Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/l6WQyjD-Rss080gWurbvjSNBj9w.roa
File: l6WQyjD-Rss080gWurbvjSNBj9w.roa (raw, json)
Hash identifier: G12fY9TmVOiqEQy0BdAHCWeOq44fPzXTbYdmPlnhNEg=
Subject key identifier: 97:A5:90:CA:30:FE:46:CB:34:F3:48:16:BA:B6:EF:8D:23:41:8F:DC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD231901EADE8AC936C90F92D04C55
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/l6WQyjD-Rss080gWurbvjSNBj9w.roa
Signing time: Thu 02 Jan 2025 07:48:53 +0000
ROA not before: Thu 02 Jan 2025 07:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 64.137.44.0/24 maxlen: 24
64.137.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:23:19:01:ea:de:8a:c9:36:c9:0f:92:d0:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a590ca30fe46cb34f34816bab6ef8d23418fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:c5:3f:13:52:4c:f0:71:9c:7d:31:72:90:
2f:94:b5:6d:57:a5:1c:cc:00:04:d1:dc:e4:7f:8c:
d4:8c:db:65:b0:5d:a9:ba:4b:11:89:de:f8:6c:47:
83:a8:3b:9d:d0:b9:ce:d1:da:a4:3d:12:5d:0c:63:
eb:a7:7a:8d:11:ca:83:1f:a3:e3:7d:fd:d3:77:00:
93:75:66:d5:cf:f7:69:d7:a0:4b:93:d3:c6:3b:cc:
99:c6:a2:20:b6:7b:51:98:fe:30:05:c7:70:7f:0e:
46:67:f1:3f:02:48:ee:ea:82:60:00:4e:69:09:fc:
5a:d2:44:ed:fe:b4:c8:aa:fc:40:08:a8:f9:3b:59:
29:7a:b6:cb:80:d4:c0:74:f8:a1:21:7a:73:3c:4b:
aa:85:b0:70:a5:15:cf:a6:97:ed:af:72:c9:8b:33:
41:f7:14:e7:cf:e3:c4:5b:f8:2d:b5:ff:57:dc:ff:
eb:a6:82:16:87:83:0e:98:60:61:4f:8a:5f:8f:85:
64:d5:ee:98:b4:cf:b6:03:6e:9f:94:25:4f:5d:70:
7f:0a:04:a2:59:0f:88:2f:3c:09:98:41:c2:7e:12:
9f:71:2b:91:ee:05:f9:99:39:2a:03:38:6c:9e:1f:
51:fe:87:0b:99:71:30:25:56:7f:ad:1e:de:77:89:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:90:CA:30:FE:46:CB:34:F3:48:16:BA:B6:EF:8D:23:41:8F:DC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/l6WQyjD-Rss080gWurbvjSNBj9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.44.0/24
64.137.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a4:61:29:2b:71:cf:79:08:da:6b:90:85:6b:3c:9d:0c:78:
11:9e:35:81:07:c2:d5:27:11:31:e2:3d:f2:5d:e8:3f:61:af:
49:42:ab:9c:03:b3:78:6b:6e:36:fb:0d:7d:31:c8:64:6f:4f:
10:42:98:55:4b:b9:1d:d0:55:b2:72:cb:a5:2e:14:82:9c:08:
8b:87:d7:20:48:a9:7b:95:4b:01:bc:a9:9e:fb:99:54:97:a4:
15:47:da:9c:48:ee:dc:95:bd:84:e8:db:03:02:2e:99:8c:10:
92:a2:77:09:2d:48:16:6a:3d:90:f3:c5:a1:93:9a:47:9d:d0:
ba:58:b4:c1:7a:92:10:08:26:63:b5:4a:99:42:b2:bc:4c:90:
74:cf:d1:b7:7e:bd:1a:6a:28:c5:03:30:29:cd:39:22:2a:03:
92:03:cf:10:60:e4:0c:f0:a8:4c:83:95:40:55:bf:6e:37:9a:
c3:5a:03:2f:6b:de:10:4c:2f:cf:bc:1a:b2:58:35:59:77:d7:
bb:cf:0c:36:66:06:b5:0d:79:18:23:f3:6b:0e:74:2c:40:4a:
52:b7:9f:28:58:c5:6c:bc:55:60:0b:e2:b3:26:fb:d5:12:65:
98:54:ac:39:13:bd:86:f0:01:bb:60:a3:ac:40:32:cd:7b:a1:
48:da:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:01 2025 by rpki-client