Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa
File: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (raw, json)
Hash identifier: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=
Subject key identifier: EB:3A:A4:6D:96:A2:6F:58:D0:D8:69:3C:C5:62:04:E2:43:64:03:4F
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0194236A534B4E5CE01C2588703A98C75B86
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50557
IP address blocks: 193.105.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:53:4b:4e:5c:e0:1c:25:88:70:3a:98:c7:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3aa46d96a26f58d0d8693cc56204e24364034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:82:34:f4:d1:ac:69:b1:78:06:ad:f8:45:
14:8d:75:ec:4f:f8:b3:b3:91:c7:60:88:6e:9b:ba:
ca:ff:b4:2c:97:4b:35:33:f9:1c:20:0c:e1:a2:26:
e8:8e:0e:f6:e8:c9:45:6e:50:c9:0f:ca:1d:09:18:
05:50:03:d8:6b:01:d7:c8:b1:83:84:c9:e5:f9:1b:
68:ba:5c:42:81:2b:35:9c:dc:7f:7f:25:aa:bc:6e:
db:0c:fa:1d:c2:7d:ea:ec:d8:eb:69:a8:c2:97:9a:
44:5b:61:c8:36:9c:80:1f:aa:79:9c:0f:92:b5:02:
c9:4e:77:3e:a5:c2:d8:f6:8e:1f:35:e1:7d:29:d0:
58:6a:70:32:49:ad:bb:ee:71:25:1f:aa:de:b5:26:
f8:5a:83:82:56:06:95:0b:a4:e3:ce:7b:db:50:f2:
63:98:fb:92:07:9c:cc:57:ff:5c:cc:0b:31:09:dd:
40:94:4c:c1:3f:90:d4:51:0e:c0:1e:61:dc:55:60:
d4:64:d2:70:0f:90:c3:9b:59:a8:69:ef:c6:5f:d0:
e8:f5:cd:3d:a4:31:2e:47:b9:b6:38:79:07:3a:aa:
b1:70:1f:c4:8c:f6:25:c2:d0:27:7a:14:21:e5:05:
0a:15:b5:b9:1c:67:51:cb:89:31:66:1b:aa:be:62:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:A4:6D:96:A2:6F:58:D0:D8:69:3C:C5:62:04:E2:43:64:03:4F
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
26:09:53:bc:56:36:21:ff:9d:d8:a5:bf:46:61:63:00:d2:ac:
01:39:02:c6:ee:45:a4:e7:e3:d0:6e:e8:62:f1:71:53:f6:ab:
99:07:de:17:35:3c:3c:07:29:c5:11:98:6d:54:90:68:e6:3c:
13:60:02:53:07:85:9f:61:a4:e4:a9:80:33:1f:13:7a:38:93:
46:c8:8d:0d:69:1c:dd:2f:35:7d:69:61:9a:21:e5:62:87:6e:
37:7e:be:39:32:60:c8:b6:15:21:de:bd:bd:bc:a8:7a:8a:f2:
c0:3e:79:4c:dd:65:fb:9a:7b:67:80:6a:d1:1e:ce:41:ed:7d:
41:7a:68:62:5b:cb:cb:dc:e2:d8:52:b6:ce:48:65:52:a8:43:
78:75:d3:ac:78:62:da:6c:85:a5:4a:fd:e7:d8:fb:26:b5:2a:
26:fa:f2:60:9b:05:34:ba:11:4f:3d:1d:50:4c:7e:7b:52:4e:
20:2d:22:0d:0f:76:d0:d3:ab:d0:7c:81:01:10:ec:68:c6:92:
bb:b8:b1:f9:ad:fd:ba:04:bd:66:6d:ec:be:25:bc:c1:88:c2:
72:31:55:cd:94:0a:c4:b7:54:40:d2:66:4e:5a:38:5b:77:99:
6b:a8:eb:98:11:a5:08:fc:52:c6:0c:0e:7f:a8:5a:63:d4:54:
e1:4c:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:22:57 2025 by rpki-client