Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6n6eBKfvBliO2E4gkLt3eFYs114.roa
File: 6n6eBKfvBliO2E4gkLt3eFYs114.roa (raw, json)
Hash identifier: RH+pf4eZP9zTs6UNzlcLIEdcDd3ZwVvqZYyWYbfqbRQ=
Subject key identifier: EA:7E:9E:04:A7:EF:06:58:8E:D8:4E:20:90:BB:77:78:56:2C:D7:5E
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019424454873EF3D7880F6128FA90D12084A
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6n6eBKfvBliO2E4gkLt3eFYs114.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a0d:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:48:73:ef:3d:78:80:f6:12:8f:a9:0d:12:08:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea7e9e04a7ef06588ed84e2090bb7778562cd75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:09:bf:86:4e:f2:ed:70:09:21:44:15:22:
de:cc:63:5d:e9:6e:ff:e7:90:d5:c6:93:fd:e1:e6:
b3:37:4a:02:c0:1e:72:cb:c6:a7:2d:44:1b:8c:c8:
37:c0:15:59:5a:8c:53:f9:2e:95:a0:9a:d1:93:93:
9f:93:25:aa:69:97:8d:fa:38:7f:ec:85:1c:53:66:
92:b9:52:93:a2:f5:e5:31:9e:35:34:61:dd:4b:80:
cc:07:cd:e1:ed:bf:69:80:f4:20:9a:db:dc:55:cc:
74:81:a0:1d:7c:6f:52:58:93:43:44:e7:09:25:bf:
8a:5e:f1:fe:89:1d:4d:35:f1:20:a5:25:e9:55:9d:
35:53:1e:80:76:60:7d:67:6a:f3:1b:d9:a7:48:d5:
5b:a5:34:4d:31:55:fb:3a:f8:04:79:2e:bb:2e:13:
75:c1:bc:05:c7:e4:aa:a2:3f:d0:d6:84:bb:db:ed:
cc:b6:76:f2:ca:c5:c3:ef:14:c0:c3:0a:7a:06:d9:
22:8f:0a:29:43:d0:7d:44:e1:3e:22:0e:b7:00:f6:
aa:58:79:c5:0e:a9:99:08:b7:8a:d3:a0:f8:63:ff:
df:9e:3a:c4:bb:99:a5:04:31:1f:55:49:97:7b:3e:
ac:df:6a:31:fe:f7:1c:63:d1:5f:b9:e4:27:66:a2:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:9E:04:A7:EF:06:58:8E:D8:4E:20:90:BB:77:78:56:2C:D7:5E
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/6n6eBKfvBliO2E4gkLt3eFYs114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3900::/29
Signature Algorithm: sha256WithRSAEncryption
0e:24:1a:21:9a:a7:32:31:89:a7:52:1d:f7:bc:fc:af:2e:3f:
be:45:2f:3b:36:84:99:53:65:01:68:53:04:f7:11:1e:f1:30:
07:72:97:cb:34:9f:a6:a5:71:c5:c9:8b:f7:c6:ac:a0:24:7e:
4c:74:c6:6f:1d:1b:35:a1:1b:a9:5b:ab:f2:51:fa:be:58:66:
e2:02:c7:cf:b3:f8:c8:e5:9d:83:6b:f6:a0:1b:4b:ca:c5:e8:
28:ee:32:2d:fb:f1:f4:f7:ac:02:38:65:14:c0:e8:3b:57:01:
e3:2f:82:34:99:1e:cc:73:fc:52:44:ca:c2:a1:51:88:c2:3e:
b1:b7:3e:67:a7:a7:28:c0:bf:66:87:07:34:92:60:8a:2a:06:
5e:de:8f:ea:05:f8:6d:67:a6:c9:21:d7:ed:27:d0:d1:d9:6f:
ff:84:9e:35:7d:1d:da:6f:41:4a:de:d8:f5:59:14:3d:4c:01:
c6:99:4d:14:90:18:eb:15:72:94:d8:1d:24:39:35:30:2c:c7:
2d:11:61:56:5a:21:e7:a5:2b:61:c1:05:0c:1c:3d:c0:6c:89:
b0:50:5f:f4:75:74:a6:42:7e:54:d5:7d:5b:cf:53:fc:e3:17:
9e:27:e8:56:28:88:02:6b:c0:32:96:8f:30:36:60:61:42:14:
13:31:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:26 2025 by rpki-client