Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6SIE7lIPAfETfqeGKwz9qsqTDpo.roa
File: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (raw, json)
Hash identifier: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=
Subject key identifier: E9:22:04:EE:52:0F:01:F1:13:7E:A7:86:2B:0C:FD:AA:CA:93:0E:9A
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019427B5C92822C9FC52D8F57665F8C08A16
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6SIE7lIPAfETfqeGKwz9qsqTDpo.roa
Signing time: Thu 02 Jan 2025 15:50:12 +0000
ROA not before: Thu 02 Jan 2025 15:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c9:28:22:c9:fc:52:d8:f5:76:65:f8:c0:8a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 15:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e92204ee520f01f1137ea7862b0cfdaaca930e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:c3:67:a7:b6:fc:09:bd:f9:ca:ec:de:b7:
fc:ad:21:01:32:c0:39:7d:0e:d0:b5:fa:55:75:3f:
77:c6:c6:62:96:c1:32:ab:cd:78:6e:b2:10:f3:bb:
a2:02:0d:7c:6b:e7:25:b6:15:6d:3a:00:0f:57:8d:
1a:11:a9:95:0b:9e:e7:e0:15:99:a8:8d:b5:87:67:
9d:2b:55:6e:f7:c5:8c:0a:43:08:76:19:31:03:20:
8e:9a:34:59:dc:7e:b4:b8:8b:ed:4d:17:55:de:7b:
b7:c3:c5:6f:6c:c9:6e:06:be:8d:ca:f2:82:9e:8f:
b2:b5:d9:01:e8:a2:51:37:8b:1c:d2:32:ca:c7:18:
02:6f:7c:83:7b:53:b9:27:33:68:13:de:36:40:fa:
f6:24:a9:83:3a:d9:18:e4:88:a0:39:88:df:e5:46:
b4:b4:bf:4e:61:b3:97:fd:fc:11:48:9a:d1:c1:98:
1d:d9:3f:48:b6:e7:84:c7:5d:97:b5:c0:c8:9f:f4:
78:65:37:b5:91:38:33:95:f9:8a:fb:2c:7c:aa:d9:
08:db:18:34:9c:4c:cd:6a:66:bf:11:14:0b:ee:99:
8f:20:a5:ab:35:70:76:c1:f0:4b:86:d1:2d:b5:68:
1f:30:5a:ea:8a:b8:18:01:95:ef:3f:6f:02:e4:63:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:04:EE:52:0F:01:F1:13:7E:A7:86:2B:0C:FD:AA:CA:93:0E:9A
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/6SIE7lIPAfETfqeGKwz9qsqTDpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/24
89.187.26.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b7:73:9c:54:d2:33:44:17:49:99:46:3d:cc:84:f8:c4:e3:
3c:3e:41:50:8b:8a:fa:1a:b8:8d:0d:10:8e:8b:d1:83:e4:3c:
68:77:3e:c3:25:a0:ab:02:fd:c3:1e:52:00:4b:ed:d0:51:f1:
83:cb:e7:0c:c3:ad:83:e8:22:0c:dc:fc:fb:71:a9:17:14:43:
44:46:0d:b0:f4:0c:6c:16:c6:32:0b:1c:20:be:af:eb:a4:41:
bc:42:d5:51:22:67:f5:4b:63:fa:33:ab:8c:0b:61:6d:df:5d:
3a:86:5e:a6:6a:bd:8a:bf:d9:f8:13:9f:5a:9b:20:0b:3b:b7:
5e:0b:90:cf:42:b7:e0:0e:5b:38:49:71:ed:8a:7e:a3:e0:c3:
57:f9:b1:ca:45:58:f3:e3:1c:cf:21:61:19:43:41:5d:80:bf:
e2:37:45:eb:15:62:98:03:fc:50:51:e7:2e:27:7e:cc:27:56:
5e:04:52:c6:b6:c9:16:b3:74:a2:af:87:0b:00:b3:35:90:8b:
dd:0b:16:0a:d6:93:49:dc:bd:42:df:6f:6e:20:db:13:9d:54:
ec:63:29:97:bf:d7:bf:f1:10:d1:df:91:f1:1e:e7:73:27:fc:
7b:1f:b2:1b:70:d5:40:00:cd:05:a5:92:a8:9c:91:44:c4:2c:
3f:56:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:22:32 2025 by rpki-client