Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa
File: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (raw, json)
Hash identifier: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=
Subject key identifier: 04:DE:8B:46:B1:44:24:01:BE:E8:1C:E8:AB:76:75:3E:C5:0C:82:3E
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9F0E0FBA08F6D73FEEACD915EEBE9
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198996
IP address blocks: 194.107.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f0:e0:fb:a0:8f:6d:73:fe:ea:cd:91:5e:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04de8b46b1442401bee81ce8ab76753ec50c823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:34:b6:23:8a:8f:f7:82:1c:91:e2:f1:cc:
f2:00:4d:44:fc:e1:ed:ec:a5:56:bd:77:55:47:50:
96:7f:5f:f6:d3:dc:c8:2a:5d:c5:0f:e1:6b:60:97:
5a:ee:5f:8a:5e:1f:da:fd:c2:60:3f:9c:db:20:e9:
3c:9c:9f:06:8c:fd:9e:95:19:73:68:35:2e:12:ce:
8c:26:0f:ac:e3:7c:d8:3f:4c:ba:c7:65:ea:89:e7:
bb:44:56:81:3a:af:05:f6:0a:fa:56:8d:10:0e:46:
c1:6f:03:f4:4d:44:a4:50:2a:22:c9:7f:24:3f:d8:
09:d1:2a:ae:05:89:19:7b:1f:2b:f9:81:9a:38:a8:
06:51:75:b7:3a:cb:bc:fc:e6:45:95:d6:b3:db:75:
95:17:fb:8c:c2:a9:1d:51:6b:0b:f1:a9:ad:1c:a4:
c8:bc:e1:10:66:c5:8e:7c:b9:d4:0f:0c:bf:a9:bb:
d4:b2:57:62:04:2d:36:aa:23:1f:a3:09:95:68:17:
26:d8:4d:bc:6b:3b:dc:00:0f:ef:62:22:7d:77:c3:
08:da:90:90:0c:26:40:6c:e0:a4:65:49:e2:d6:0d:
be:41:1b:e8:c1:3f:48:e4:3c:9c:47:0d:44:29:0f:
10:db:9f:d0:e1:6f:6b:45:aa:5a:fe:9a:3f:77:ba:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:8B:46:B1:44:24:01:BE:E8:1C:E8:AB:76:75:3E:C5:0C:82:3E
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f9:8c:02:b6:35:0a:10:c0:2b:e6:d5:26:83:52:2b:8a:12:
f3:eb:b7:82:56:58:02:69:a6:28:f9:fa:64:42:76:e2:b0:66:
2d:37:4c:2a:8c:fc:a0:00:da:63:76:ea:12:2a:42:e6:0f:6e:
dd:52:5c:4f:96:59:76:f5:fc:ba:47:7a:1e:cf:17:83:18:0b:
1a:42:02:0e:cd:46:31:3f:e2:6a:93:91:19:08:bd:b2:c1:93:
7d:4b:b1:69:a0:fd:a5:f0:de:df:ae:47:05:89:e7:dd:1b:aa:
d7:f4:e5:b5:82:06:5a:d4:13:07:d8:0f:9a:2e:6e:70:83:15:
a4:ad:cc:33:55:b8:a7:be:f6:1d:c6:b3:df:a9:d2:96:66:24:
e4:cf:5e:06:62:07:2e:70:20:cf:22:cb:94:9b:f1:b5:7c:63:
53:83:94:93:23:8a:34:c1:a0:1c:ee:14:86:b3:12:d2:09:6c:
ea:6a:b3:7d:c1:ef:82:30:69:cc:46:4b:db:c4:1d:05:22:49:
7f:2a:2e:d9:85:7b:f9:73:bd:2a:c6:c4:7c:fe:16:ee:f7:0e:
35:fc:49:24:01:b2:51:be:15:ef:6a:42:9a:d9:3e:99:ad:40:
56:d7:d3:07:b8:16:87:1c:67:d8:b5:a6:40:1d:70:3f:73:b5:
91:9a:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:34 2025 by rpki-client