Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6GxG4Ml8USR_4Fe4e9wQN88Cwk0.roa
File: 6GxG4Ml8USR_4Fe4e9wQN88Cwk0.roa (raw, json)
Hash identifier: rPz10YepciOcPdv/3GuWjxTkwQsntvqQbTA95yYCULA=
Subject key identifier: E8:6C:46:E0:C9:7C:51:24:7F:E0:57:B8:7B:DC:10:37:CF:02:C2:4D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A36B1BE137CE568EAF91C601A523
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6GxG4Ml8USR_4Fe4e9wQN88Cwk0.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14898
IP address blocks: 81.80.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a3:6b:1b:e1:37:ce:56:8e:af:91:c6:01:a5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e86c46e0c97c51247fe057b87bdc1037cf02c24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:96:9f:4c:30:37:13:3d:58:99:24:be:f2:
d4:f9:40:16:e7:bf:95:78:3b:01:4a:92:5a:fc:2a:
e1:1f:32:0c:ad:1e:f9:43:eb:c8:c8:5b:bb:f5:14:
33:83:ea:f0:46:aa:c0:39:ce:21:5b:ae:78:27:6d:
03:a0:85:ca:62:19:7c:a4:a0:20:8d:79:7e:91:34:
bb:b6:2f:44:d4:91:15:80:b2:cf:c1:94:6c:81:0c:
12:fc:59:4c:11:64:3f:fa:ab:94:ec:4a:da:f5:aa:
13:50:1b:30:ae:52:11:f1:ba:75:2d:f0:56:5d:98:
f0:e2:e4:88:e8:99:54:91:9c:19:6c:20:7c:e8:48:
05:39:11:81:b4:c9:ac:f5:4a:8e:cf:99:e7:af:1c:
7a:ea:bb:09:fb:a8:a7:bd:2b:92:91:97:1d:1b:e5:
95:51:5b:b0:69:48:8d:21:b2:a1:cf:44:9e:e2:58:
40:61:b7:3f:e7:5e:91:42:bf:fa:13:28:01:18:f5:
d6:a4:12:3e:70:20:4a:5b:d7:77:80:5b:df:d1:2d:
f5:14:7e:59:58:fe:ef:59:18:dd:a6:17:f3:3c:8e:
78:5c:dd:6a:db:b7:f2:b9:df:06:c2:84:69:68:84:
bf:54:6e:7a:76:de:f7:57:ff:aa:8f:7f:2e:94:cd:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:46:E0:C9:7C:51:24:7F:E0:57:B8:7B:DC:10:37:CF:02:C2:4D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6GxG4Ml8USR_4Fe4e9wQN88Cwk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:12:19:2d:8a:8b:62:ec:9f:15:4f:bb:18:f4:c0:f2:a9:57:
85:44:2d:04:8e:33:9b:1a:9b:bd:6a:47:43:e1:bc:d8:82:83:
a4:45:17:db:9e:db:7b:23:48:d0:3e:d0:ec:e5:bd:38:af:75:
96:c3:5d:08:df:d7:ee:cb:e8:ab:9d:f1:ec:51:c3:91:b6:cc:
3b:90:9b:93:8c:60:dd:32:21:75:c5:fa:a8:3b:91:9c:4a:96:
f0:c4:bd:c6:46:9e:e1:3c:a4:7f:68:0d:2f:65:37:0a:f3:dd:
86:7f:96:d7:ea:19:a1:25:c0:99:e1:e1:be:b6:a1:36:6c:19:
38:64:0d:de:cb:a8:2f:ec:79:c1:96:fb:7b:66:a9:44:3a:b7:
d6:e8:ca:84:3f:1a:50:4c:cc:1e:63:1c:f3:bd:73:97:a3:03:
6f:58:94:95:77:c7:7f:fb:55:84:b2:e0:a9:35:5a:92:0f:1a:
08:1d:d9:69:95:ae:32:04:6d:e0:f0:1a:85:16:85:39:42:14:
3f:4e:e8:00:f1:7e:86:a6:a1:45:38:7f:37:ac:02:42:d7:10:
ee:53:78:79:b9:04:54:92:d0:32:9d:84:1e:50:12:22:9b:4f:
b8:50:66:db:ac:0f:e1:0b:ad:91:ba:f0:95:94:b9:2f:de:24:
9d:74:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:51 2025 by rpki-client