Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa
File: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (raw, json)
Hash identifier: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=
Subject key identifier: EB:04:2C:EB:ED:30:F9:F5:89:2C:9D:21:54:F4:0A:E9:00:82:1A:46
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3C8F0D9555DACECB6F75F5ABF77A
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 88.218.42.0/24 maxlen: 24
88.218.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:8f:0d:95:55:da:ce:cb:6f:75:f5:ab:f7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb042cebed30f9f5892c9d2154f40ae900821a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:e8:fb:2b:bb:ee:7b:9b:e9:98:c6:87:7c:
a5:47:f5:10:a8:1b:00:c1:0b:eb:8f:16:fe:ab:af:
cf:41:8f:e2:38:b8:3b:d1:d1:fe:f9:9a:1d:56:68:
27:37:b0:61:cc:c4:49:eb:d8:05:97:e0:d4:35:b3:
fd:ed:43:da:56:b2:b6:35:25:e0:88:df:15:8d:c3:
4e:18:84:ac:62:77:d2:4b:0e:d2:94:1c:ff:8a:a7:
02:11:93:81:b7:2a:d2:7a:96:4a:0f:f8:6a:e3:b6:
76:cc:36:33:ec:7e:6e:95:50:06:3b:5d:ba:9b:ca:
f3:38:8a:78:57:8a:b2:8a:c9:c5:84:4c:3e:d0:f0:
44:f7:c1:cb:a3:ee:a3:29:38:14:94:aa:84:bf:28:
8b:c6:17:9f:3e:65:8d:5a:7b:ab:78:a4:93:10:28:
5d:2b:4d:5f:06:00:36:13:26:f5:5c:49:66:9d:81:
5b:21:1b:c0:59:d0:6c:46:b2:af:5a:14:15:5f:ab:
af:68:23:2b:81:22:d5:dd:0e:ca:6f:ea:01:25:63:
c4:7b:1c:ec:8d:11:fe:9c:c2:60:e7:f4:be:d8:64:
67:a4:9a:55:d9:10:14:ed:7b:aa:50:0a:12:ff:b7:
5a:39:09:25:07:94:52:43:e8:6e:d3:f6:30:73:49:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:2C:EB:ED:30:F9:F5:89:2C:9D:21:54:F4:0A:E9:00:82:1A:46
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/23
Signature Algorithm: sha256WithRSAEncryption
79:92:9c:6d:97:1f:8a:11:f9:33:29:6e:5b:10:6a:a4:19:23:
d9:86:00:0e:2b:bc:67:02:8d:b2:42:2d:10:9d:dd:76:1d:93:
28:46:b6:21:66:ef:db:71:a4:bd:d8:94:9a:05:5a:ac:b7:8b:
1f:f9:2b:63:8b:f6:ae:9e:52:a3:06:87:9c:66:3f:58:0a:ab:
6f:2d:22:3f:09:18:0c:c7:1c:31:c1:4f:ac:1f:cc:94:29:94:
ac:bf:e8:25:f0:11:4c:e7:7c:fb:50:f6:d7:13:72:d1:7a:e8:
a2:04:65:6e:88:6a:fc:ce:6a:6c:8e:ef:8e:c0:05:34:2c:4c:
a1:48:7a:1a:7b:1d:ae:bd:46:73:aa:d6:b6:88:d5:63:c8:0c:
7f:26:09:5a:bd:19:da:81:6a:9b:8d:f9:69:95:d4:fc:66:55:
e9:c9:b9:5b:db:23:87:8d:6f:36:49:ce:5c:69:ad:51:cd:c3:
3e:2e:4c:9b:99:5f:4e:33:b0:6c:b0:af:e9:3d:07:2c:7a:d3:
50:54:0d:2b:36:9a:72:25:3c:95:ea:6a:c5:ca:b2:e5:ec:8f:
1c:a9:77:90:a0:b4:93:e4:d6:03:e7:0d:15:06:3c:9b:23:f9:
94:3f:c7:21:e9:d0:d6:06:bf:bc:5a:a6:cc:5c:a2:7e:51:8e:
4d:6a:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:11 2025 by rpki-client