Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6j_HwYoHDRXW-JIeSYcbKpFaAGY.roa
File: 6j_HwYoHDRXW-JIeSYcbKpFaAGY.roa (raw, json)
Hash identifier: SZRPLy7MpyR+ix2142MR854/rXLvjiZnzOVc1x5SDdY=
Subject key identifier: EA:3F:C7:C1:8A:07:0D:15:D6:F8:92:1E:49:87:1B:2A:91:5A:00:66
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B3F60EB663F07D1374E5125E22D6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6j_HwYoHDRXW-JIeSYcbKpFaAGY.roa
Signing time: Thu 02 Jan 2025 17:53:32 +0000
ROA not before: Thu 02 Jan 2025 17:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49912
IP address blocks: 84.32.36.0/23 maxlen: 23
84.32.80.0/23 maxlen: 23
88.216.26.0/23 maxlen: 23
88.216.105.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b3:f6:0e:b6:63:f0:7d:13:74:e5:12:5e:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea3fc7c18a070d15d6f8921e49871b2a915a0066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:70:fe:80:2e:f3:9a:12:1b:78:38:f4:c9:
99:b8:41:e7:68:c0:05:31:ab:12:fd:f7:6c:f7:16:
88:b9:45:dd:bc:d9:30:34:25:0f:58:fa:54:f1:65:
ce:68:66:eb:79:ed:7e:ad:03:61:14:4d:18:f2:d8:
0f:48:08:cf:d4:a3:e4:13:32:7f:5c:ab:44:0e:6b:
0e:74:89:e8:89:80:7f:3a:d4:69:35:9f:76:e6:dc:
b0:55:4e:44:78:eb:33:c8:66:ce:6b:48:3c:63:ef:
b5:76:de:87:c6:7a:02:18:55:e6:81:0f:09:7b:8c:
1c:1f:61:84:d0:73:bd:45:0f:60:1d:04:28:57:0c:
df:7c:38:ff:ca:0e:2b:a7:41:8a:9e:e6:bd:53:80:
b9:06:0a:db:e9:77:11:c3:bb:30:96:17:a0:f2:17:
cd:a2:b5:bc:47:0c:e8:5a:a2:cb:15:81:a0:5d:bf:
16:e7:73:c0:8d:2a:53:1f:34:54:6c:b7:8d:4c:08:
90:13:85:8b:9a:05:5d:6f:b9:30:02:30:c8:6b:0c:
86:1c:36:9f:46:51:87:56:76:6d:a3:00:aa:30:67:
8e:65:e5:12:b6:2c:09:53:04:f5:2c:04:6a:8f:5e:
78:ce:c2:0e:83:0b:cb:5d:9f:bc:56:5f:ee:ca:7b:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:C7:C1:8A:07:0D:15:D6:F8:92:1E:49:87:1B:2A:91:5A:00:66
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6j_HwYoHDRXW-JIeSYcbKpFaAGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.36.0/23
84.32.80.0/23
88.216.26.0/23
88.216.105.0/24
88.216.160.0/23
Signature Algorithm: sha256WithRSAEncryption
17:e9:45:bb:c6:98:f6:9e:1f:51:f0:63:82:7a:5b:59:a9:37:
0c:9c:93:e2:87:64:e1:e4:2f:72:d0:83:00:c5:f0:3a:6c:52:
80:c7:eb:ba:3f:1f:86:72:c0:0c:a4:9e:2d:82:62:0d:fe:6f:
e5:8b:f9:2c:b7:0d:a4:c4:1f:7c:3d:3c:54:bb:75:f8:0a:2b:
7b:f3:7a:2d:20:9d:c4:2f:fe:e4:d8:fe:1a:70:b3:4d:12:3f:
e2:70:b3:36:b6:d7:0f:b4:dc:a9:48:61:44:b1:4d:d1:67:c7:
d4:40:32:41:3c:56:2e:c1:27:09:77:36:a5:d8:cb:3a:b4:0d:
09:06:93:fc:e6:d9:bc:8a:20:39:c6:00:69:e6:a0:02:ee:35:
32:1a:e0:84:60:49:ef:62:ca:21:14:1e:4d:3c:9d:68:14:b1:
a8:88:03:7a:5d:fc:e3:5c:86:6b:cd:47:1b:1a:57:8e:ac:5f:
d7:dd:fd:54:50:60:09:c8:5d:e6:cc:bf:66:0f:9d:94:16:df:
fa:14:ea:90:24:fd:77:c1:86:db:cc:53:2a:aa:0b:da:5b:71:
2e:11:89:c4:33:92:0e:f4:19:03:3d:f1:35:53:e2:0b:b4:5c:
de:f0:5e:38:b3:80:32:54:0e:4b:01:c2:ae:49:2e:b4:41:8c:
97:59:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:32:01 2025 by rpki-client