Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6x5x5SWiSOQdADIPZBNSXkyF-1c.roa
File: 6x5x5SWiSOQdADIPZBNSXkyF-1c.roa (raw, json)
Hash identifier: m1CwyIhLQNjmA7BGQi6QY9/it5ck1FhCVay8WKGwWo4=
Subject key identifier: EB:1E:71:E5:25:A2:48:E4:1D:00:32:0F:64:13:52:5E:4C:85:FB:57
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01957B00BC0B4AD41E17EC83A82D9A286F13
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6x5x5SWiSOQdADIPZBNSXkyF-1c.roa
Signing time: Sun 09 Mar 2025 13:03:20 +0000
ROA not before: Sun 09 Mar 2025 13:03:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213568
IP address blocks: 89.40.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:00:bc:0b:4a:d4:1e:17:ec:83:a8:2d:9a:28:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 9 13:03:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb1e71e525a248e41d00320f6413525e4c85fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:5b:19:b0:cd:7d:13:44:42:b6:15:23:b5:
27:fa:70:ce:b3:0f:6d:6a:d8:5a:5a:cf:81:63:b8:
c0:66:29:5c:30:e6:38:69:5d:ef:05:e6:8a:ae:ed:
1f:ca:f5:55:3e:9f:3e:f4:da:13:ed:d0:db:a7:e2:
c7:b9:4d:a9:d6:14:b1:5d:eb:e9:3b:4c:ea:31:25:
44:cc:11:01:da:49:f2:db:7e:45:60:6d:5c:c6:8a:
f5:ea:6b:15:c2:65:80:d3:22:b4:43:0d:64:a5:f0:
65:de:d5:24:2c:cc:a7:8d:35:47:c3:4e:71:64:27:
c6:3a:a8:f1:75:40:50:e9:f9:63:76:7c:19:02:fb:
cd:02:77:4f:0e:3f:bc:05:cf:06:e5:85:25:4a:f1:
fe:6e:3c:0a:b0:b1:58:b7:ac:32:61:bc:4b:3a:e8:
39:27:0f:61:90:d3:33:57:ce:ca:71:1f:42:b5:b7:
d1:51:42:75:96:97:ab:19:79:b8:c6:7c:e4:d8:3d:
42:49:5c:53:5a:7c:b6:b2:40:23:28:df:12:de:5e:
32:c1:49:3a:e2:2e:10:62:25:77:5e:2c:a1:b8:23:
e1:92:93:2e:8e:43:75:a2:b9:39:1a:04:40:69:ac:
e0:62:1d:90:51:2e:9b:f7:96:65:3f:62:2c:c4:c4:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:71:E5:25:A2:48:E4:1D:00:32:0F:64:13:52:5E:4C:85:FB:57
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6x5x5SWiSOQdADIPZBNSXkyF-1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e5:8c:22:42:08:53:fc:3e:c1:3c:00:24:7a:d9:1b:62:83:
c6:8b:8c:2b:26:17:f1:52:50:e1:27:65:e1:e1:7e:29:d4:97:
8d:ed:50:60:17:7b:6f:63:72:fd:5f:6e:7d:5b:ae:75:2d:ee:
b5:e2:ec:fe:5f:b8:2f:2a:54:66:4b:32:90:2c:5f:67:67:ec:
ea:89:42:41:88:fa:45:67:57:9d:49:39:f5:96:24:c3:c5:ae:
22:fc:70:f1:7f:29:c5:02:1e:d5:ec:e6:a5:45:9c:07:d4:31:
8c:52:ca:aa:76:32:b6:99:33:66:14:5c:5e:02:8a:96:47:2c:
f4:c6:e4:86:06:00:74:69:3a:d0:c3:57:97:e9:19:07:54:35:
57:92:dc:a1:2b:85:a5:33:a6:9b:0a:b8:e0:10:bc:d4:04:69:
f4:03:27:7d:3d:12:8f:ec:c3:5b:7c:20:6c:1a:42:eb:8b:42:
52:3e:32:86:b1:4b:e9:23:dc:2a:56:f2:fa:11:2c:1d:8c:8a:
bf:0f:36:a5:ff:e0:ba:8c:f8:61:6b:8e:d1:55:0c:f9:10:31:
09:2b:ac:8c:f8:14:09:96:6e:78:11:9c:cf:c0:7f:6b:36:3a:
8d:13:5d:5f:53:88:07:cf:91:c1:9b:26:e3:0a:e8:58:c4:2f:
74:56:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:13 2025 by rpki-client