Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6n0MYQi1ilR49kKQwdooOvoE7uU.roa
File: 6n0MYQi1ilR49kKQwdooOvoE7uU.roa (raw, json)
Hash identifier: 7U1bo6mM8BZJtYzW5h4tSQRNvrtTF4A214R06/x01GA=
Subject key identifier: EA:7D:0C:61:08:B5:8A:54:78:F6:42:90:C1:DA:28:3A:FA:04:EE:E5
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A669E7816C32BFDA8F5C3C80635FB
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6n0MYQi1ilR49kKQwdooOvoE7uU.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215088
IP address blocks: 145.102.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:66:9e:78:16:c3:2b:fd:a8:f5:c3:c8:06:35:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea7d0c6108b58a5478f64290c1da283afa04eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:2d:d7:dc:32:1c:13:10:97:22:2e:31:23:
14:4f:76:6d:34:d9:20:1f:ac:bd:b5:56:50:2c:91:
75:5f:2c:47:a8:11:e6:34:63:9d:98:76:93:07:25:
82:c9:31:ad:ae:91:11:24:aa:92:f9:74:f1:47:22:
6d:fc:a4:08:40:d0:dd:7c:34:2a:24:a7:a1:60:4c:
34:87:c2:7f:85:fd:73:a6:bb:ce:c9:c6:74:1a:12:
b9:22:ca:9c:a1:ba:bc:0c:22:28:fc:b5:8b:c4:12:
2b:d5:0f:12:20:09:be:a1:d4:e5:c4:73:26:fd:a9:
d1:45:cd:83:41:f9:a4:f2:de:00:b2:c8:c0:1e:52:
d1:99:7d:fc:f7:68:99:cd:a0:62:41:dc:92:b2:8d:
ae:7d:65:06:e6:81:52:27:00:0f:4a:7e:a4:fb:a3:
2d:ed:16:97:0d:cf:d1:20:a7:ff:44:95:04:c9:ff:
c0:b0:d4:d6:3b:af:6e:93:c3:fa:e7:81:5c:b4:ec:
ec:dd:e1:63:f8:c9:30:42:ef:41:aa:9b:ef:82:4d:
2b:1b:a6:db:29:f7:9d:67:8f:38:56:58:f1:a0:df:
c1:2b:ef:51:bc:31:e6:d3:89:bd:53:f9:04:51:44:
73:cd:bb:3b:16:00:8f:2c:f5:be:82:82:32:6f:31:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:0C:61:08:B5:8A:54:78:F6:42:90:C1:DA:28:3A:FA:04:EE:E5
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6n0MYQi1ilR49kKQwdooOvoE7uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:0f:27:93:93:16:5d:77:00:00:74:63:c9:f3:22:9a:2a:a8:
97:b5:98:58:ee:91:da:8f:0b:b2:9e:14:65:6a:f2:f6:ba:a0:
50:2e:0a:ec:33:49:df:34:7d:58:47:80:3b:53:7e:c2:c7:fa:
06:d8:4b:e0:74:d5:07:03:20:d3:b0:01:e1:15:ce:22:ea:be:
b8:0a:96:91:ce:53:88:e3:99:2b:d6:79:25:5b:ce:30:7f:e3:
af:45:08:ec:61:9d:6b:fe:98:04:47:5c:5f:a2:73:b1:aa:5f:
40:07:2d:a5:7e:b7:fc:ea:a1:38:6e:e3:2d:22:29:37:44:9b:
06:df:50:0a:56:b9:ff:4b:eb:a3:42:42:fe:23:8f:b7:f8:05:
50:5e:66:23:01:96:06:63:bb:35:0f:18:28:c5:c1:4b:5a:34:
62:d5:66:39:a0:bb:38:fc:4a:f9:df:70:12:a0:ff:e5:12:41:
2d:c0:5e:39:d4:76:39:67:af:0f:89:17:76:fd:63:98:83:e3:
6a:8a:2c:bd:7b:f4:05:22:56:2d:4f:76:12:8a:3e:59:41:67:
72:98:92:65:58:72:36:5d:70:b5:56:d2:52:d6:98:a4:72:ef:
14:71:72:70:43:23:93:62:b9:44:3f:d5:df:5b:c5:84:d9:b6:
6f:3a:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:25 2025 by rpki-client