Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6H3IB_HstDS6LI6-SIwQfdZH8NI.roa
File: 6H3IB_HstDS6LI6-SIwQfdZH8NI.roa (raw, json)
Hash identifier: do/PM+RkzzcQvPULycLcJGGjK4c/59gjd13ifwPlFP4=
Subject key identifier: E8:7D:C8:07:F1:EC:B4:34:BA:2C:8E:BE:48:8C:10:7D:D6:47:F0:D2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019441080671DB0AB0EFF2E8D6F3F12262DF
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6H3IB_HstDS6LI6-SIwQfdZH8NI.roa
Signing time: Tue 07 Jan 2025 13:50:32 +0000
ROA not before: Tue 07 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48024
IP address blocks: 178.173.228.0/24 maxlen: 24
178.173.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:08:06:71:db:0a:b0:ef:f2:e8:d6:f3:f1:22:62:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 7 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e87dc807f1ecb434ba2c8ebe488c107dd647f0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:a8:0f:73:8d:35:36:c1:75:6b:7f:0a:c9:
05:47:61:0d:d7:62:7d:5c:1b:15:ae:e7:bd:65:af:
d0:82:0b:76:a6:76:d0:07:f1:7f:33:a0:e2:40:8a:
86:7e:62:fa:7c:2a:a8:22:73:42:4c:76:72:47:dc:
76:50:22:09:0b:f3:ea:59:9f:a8:68:f2:1b:ad:8b:
ba:04:69:ca:8e:69:9e:48:a2:65:cf:06:1b:08:02:
04:3e:f0:46:95:05:9e:87:4a:e3:fa:4a:28:32:0b:
be:bb:ce:c1:e9:92:a8:ae:6b:dc:a8:e7:1c:3a:85:
4c:96:cd:94:ed:70:d5:21:b6:b7:9e:29:12:27:68:
15:7b:ac:ca:44:5c:2e:46:de:62:87:24:d0:dd:61:
b7:a8:3b:ef:7f:a6:6b:c3:8c:81:45:df:da:56:ce:
c1:be:89:cb:7d:b4:64:38:ac:17:f4:8c:50:40:a9:
03:9b:d2:16:c7:58:a5:16:e9:3f:92:bf:0b:f8:91:
ce:b9:f6:3a:f4:18:a6:c6:79:ad:f5:3b:65:26:4a:
dd:f3:fa:9d:4c:31:f9:f3:f1:4b:7e:77:32:67:63:
e4:49:7d:aa:06:3f:d2:50:80:3e:22:92:88:86:2a:
ee:3a:db:f6:99:12:fa:23:cd:eb:74:51:2a:96:4d:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:C8:07:F1:EC:B4:34:BA:2C:8E:BE:48:8C:10:7D:D6:47:F0:D2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6H3IB_HstDS6LI6-SIwQfdZH8NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.228.0/24
178.173.241.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4a:39:62:02:07:45:e7:07:70:58:fe:76:f4:83:c3:11:ee:
82:09:96:b6:fd:48:c8:ae:78:85:80:b1:70:56:de:c3:48:f9:
3c:9c:31:64:41:5d:54:a7:d6:79:9b:41:0a:cf:bb:71:fe:a6:
78:15:81:15:34:e3:90:cb:27:f5:e5:c9:29:f3:e3:72:51:cc:
c2:8a:6e:8c:25:3b:da:cc:15:89:18:2d:d6:4c:c6:f7:05:6d:
d2:5b:84:0d:9c:13:c2:3a:c5:45:be:55:3c:4f:b9:14:01:57:
5c:2b:cb:56:99:a3:a5:e9:10:51:18:05:8a:39:cf:dd:93:9e:
d4:3e:83:03:22:8d:a2:f1:02:38:37:1d:f6:ee:f1:5b:5b:51:
8d:22:4b:b4:7d:d1:9e:ce:da:30:f0:cf:9d:3e:df:78:88:47:
ef:de:42:fe:88:83:a4:2b:d7:f8:a5:36:a8:e0:af:48:35:91:
ed:67:7c:3f:19:6f:4e:23:53:42:96:a0:b7:4e:dd:52:a9:87:
39:d5:b9:2a:46:2e:43:ba:8a:15:0f:ad:fa:cc:20:c7:b9:45:
bf:0d:18:64:49:80:1c:c6:fc:9b:eb:e1:c8:c5:53:11:c9:18:
e5:14:ca:1f:16:49:5f:ff:bb:e4:2b:c9:eb:4a:23:00:0c:63:
31:35:55:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRBCAZx2wqw7/Lo1vPxImLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTA3MTM1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODdkYzgwN2YxZWNiNDM0YmEyYzhlYmU0ODhjMTA3ZGQ2NDdmMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPioD3ONNTbBdWt/CskFR2EN12J9
XBsVrue9Za/Qggt2pnbQB/F/M6DiQIqGfmL6fCqoInNCTHZyR9x2UCIJC/PqWZ+o
aPIbrYu6BGnKjmmeSKJlzwYbCAIEPvBGlQWeh0rj+kooMgu+u87B6ZKormvcqOcc
OoVMls2U7XDVIba3nikSJ2gVe6zKRFwuRt5ihyTQ3WG3qDvvf6Zrw4yBRd/aVs7B
vonLfbRkOKwX9IxQQKkDm9IWx1ilFuk/kr8L+JHOufY69Bimxnmt9TtlJkrd8/qd
TDH58/FLfncyZ2PkSX2qBj/SUIA+IpKIhiruOtv2mRL6I83rdFEqlk02YQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOh9yAfx7LQ0uiyOvkiMEH3WR/DSMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvNkgzSUJfSHN0RFM2TEk2LVNJd1FmZFpIOE5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsq3kAwQA
sq3xMA0GCSqGSIb3DQEBCwUAA4IBAQAISjliAgdF5wdwWP529IPDEe6CCZa2/UjI
rniFgLFwVt7DSPk8nDFkQV1Up9Z5m0EKz7tx/qZ4FYEVNOOQyyf15ckp8+NyUczC
im6MJTvazBWJGC3WTMb3BW3SW4QNnBPCOsVFvlU8T7kUAVdcK8tWmaOl6RBRGAWK
Oc/dk57UPoMDIo2i8QI4Nx327vFbW1GNIku0fdGeztow8M+dPt94iEfv3kL+iIOk
K9f4pTao4K9INZHtZ3w/GW9OI1NClqC3Tt1SqYc51bkqRi5DuooVD636zCDHuUW/
DRhkSYAcxvyb6+HIxVMRyRjlFMofFklf/7vkK8nrSiMADGMxNVU2
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:58 2025 by rpki-client