Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa
File: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (raw, json)
Hash identifier: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=
Subject key identifier: EA:E0:51:30:07:4F:C1:AF:A5:28:ED:B2:94:EF:43:96:C1:A0:B0:76
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0194266BEFAF1EB5762580ECF640B4BE742F
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16353
IP address blocks: 83.167.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ef:af:1e:b5:76:25:80:ec:f6:40:b4:be:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae05130074fc1afa528edb294ef4396c1a0b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:81:06:19:3b:81:78:37:3b:e6:bb:6e:fb:
03:6b:59:8d:91:70:4e:cf:7b:a4:18:31:7b:8b:d5:
e0:fe:10:ec:3d:8c:1f:1f:f4:45:3c:c4:95:43:4e:
43:6d:c0:70:ab:d2:4d:4a:36:ef:c9:c9:27:f6:c5:
07:28:c3:64:8a:68:74:44:1d:92:2b:8c:37:0d:e6:
b6:d8:1d:2f:0e:a6:53:de:84:50:5a:87:97:1e:97:
1e:03:65:e8:00:7e:a5:6f:78:f1:6a:ed:0f:a6:0d:
fb:7a:cc:0f:bd:31:77:ca:dc:95:82:20:fe:a7:bd:
cd:2d:98:ab:27:9d:93:c7:84:04:75:c6:45:80:93:
f2:e3:67:39:76:92:f1:cb:ff:69:b7:25:bf:15:48:
36:d3:b7:54:a1:2d:ce:a1:12:c7:1d:8a:67:bf:0f:
53:86:e7:e3:6a:07:c7:ff:a3:6c:02:7e:f7:47:0e:
b9:7b:b6:cb:a4:3c:e9:62:e1:9f:18:6d:cb:a5:fc:
0e:fd:30:6d:a5:d0:81:22:be:11:17:c3:93:2a:c2:
75:5d:eb:58:e2:7f:85:6d:9a:f2:ed:6f:1b:f6:57:
8f:51:2b:09:00:95:18:e6:9d:68:7c:6e:0e:bf:97:
e8:d9:ec:72:af:bd:96:40:fa:19:a6:40:c7:42:5b:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:51:30:07:4F:C1:AF:A5:28:ED:B2:94:EF:43:96:C1:A0:B0:76
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ec:6b:e0:5e:76:16:00:b6:45:12:c1:79:39:2f:f6:5e:91:
d6:4b:f4:15:df:0d:87:3e:0a:b4:24:52:be:2c:91:e8:44:4f:
6e:0f:3c:68:3d:ef:73:43:74:eb:d8:01:09:c3:74:b2:c2:c7:
8a:b4:9d:f8:99:fe:e2:91:c8:7d:1c:34:71:e8:59:be:d9:ff:
78:16:8d:08:ad:16:d3:6a:6e:42:43:c9:96:f9:cf:02:f7:e8:
81:4e:46:53:bf:5e:dc:bd:6e:d1:58:6b:22:b8:eb:bb:f2:10:
34:0b:e4:df:3e:ae:00:dc:e0:9f:2a:9f:ce:9c:b1:98:10:da:
ba:3b:f6:0a:a2:8e:7d:a1:ad:93:1e:99:f9:46:81:0d:b5:19:
17:1d:61:c9:40:7a:97:d1:1e:d6:a9:62:6c:78:eb:e8:18:f7:
2a:5f:24:40:79:86:e7:d4:c3:49:00:e8:d4:a5:93:c0:5d:5a:
53:40:95:57:83:c0:c8:e8:06:59:f7:ff:bd:14:18:5f:75:54:
44:e8:03:24:d2:4d:31:ca:74:ab:1a:8f:c7:0e:54:99:12:87:
35:89:7c:c2:0e:ee:cc:2f:d2:54:8d:b6:33:74:e4:d8:d6:28:
75:b3:57:97:55:f6:d7:11:e7:ac:c8:5e:03:56:65:95:4e:50:
2d:5d:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:14:00 2025 by rpki-client