Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa
File: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (raw, json)
Hash identifier: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=
Subject key identifier: EA:CF:1E:3E:3C:89:D1:96:48:47:3D:54:52:CF:D7:83:DD:6C:E6:DB
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 01942143DC154B2D8DAA0A0958D315377475
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21094
IP address blocks: 91.212.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dc:15:4b:2d:8d:aa:0a:09:58:d3:15:37:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eacf1e3e3c89d19648473d5452cfd783dd6ce6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:31:59:27:80:19:37:b0:81:21:d7:58:2c:
cc:2d:92:9d:0c:a0:57:e8:b5:cb:70:38:e8:77:f4:
ee:ca:e4:df:1f:90:41:9e:b0:4e:71:0e:b6:bf:3e:
0d:ac:29:21:27:e7:e7:04:40:79:e2:4f:1f:16:fa:
b7:12:37:03:88:c3:ff:5f:3a:2d:57:56:b2:b4:d0:
f4:4b:4a:eb:cc:8f:47:d9:f1:04:57:71:c2:ab:4a:
98:a8:a6:f1:70:03:50:16:00:f5:4a:8f:c9:6d:2b:
16:8a:75:93:aa:63:33:2c:78:95:96:28:db:d3:ea:
06:f7:78:11:78:7b:2f:0f:81:be:55:b6:5f:80:1e:
26:98:6c:61:bc:3d:8e:fb:81:41:fc:b3:0c:ec:4d:
b6:7e:c5:b6:d6:eb:6a:f0:9c:08:0f:1d:c4:f2:50:
8b:cf:03:22:01:b4:68:7e:ec:93:e7:ca:fa:5c:32:
db:c1:2c:c0:85:6a:3f:43:17:f4:94:06:b6:71:43:
57:1d:57:ce:f0:c9:9f:8c:65:dd:8f:45:b6:50:5c:
16:db:98:a5:8a:26:55:fe:b5:77:4f:40:83:5c:32:
5c:53:18:90:c1:11:82:0e:2f:52:16:b8:48:fe:57:
48:62:70:bf:73:f7:11:02:03:90:3e:26:2a:5c:d0:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:1E:3E:3C:89:D1:96:48:47:3D:54:52:CF:D7:83:DD:6C:E6:DB
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:95:bd:3f:ae:96:3a:cb:c1:74:1f:dd:24:ba:bb:ba:e0:24:
43:b4:2f:5d:9b:c6:23:ab:6d:a4:27:c7:b3:4e:94:85:7c:4d:
4b:54:8e:d0:b4:4f:92:07:d6:51:b7:d3:ec:07:0f:ba:c8:5d:
97:0c:06:d9:52:c5:65:00:41:c2:66:9f:d8:cb:5b:a1:ff:a7:
78:59:cf:ac:8b:af:ee:71:65:cc:73:36:eb:ca:66:a6:88:34:
7b:70:9a:f7:24:ab:c8:c5:b0:4d:38:ae:32:6b:14:62:1a:bd:
31:87:1f:3f:cc:2d:c4:30:ca:c0:92:8f:b2:79:da:ca:80:90:
50:35:ee:67:01:8c:76:92:20:98:b4:f5:c5:33:bd:e6:c9:03:
bf:c4:45:cd:3e:16:a6:76:d6:3d:54:e4:5e:ef:5a:71:ec:53:
b0:d7:a0:bb:f1:ce:4a:4e:3e:ac:df:ef:75:1d:a8:71:f8:80:
8a:d2:d7:58:6c:15:a5:86:e7:a7:17:f4:fe:18:1b:e0:72:6d:
09:75:1a:0a:46:e8:91:a7:fc:6f:06:32:37:2a:b0:f8:ca:18:
19:45:a4:a0:6c:fb:2e:9e:7a:e9:f7:e7:9f:a7:2f:4b:46:9c:
d0:b3:75:7e:01:0d:5e:31:f2:c6:37:2c:f7:57:0e:75:74:6c:
43:e4:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:28 2025 by rpki-client