Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k6g0fy4EsA_CpHCIQVIbUuexVgQ.roa
File: k6g0fy4EsA_CpHCIQVIbUuexVgQ.roa (raw, json)
Hash identifier: dMwvDujY+F1gu+EvSqBuViRJ6LscxpbjxSA7wK00gVA=
Subject key identifier: 93:A8:34:7F:2E:04:B0:0F:C2:A4:70:88:41:52:1B:52:E7:B1:56:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276597BA71A282367CB8F343C05C5A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k6g0fy4EsA_CpHCIQVIbUuexVgQ.roa
Signing time: Thu 02 Jan 2025 17:54:17 +0000
ROA not before: Thu 02 Jan 2025 17:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 93.113.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:65:97:ba:71:a2:82:36:7c:b8:f3:43:c0:5c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a8347f2e04b00fc2a4708841521b52e7b15604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:82:8d:45:46:a4:80:42:d6:b4:9f:ac:b2:
1c:a8:09:f0:39:c7:79:da:4c:0b:45:d3:9d:1d:81:
fc:9c:9b:76:ce:ed:00:62:dc:38:84:0c:b5:64:da:
cc:13:d0:a6:04:ed:a6:8f:84:18:b2:05:3f:5c:5e:
4c:c7:45:03:9d:b7:d4:8f:4a:67:93:91:d8:7e:7d:
a0:07:3a:4e:f3:6c:f3:4e:42:77:38:c4:23:0d:53:
6b:20:23:71:90:b9:67:45:a9:c8:3d:37:e3:fe:5d:
02:c7:36:5c:6f:5c:ef:23:10:27:20:e1:88:3d:e8:
38:f0:11:4a:f3:c5:df:ab:14:26:67:5e:ce:1f:a4:
0d:0b:62:26:86:cc:9b:b8:83:a0:20:c1:52:b1:27:
2e:88:bf:a1:c5:cf:c9:a7:5f:7e:38:83:09:04:d7:
a8:9e:9e:ea:7e:78:e3:9b:e2:c5:58:f8:eb:ee:c0:
f9:5e:19:4c:73:89:c7:75:d8:70:a2:fb:22:04:58:
4c:0f:61:1f:f5:c7:b3:87:14:ee:7d:84:f5:2c:a8:
06:4b:be:2c:a5:8a:39:30:3c:2c:95:b3:e5:3d:e7:
4d:2b:86:4c:53:a7:af:88:5f:e8:d9:1c:58:0f:fe:
60:8b:f9:ff:14:ba:f3:c7:8e:d0:60:49:c1:72:be:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:34:7F:2E:04:B0:0F:C2:A4:70:88:41:52:1B:52:E7:B1:56:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k6g0fy4EsA_CpHCIQVIbUuexVgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.255.0/24
Signature Algorithm: sha256WithRSAEncryption
29:51:b4:bf:f0:41:70:66:a1:19:5b:21:6d:9a:de:49:79:c4:
84:cb:4b:da:7a:4e:5b:76:c0:d7:0b:4a:3e:44:42:93:cb:f7:
c0:f0:6b:1e:b0:4d:7d:44:05:ba:1c:41:98:b5:8d:9b:ef:c5:
c6:ea:f4:eb:a4:8f:cb:e4:08:28:07:ec:b0:c1:e8:16:af:2b:
88:38:36:fc:7d:05:c7:36:73:26:2d:8b:19:e3:fa:37:97:ba:
fd:85:af:ae:bc:da:95:1d:3e:b8:b6:d8:07:bf:05:dc:31:09:
43:f8:52:1a:a6:f3:7f:0e:56:41:72:fd:21:3d:11:b2:31:c9:
f4:e9:21:0b:10:6d:63:dc:f9:52:24:80:17:26:e6:15:3b:5f:
54:22:6c:db:5f:e6:9f:ab:06:2d:83:d2:78:3e:8f:64:75:73:
c6:0d:1e:91:39:f6:f6:fc:41:f2:9b:5d:6a:c8:96:03:97:ab:
22:64:5f:d8:59:a8:77:e5:00:49:78:c9:84:80:73:f3:81:a0:
ff:83:fe:03:03:4e:e1:04:d4:2c:3a:62:35:61:06:e6:f6:27:
6a:67:e5:4b:0d:34:6d:19:23:66:fe:dd:1c:8f:d6:f7:6b:59:
bd:c2:cd:fc:2a:6a:41:96:74:cc:a8:4f:25:66:21:7c:ce:3c:
9c:fe:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:56 2025 by rpki-client