d:d2:75:9a:4e:55:85:
1c:bd:7a:da:3d:24:ed:90:f6:c2:09:3f:12:43:54:
24:c4:ed:bb:7f:99:06:c6:7a:94:85:ce:1c:f4:e4:
81:cd:b6:9c:42:68:5f:44:4a:37:ad:02:25:19:fa:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:1A:4C:71:53:B2:A5:23:F4:2E:8D:DE:7D:64:35:2A:DE:E2:36
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/6iMaTHFTsqUj9C6N3n1kNSre4jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.170.0/23
185.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
04:76:0a:a8:43:46:7c:7a:6a:ff:9d:0d:e4:4d:0d:04:aa:8c:
bb:14:40:ca:e4:e1:6a:60:80:a4:4d:f9:ba:cf:70:03:2c:bb:
7f:55:25:c8:d7:15:a1:b4:ef:cf:d4:10:11:c3:e7:65:8c:20:
d7:1f:b7:c5:87:a0:d7:0a:4e:e2:45:e8:da:0b:7c:e3:21:25:
41:e9:8d:b5:9b:f1:ce:8e:2b:9c:8a:3a:db:dd:f8:22:81:2d:
9e:1e:a4:37:a1:d7:3d:59:12:db:17:dc:20:a5:4b:87:c6:1d:
3f:57:06:88:6c:17:0a:1d:90:7f:bd:10:14:0c:e0:7d:79:3b:
8e:49:b9:55:97:1e:1a:97:7a:b7:fc:7a:b0:ea:34:47:01:17:
75:21:a2:df:eb:a3:c9:90:53:c8:90:d8:28:e4:7c:fb:49:26:
11:ae:c8:d8:50:48:93:53:fe:9d:9c:2e:1c:4d:cc:e1:bb:28:
a2:32:a5:6e:b4:ad:51:26:6d:27:be:ee:e2:bd:48:90:2d:92:
3b:82:a2:6c:dd:69:ca:ce:aa:a4:58:36:32:19:b9:2c:b2:eb:
31:21:b7:7d:23:ea:b0:1a:0b:bf:6a:b9:ea:07:2f:ac:d7:7b:
4d:70:50:25:45:24:ee:76:40:45:ab:bb:b0:cd:72:1e:2f:36:
0a:2e:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:17 2025 by rpki-client