Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/6qHqGf1lu-fFKG9vb1_H15ADuJo.roa
File: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (raw, json)
Hash identifier: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=
Subject key identifier: EA:A1:EA:19:FD:65:BB:E7:C5:28:6F:6F:6F:5F:C7:D7:90:03:B8:9A
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0194221F7BEE71534A9CF3E030F9DADB507F
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/6qHqGf1lu-fFKG9vb1_H15ADuJo.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8841
IP address blocks: 193.220.180.0/22 maxlen: 22
193.220.208.0/21 maxlen: 21
193.220.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7b:ee:71:53:4a:9c:f3:e0:30:f9:da:db:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa1ea19fd65bbe7c5286f6f6f5fc7d79003b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:a7:3f:5c:73:8a:2a:34:8c:93:30:d3:8b:
0e:c6:5f:c4:bd:7f:68:09:db:5a:c0:86:10:74:57:
22:91:93:98:33:fc:74:d7:e1:2c:15:e8:1a:9a:83:
0c:86:bf:a4:d8:a7:e0:25:f1:34:bb:e7:08:ed:24:
02:00:d9:20:70:45:dd:f6:18:b6:e4:1b:62:61:78:
ed:85:49:c2:29:eb:72:7d:19:52:6f:99:a0:8e:ec:
98:2b:fe:b9:b0:48:73:32:fe:0c:15:7f:06:7b:ae:
e5:f7:21:db:16:8d:0c:e5:66:e8:ad:04:3a:27:00:
0d:5b:81:19:de:ca:a5:34:bf:12:f0:88:7d:37:6f:
16:27:a6:90:b2:65:bf:d0:01:44:4b:ec:d5:7e:8b:
0d:c2:10:98:6e:cc:35:d8:63:95:6a:c7:3e:f3:4f:
0c:f6:56:45:8d:c4:eb:b5:7c:a4:9c:b3:32:d6:09:
d6:8f:66:c2:b7:1e:6c:01:60:2f:6d:c6:09:48:cb:
8e:8d:ec:fc:05:86:6f:e6:c3:b8:c9:a2:a1:1e:00:
60:b3:3b:35:2b:28:93:ad:97:37:ca:7d:68:4a:d5:
5e:cf:01:42:7c:3b:7d:29:b7:9e:59:51:76:a9:3b:
97:f4:d3:f3:fb:54:0c:7b:92:55:dd:6b:3f:c3:97:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:EA:19:FD:65:BB:E7:C5:28:6F:6F:6F:5F:C7:D7:90:03:B8:9A
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/6qHqGf1lu-fFKG9vb1_H15ADuJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.180.0/22
193.220.208.0-193.220.219.255
Signature Algorithm: sha256WithRSAEncryption
57:dd:aa:5b:17:e0:82:ae:a3:18:ab:09:b5:9f:b3:d4:83:a9:
48:66:0f:3c:0b:aa:81:c5:5d:d1:ef:69:99:ea:08:5d:f4:71:
79:c7:2c:bd:96:9c:4a:6c:83:48:8f:3a:e7:a8:ba:5e:f6:ec:
31:4d:4e:1c:db:df:f7:f9:e2:0a:7b:21:dd:03:90:b2:e8:6f:
e4:c5:d0:fa:d7:9c:67:d7:84:df:b0:71:c1:88:c3:84:a7:d8:
fa:67:38:e1:ae:7f:d0:29:df:cf:26:c3:bc:34:9b:ea:34:86:
fa:e3:46:ec:1c:44:40:04:d1:23:a3:50:59:3d:66:51:88:91:
e1:68:43:4e:63:21:c0:75:f7:e7:38:bb:ea:e6:41:09:6c:6b:
d9:aa:1e:65:22:3b:80:71:46:71:7e:f1:50:69:45:aa:89:14:
30:b1:88:71:0a:4d:b2:3c:05:6c:c6:75:3c:c3:55:50:6a:05:
51:0c:ea:92:a5:88:6d:a5:ca:35:14:c4:43:a4:7d:89:6d:20:
0b:36:51:ea:2a:83:e6:1b:45:a6:28:54:85:ea:06:49:9c:bd:
8b:e1:e6:91:f7:64:00:92:7f:1b:7a:80:34:d8:76:39:7b:7b:
3b:4a:ea:ab:11:84:23:9c:5a:d9:ef:18:a2:e6:3a:9c:3e:b9:
2a:7a:8d:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:21:50 2025 by rpki-client