Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6xhDMjLWegiTNxnVw5JYv0_kcfM.roa
File: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (raw, json)
Hash identifier: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=
Subject key identifier: EB:18:43:32:32:D6:7A:08:93:37:19:D5:C3:92:58:BF:4F:E4:71:F3
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01953AE86229567127BDFD96E97E05B12AC5
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6xhDMjLWegiTNxnVw5JYv0_kcfM.roa
Signing time: Tue 25 Feb 2025 02:21:02 +0000
ROA not before: Tue 25 Feb 2025 02:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215165
IP address blocks: 2a13:2200:a::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3a:e8:62:29:56:71:27:bd:fd:96:e9:7e:05:b1:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Feb 25 02:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb18433232d67a08933719d5c39258bf4fe471f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:2b:6c:e9:6d:cb:63:22:db:65:6c:31:27:
61:41:b6:fa:21:ca:29:3f:ea:03:d8:32:81:46:25:
7b:6b:14:2d:79:ea:2d:25:46:0e:c7:c3:2f:22:63:
4e:a4:4f:84:7b:0c:b5:8d:df:8e:ed:61:60:fa:79:
43:20:51:b2:62:f6:a2:cc:86:b6:24:46:10:c7:e6:
c2:23:f1:50:77:aa:a6:3d:f9:fd:98:b1:b2:1d:47:
40:6c:20:88:f8:00:92:76:38:11:a4:90:98:1f:e1:
5b:6d:01:32:f9:e4:27:e6:1d:d5:c1:e7:87:2b:de:
ee:37:da:8e:a6:9f:4c:f3:b5:52:46:78:24:60:30:
aa:44:0b:7d:b6:61:bb:ae:e7:9f:a1:98:27:8b:ca:
81:cf:f0:aa:51:34:9c:75:d0:10:e6:b6:76:54:02:
f7:c6:66:b7:93:1b:49:b8:dd:1c:6a:50:e6:2c:04:
e2:20:82:1c:e7:ed:25:17:8a:0a:47:c1:58:36:d3:
d6:2f:2e:ce:6c:9f:9d:3a:bd:2f:68:d7:d6:47:f7:
fb:a3:29:21:c2:5e:ae:cd:1c:09:bc:42:ba:94:44:
66:2e:0c:e4:66:d9:52:01:94:01:5b:2f:ec:aa:cd:
c9:29:c3:8d:fe:b8:1b:fd:4d:c0:6b:60:4a:8b:cc:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:43:32:32:D6:7A:08:93:37:19:D5:C3:92:58:BF:4F:E4:71:F3
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6xhDMjLWegiTNxnVw5JYv0_kcfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:a::/47
Signature Algorithm: sha256WithRSAEncryption
4c:53:a5:00:00:26:02:60:fb:fd:87:c5:cf:39:66:28:db:4b:
7d:2d:d8:58:ff:0f:a1:68:e4:ca:c4:e5:f0:46:ea:f4:34:f8:
0b:c2:c6:7a:93:d9:11:94:30:f1:8f:a2:ec:6b:4a:84:f8:e3:
99:1a:3f:b9:b4:47:8b:d4:28:67:17:e7:12:54:35:c1:fc:74:
f7:84:c7:d1:21:4a:48:82:87:be:92:2d:49:78:9d:59:ef:ab:
93:74:e0:47:04:52:44:21:8c:c5:c7:56:1a:fa:85:fa:3c:fb:
93:4a:4e:38:ee:cf:50:42:a1:b7:2c:ef:fe:a5:9d:b7:ba:f7:
92:51:1b:14:eb:ad:68:5c:ed:04:47:79:8e:8b:05:0e:8f:67:
bf:9d:b2:66:e2:c9:99:92:ca:76:eb:f6:37:6c:c9:8b:35:b6:
f4:5b:20:f1:55:55:f8:cb:13:83:cd:a6:e6:13:02:61:14:b7:
f9:21:d9:88:13:11:20:65:6c:6f:53:8e:12:9c:91:50:5c:9a:
15:7f:5c:b4:18:b2:85:53:a7:ca:c6:61:dd:a1:18:7b:14:de:
8e:91:20:6c:33:de:ac:79:5d:16:03:62:98:43:46:70:82:ba:
50:25:1b:15:83:a5:e8:bc:b4:45:2c:bf:54:9f:2f:30:20:7e:
d7:60:d6:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZU66GIpVnEnvf2W6X4FsSrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5
N2M2MDYwHhcNMjUwMjI1MDIyMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjE4NDMzMjMyZDY3YTA4OTMzNzE5ZDVjMzkyNThiZjRmZTQ3MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsrbOlty2Mi22VsMSdhQbb6Icop
P+oD2DKBRiV7axQteeotJUYOx8MvImNOpE+Eewy1jd+O7WFg+nlDIFGyYvaizIa2
JEYQx+bCI/FQd6qmPfn9mLGyHUdAbCCI+ACSdjgRpJCYH+FbbQEy+eQn5h3VweeH
K97uN9qOpp9M87VSRngkYDCqRAt9tmG7ruefoZgni8qBz/CqUTScddAQ5rZ2VAL3
xma3kxtJuN0calDmLATiIIIc5+0lF4oKR8FYNtPWLy7ObJ+dOr0vaNfWR/f7oykh
wl6uzRwJvEK6lERmLgzkZtlSAZQBWy/sqs3JKcON/rgb/U3Aa2BKi8xdHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOsYQzIy1noIkzcZ1cOSWL9P5HHzMB8GA1UdIwQY
MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt
YjgyOWNjNDAxMDMxLzEvNnhoRE1qTFdlZ2lUTnhuVnc1Sll2MF9rY2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx
LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhMiAAAK
MA0GCSqGSIb3DQEBCwUAA4IBAQBMU6UAACYCYPv9h8XPOWYo20t9LdhY/w+haOTK
xOXwRur0NPgLwsZ6k9kRlDDxj6Lsa0qE+OOZGj+5tEeL1ChnF+cSVDXB/HT3hMfR
IUpIgoe+ki1JeJ1Z76uTdOBHBFJEIYzFx1Ya+oX6PPuTSk447s9QQqG3LO/+pZ23
uveSURsU661oXO0ER3mOiwUOj2e/nbJm4smZksp26/Y3bMmLNbb0WyDxVVX4yxOD
zabmEwJhFLf5IdmIExEgZWxvU44SnJFQXJoVf1y0GLKFU6fKxmHdoRh7FN6OkSBs
M96seV0WA2KYQ0ZwgrpQJRsVg6XovLRFLL9Uny8wIH7XYNYc
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:31 2025 by rpki-client