Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa
File: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (raw, json)
Hash identifier: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=
Subject key identifier: EA:50:9C:0A:20:06:FD:AE:AC:39:F9:91:67:AA:9E:60:ED:79:88:6B
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0194222031B96848C444A1B67C39CF7F9F5E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 93.185.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:31:b9:68:48:c4:44:a1:b6:7c:39:cf:7f:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea509c0a2006fdaeac39f99167aa9e60ed79886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:7c:a5:b6:46:7a:47:26:aa:7f:98:d3:46:
9e:54:dd:fa:77:50:47:48:39:7a:0d:68:97:37:c8:
f0:d1:d4:9a:9b:73:0d:50:7e:e3:9a:99:da:39:63:
33:00:6d:04:47:3d:4d:26:dd:44:93:1e:2f:32:94:
09:11:f2:32:51:5a:d5:7f:dd:71:46:5e:5e:44:fd:
c5:5f:e6:23:28:6c:25:f3:84:19:6b:e0:e5:1d:63:
a7:67:de:ea:c5:21:1f:94:75:9d:a9:f9:2d:2d:4c:
f3:f8:3a:68:31:1a:32:a8:45:e8:1c:78:38:99:64:
61:f1:eb:64:b0:1b:78:3a:9a:b6:71:14:09:1d:35:
f2:3f:da:2d:07:47:b5:2a:3c:fc:58:7f:93:ed:bb:
f5:3f:b3:87:c7:5a:61:f8:3b:c3:f8:41:59:a2:07:
91:bf:17:95:d9:31:df:51:f8:87:86:37:a9:b2:96:
3b:d7:c2:96:cb:f9:48:3a:16:42:8f:d3:c3:6b:2f:
b5:c2:60:82:5e:8a:8a:88:12:4c:67:12:79:da:62:
fd:51:79:31:b9:cf:e2:2b:28:a2:6e:b5:ae:0c:b1:
88:2b:a7:e6:f1:81:9d:d0:36:0b:cc:dd:0e:85:fb:
96:f4:2a:36:e1:af:33:f3:1f:d5:b8:0b:3b:1e:91:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:9C:0A:20:06:FD:AE:AC:39:F9:91:67:AA:9E:60:ED:79:88:6B
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.165.0/24
Signature Algorithm: sha256WithRSAEncryption
38:17:37:dc:fd:09:1e:4f:ee:92:d9:41:07:69:fe:c9:bd:4a:
b1:91:55:3c:16:1e:cd:e0:06:9c:60:b6:08:00:8a:14:04:2e:
1d:d6:6d:92:9e:2d:5d:df:d8:bb:dd:c6:8a:7f:4b:9d:49:f9:
c1:9b:7f:25:6b:a5:67:5a:5e:d6:e9:45:ab:78:ec:bf:44:f9:
95:94:b2:3a:93:0b:16:dc:48:f3:10:79:c8:7d:2c:9c:e8:df:
4d:23:f1:bb:1a:44:97:cf:1e:ea:0d:05:b3:33:b7:b9:fe:2b:
11:53:61:ca:be:b4:db:92:37:49:f0:3f:14:10:bb:72:9b:d5:
2c:ab:47:88:f5:d2:f6:d9:ed:9b:78:c4:56:bc:9e:2a:3f:17:
6a:dd:2d:6b:5b:ea:4e:24:2c:e2:0c:47:06:f7:68:bc:56:ce:
96:cc:44:11:eb:55:38:86:8e:66:4a:44:b2:8c:87:72:e9:27:
e1:ff:34:83:28:f3:c6:07:d3:d7:45:27:7b:1a:43:ec:e6:f8:
1e:11:ef:08:73:08:08:4c:87:f0:a9:ca:29:73:09:e2:d1:0f:
a0:b2:9e:20:40:f9:6d:d7:f7:79:ba:67:fb:c6:58:86:78:fd:
ba:69:80:d9:c0:66:96:49:3d:23:4b:9c:50:3c:2c:89:cb:d7:
1d:d7:42:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDG5aEjERKG2fDnPf59eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTUwOWMwYTIwMDZmZGFlYWMzOWY5OTE2N2FhOWU2MGVkNzk4ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jJ8pbZGekcmqn+Y00aeVN36d1BH
SDl6DWiXN8jw0dSam3MNUH7jmpnaOWMzAG0ERz1NJt1Ekx4vMpQJEfIyUVrVf91x
Rl5eRP3FX+YjKGwl84QZa+DlHWOnZ97qxSEflHWdqfktLUzz+DpoMRoyqEXoHHg4
mWRh8etksBt4Opq2cRQJHTXyP9otB0e1Kjz8WH+T7bv1P7OHx1ph+DvD+EFZogeR
vxeV2THfUfiHhjepspY718KWy/lIOhZCj9PDay+1wmCCXoqKiBJMZxJ52mL9UXkx
uc/iKyiibrWuDLGIK6fm8YGd0DYLzN0OhfuW9Co24a8z8x/VuAs7HpHXKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpQnAogBv2urDn5kWeqnmDteYhrMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvNmxDY0NpQUdfYTZzT2ZtUlo2cWVZTzE1aUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbmlMA0G
CSqGSIb3DQEBCwUAA4IBAQA4Fzfc/QkeT+6S2UEHaf7JvUqxkVU8Fh7N4AacYLYI
AIoUBC4d1m2Sni1d39i73caKf0udSfnBm38la6VnWl7W6UWreOy/RPmVlLI6kwsW
3EjzEHnIfSyc6N9NI/G7GkSXzx7qDQWzM7e5/isRU2HKvrTbkjdJ8D8UELtym9Us
q0eI9dL22e2beMRWvJ4qPxdq3S1rW+pOJCziDEcG92i8Vs6WzEQR61U4ho5mSkSy
jIdy6Sfh/zSDKPPGB9PXRSd7GkPs5vgeEe8IcwgITIfwqcopcwni0Q+gsp4gQPlt
1/d5umf7xliGeP26aYDZwGaWST0jS5xQPCyJy9cd10L1
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:55 2025 by rpki-client