Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6caVUV-TGB9bU55p1ya71OWBwvg.roa
File: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (raw, json)
Hash identifier: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=
Subject key identifier: E9:C6:95:51:5F:93:18:1F:5B:53:9E:69:D7:26:BB:D4:E5:81:C2:F8
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01942369BE0D4FBB503755ACC9BD705CE0A8
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6caVUV-TGB9bU55p1ya71OWBwvg.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 81.199.30.0/24 maxlen: 24
81.199.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:be:0d:4f:bb:50:37:55:ac:c9:bd:70:5c:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c695515f93181f5b539e69d726bbd4e581c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:73:f5:50:1b:d6:12:d5:7c:16:21:fb:04:
1e:26:3f:cb:4d:68:b0:81:a3:52:0d:dc:a3:13:6c:
5a:18:7a:7c:e3:d9:87:db:1b:d3:74:cc:3a:19:24:
39:6a:17:02:e0:e3:18:8e:54:30:18:8e:a7:14:31:
cb:23:92:d5:49:9b:ee:e9:b2:9a:58:49:ec:69:79:
e3:9c:ca:35:ae:2e:47:b4:6c:9e:20:66:51:d2:60:
58:4b:4a:33:52:1a:ab:a0:1e:25:e5:45:0a:59:a6:
2a:4d:52:39:28:42:11:e5:d2:3a:d4:4b:c2:6d:41:
83:8e:8d:b3:2a:22:a4:db:ac:b3:a9:ae:b9:95:05:
39:8d:88:05:32:f7:4a:39:f5:e0:3b:0b:b7:16:a7:
ee:16:b6:42:8b:e0:66:3d:67:70:5d:79:13:21:cc:
70:de:7d:ee:24:a3:e5:5d:b0:95:6a:58:20:30:4d:
10:41:e0:d0:be:a2:03:df:ab:a8:e8:61:63:11:ce:
4d:19:ce:e8:fb:e3:2a:2c:c0:00:3e:18:e9:95:f2:
f5:6c:9a:8a:fb:b4:d4:25:30:23:aa:a2:da:27:4b:
e8:73:b4:50:c9:ee:ae:41:33:23:d6:c6:02:52:58:
07:c8:82:89:85:ac:4b:65:03:0b:ee:1e:50:60:ec:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:95:51:5F:93:18:1F:5B:53:9E:69:D7:26:BB:D4:E5:81:C2:F8
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6caVUV-TGB9bU55p1ya71OWBwvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.30.0/23
Signature Algorithm: sha256WithRSAEncryption
72:33:22:fc:07:d8:45:03:6c:2f:ab:cd:f8:90:43:a0:2f:69:
cd:e1:9f:bb:5b:62:da:1d:65:de:fe:75:02:c6:51:b0:5e:e5:
de:00:2f:55:87:79:21:fc:19:49:74:e0:6d:65:38:70:c5:40:
63:f2:a9:ff:1b:c3:87:4b:c2:4e:37:78:f8:5e:c3:97:3e:92:
ec:19:7f:36:c6:8b:fa:52:f5:13:e7:3d:a6:f5:fb:dd:2c:c8:
0e:8b:99:d3:93:9e:7b:43:46:d1:cc:6e:97:7f:8b:33:d5:a2:
d2:7c:16:28:5e:10:58:d9:00:5a:fd:1f:5b:24:21:45:03:60:
1e:0d:4b:f3:11:19:c6:53:88:61:e4:ad:9c:ba:a3:11:6a:1d:
de:c4:5b:0e:da:38:f1:bb:a0:c3:c5:e9:25:ba:08:96:42:c6:
99:76:f4:32:8f:e5:94:8a:96:ef:2a:0c:6c:d7:ba:07:77:23:
5e:9a:d1:d5:e9:11:5c:e4:93:57:d3:94:e8:e5:44:47:1e:32:
90:50:07:d2:99:70:d6:7c:c4:5d:cc:28:bd:9c:69:48:9e:9e:
d3:f4:dc:b0:7f:23:3a:cd:9f:62:d8:0e:c6:0c:a0:6b:86:09:
b1:cd:d1:d9:cf:40:4b:f8:ef:e5:de:8e:34:a9:9a:70:96:0e:
21:85:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:51:37 2025 by rpki-client