Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/SkYEMyHTHbyT6JuzWYh18fPiI9c.roa
File: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (raw, json)
Hash identifier: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=
Subject key identifier: 4A:46:04:33:21:D3:1D:BC:93:E8:9B:B3:59:88:75:F1:F3:E2:23:D7
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019425222B8471C434B0633F159F5E8AAFD5
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/SkYEMyHTHbyT6JuzWYh18fPiI9c.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50920
IP address blocks: 62.93.84.0/24 maxlen: 24
62.93.87.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
85.13.58.0/24 maxlen: 24
176.61.160.0/21 maxlen: 24
217.16.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2b:84:71:c4:34:b0:63:3f:15:9f:5e:8a:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a46043321d31dbc93e89bb3598875f1f3e223d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:82:ef:88:b2:ce:0a:19:7d:c7:f3:f0:c4:
e0:35:38:8f:f3:19:3f:05:19:49:15:b1:a9:6d:07:
5f:5c:ce:ab:cc:b1:f1:64:3b:ae:7c:f8:cd:fa:6b:
9d:c4:0f:11:8a:13:5c:ee:dc:e7:3b:3a:65:fe:ef:
90:c0:27:ef:92:d0:17:fc:0d:25:ac:d1:61:74:b4:
8e:c0:3e:77:b6:9d:48:59:85:a2:b4:4f:43:9e:56:
d8:0b:4f:68:27:a5:10:8d:9c:18:0f:2b:e1:87:6d:
eb:19:56:51:40:cb:3f:c7:c7:a3:5c:c0:f7:38:d8:
bd:c3:1c:7f:ef:15:8b:3a:79:d4:02:bf:f7:8f:e3:
a2:14:a4:8e:19:b5:fb:00:67:ef:60:50:f5:b8:40:
dd:e6:61:51:f4:aa:d3:a1:21:30:35:cc:70:6f:53:
03:96:de:07:32:9b:62:9e:94:b6:ef:49:96:92:44:
74:07:1d:43:f9:4b:06:7a:ff:1c:ff:17:1d:03:fc:
75:52:1b:16:c0:68:50:68:f4:4d:84:cd:1c:a6:44:
90:87:65:5d:e1:48:b8:df:80:db:25:a3:0e:7d:69:
58:7a:df:01:c1:38:d5:24:18:5c:f2:39:84:8b:97:
6d:13:39:bc:9c:52:57:0d:05:ca:9c:4f:20:c7:55:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:04:33:21:D3:1D:BC:93:E8:9B:B3:59:88:75:F1:F3:E2:23:D7
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/SkYEMyHTHbyT6JuzWYh18fPiI9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.84.0/24
62.93.87.0/24
82.192.6.0/24
85.13.58.0/24
176.61.160.0/21
217.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7c:9d:32:83:83:4b:d7:63:c9:c7:b5:25:92:bb:66:2e:8f:
2c:34:b9:22:2b:14:96:8a:69:f9:2d:2c:b8:1f:69:77:d5:76:
ba:e3:f3:f7:36:5a:2e:bc:19:8a:3f:81:3e:00:60:08:69:49:
ed:c1:8c:2a:95:57:e3:33:25:c2:c5:b3:d9:35:6f:5c:3b:0d:
be:14:1a:64:af:05:20:7f:83:79:73:bf:92:89:60:90:b2:56:
a4:03:b6:26:d0:29:55:7f:dc:f0:2b:4e:fe:50:11:f4:c0:2c:
39:cf:29:7d:c1:c0:97:82:ec:58:91:b2:ce:bd:2e:50:b8:33:
1c:6f:d4:71:da:84:93:86:0c:38:29:56:17:08:0d:fb:46:37:
a3:65:c5:58:bd:8d:7e:1c:55:7e:31:37:5e:dd:60:ce:44:b6:
2d:f0:01:a2:de:e6:d1:22:88:7a:60:96:91:9b:1a:a2:5e:b2:
22:64:01:c8:e3:a1:0c:5a:b8:ad:2a:54:b4:74:b3:d0:49:ac:
53:b1:2b:cd:3a:e4:bf:3f:34:15:0a:6b:f0:ff:49:a2:9d:70:
ce:23:07:17:5d:53:6d:8f:89:95:fa:6d:06:a5:5c:2b:90:b1:
f9:c9:7c:7a:23:1a:cb:54:f0:e6:c3:d2:63:b8:45:01:03:fb:
35:c7:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:41 2025 by rpki-client