Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/6yOls-b1_zSEPoNekFa6o4CZVU8.roa
File: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (raw, json)
Hash identifier: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=
Subject key identifier: EB:23:A5:B3:E6:F5:FF:34:84:3E:83:5E:90:56:BA:A3:80:99:55:4F
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019426D8E76FF23BEE985A49041C1D6520C2
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/6yOls-b1_zSEPoNekFa6o4CZVU8.roa
Signing time: Thu 02 Jan 2025 11:48:56 +0000
ROA not before: Thu 02 Jan 2025 11:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 129.233.211.0/24 maxlen: 24
153.96.50.0/24 maxlen: 24
153.96.57.0/24 maxlen: 24
153.96.136.0/24 maxlen: 24
153.96.137.0/24 maxlen: 24
153.96.138.0/24 maxlen: 24
153.96.139.0/24 maxlen: 24
153.96.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:e7:6f:f2:3b:ee:98:5a:49:04:1c:1d:65:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 11:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb23a5b3e6f5ff34843e835e9056baa38099554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:99:07:be:bd:47:d8:07:ef:32:5e:f4:40:
f4:65:79:d4:e8:a0:8b:49:77:72:66:76:d7:57:9b:
46:f5:87:be:b8:75:72:ad:1e:69:67:40:2d:30:69:
3f:5c:b8:22:2e:25:55:51:4e:8e:6a:6f:89:ed:a3:
13:1b:43:3b:99:f5:e5:90:13:9f:8f:91:ac:1d:27:
5a:5b:1f:ed:43:ef:86:ec:9d:18:28:a6:72:b9:88:
2f:0c:94:3d:9c:41:89:e2:f2:a8:c9:6d:ed:55:43:
0e:6c:21:e6:88:0e:82:f2:7e:dc:46:2d:98:30:d0:
cf:df:45:63:b6:c5:9f:36:30:f1:1b:36:ac:bf:e4:
40:41:b2:92:59:17:ec:48:fc:65:9f:2c:43:c6:25:
89:37:02:a8:9d:cb:dd:68:fb:ef:9e:7e:07:7b:e5:
ab:3e:f5:1b:15:a4:46:6a:85:1b:63:ed:09:cc:c8:
7a:85:26:16:a3:93:1a:fd:54:b7:ae:9c:28:6d:5c:
b4:44:8d:bb:d2:57:1a:40:f7:bc:c1:6f:c8:57:b4:
ea:19:0a:20:09:80:eb:0f:68:a0:32:c1:fa:4e:a7:
bb:16:a0:e6:7a:45:5a:e5:c7:65:ee:ff:87:b1:bb:
7a:93:2c:f8:fa:a5:53:77:5e:14:c3:19:f0:9b:38:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:A5:B3:E6:F5:FF:34:84:3E:83:5E:90:56:BA:A3:80:99:55:4F
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/6yOls-b1_zSEPoNekFa6o4CZVU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.211.0/24
153.96.50.0/24
153.96.57.0/24
153.96.136.0/22
153.96.183.0/24
Signature Algorithm: sha256WithRSAEncryption
97:74:cb:a3:c3:de:b7:93:64:16:2f:7f:83:09:7a:0e:cc:41:
88:0a:e4:2b:f8:cb:d6:73:47:cb:65:7f:99:8e:01:55:77:74:
c4:15:44:e4:ec:eb:7e:da:78:c1:20:1e:78:3b:fe:f3:b5:53:
1b:e6:4c:83:a1:24:ad:2e:2c:7e:66:b6:31:af:69:d1:91:b8:
4b:fa:fa:c3:3e:1f:d9:65:36:0a:fe:94:54:7e:be:1f:f6:72:
c2:f7:92:42:95:3e:bd:6b:83:d4:39:48:7e:25:b9:ba:2a:a5:
83:e1:8f:ac:4f:07:c1:27:fc:60:cb:fd:8d:46:b4:c6:87:37:
4a:13:a1:05:4c:31:7f:73:34:08:32:ee:b6:f8:6f:58:6c:08:
c8:f8:5c:5e:e5:e8:95:c2:24:5f:69:40:0c:11:2b:3a:a8:e0:
2f:38:09:3b:e3:9c:b5:20:2c:59:89:56:7a:da:7b:59:08:32:
42:74:7b:14:b3:4d:7f:f3:f5:4a:4a:3c:22:cb:49:0c:71:ac:
83:a2:94:1e:28:3c:d8:ef:f9:22:a1:c3:b0:49:e7:40:38:9a:
0b:9b:35:8a:a8:01:6a:8b:44:e1:3f:62:64:20:e4:9b:be:36:
b1:80:58:7a:65:31:79:85:2b:7f:28:5f:e7:06:84:dc:4e:03:
b5:83:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:49 2025 by rpki-client