Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa
File: 6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa (raw, json)
Hash identifier: IGvYi40SLFLfH2GmSqyI1/Hiu8HPblZw4TFx94fRjF4=
Subject key identifier: E8:84:FA:9B:01:CC:5B:D1:26:6D:1C:C6:07:35:1B:C2:06:EC:80:0C
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 0194228E37CA50EA9419BBA976C51BEE2488
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51200
IP address blocks: 92.241.15.0/24 maxlen: 24
92.241.17.0/24 maxlen: 24
92.241.19.0/24 maxlen: 24
92.241.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:37:ca:50:ea:94:19:bb:a9:76:c5:1b:ee:24:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e884fa9b01cc5bd1266d1cc607351bc206ec800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:c9:b7:60:40:fa:5c:68:66:37:2e:b2:0e:
37:74:b4:bb:c5:fb:fd:7d:61:41:a7:ac:3c:d1:b0:
ea:c1:92:47:f7:0b:6b:2b:ba:3d:47:94:28:dc:34:
0b:13:de:f5:c3:32:71:52:41:e5:72:e3:3d:42:d8:
5c:b9:32:ef:60:16:cc:bb:38:83:a7:2d:ac:28:81:
f6:bc:a1:63:6e:a1:ca:bb:30:40:3d:6f:53:1e:5f:
7d:79:c9:3a:9f:cf:57:4a:08:b7:dd:8b:4f:79:85:
23:ba:24:8c:cf:f2:0f:93:1d:94:46:90:9c:40:d6:
7d:3e:78:a0:53:3f:2e:bf:8c:cd:f0:ab:be:a6:72:
8c:c8:55:5a:45:ed:ad:c5:60:62:27:20:ac:2e:62:
29:0d:79:97:69:84:14:18:fe:ec:de:fe:6f:ea:19:
79:d1:db:3d:a7:7a:44:d3:e8:90:2f:01:b5:e7:fa:
c8:ef:cb:c0:4d:9d:da:3f:af:c3:c3:9e:06:9a:9c:
75:e6:c6:c4:42:9d:2f:23:12:8a:7b:d5:f8:b8:be:
76:db:a9:0d:b7:26:a0:89:95:f5:3c:cc:b4:e7:d0:
af:d0:56:09:48:c7:c6:ad:67:32:d2:79:df:a3:d4:
02:b4:8a:6d:27:c2:7f:e0:25:b0:75:de:ff:06:e8:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:84:FA:9B:01:CC:5B:D1:26:6D:1C:C6:07:35:1B:C2:06:EC:80:0C
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.15.0/24
92.241.17.0/24
92.241.19.0-92.241.20.255
Signature Algorithm: sha256WithRSAEncryption
b1:19:ca:41:40:56:a3:c0:3c:56:58:88:39:0d:56:aa:d5:0b:
81:b9:44:38:8f:4e:9d:23:01:78:fc:9c:22:a5:6a:4a:af:3f:
3a:f8:1a:b0:b9:07:60:a8:af:6d:ce:c1:2a:9c:30:96:a2:52:
61:76:f6:f8:7e:3a:6e:0e:70:a7:f9:70:8d:d2:2a:5e:aa:0e:
cd:7c:1a:6c:66:aa:aa:21:ee:14:ea:6d:17:b7:93:e2:a5:dc:
8e:e2:e3:f2:0b:a5:98:32:98:5b:06:13:8e:63:a5:69:80:cd:
e7:a7:62:ce:48:46:02:2d:02:86:fe:57:7a:66:05:99:4d:d2:
1f:ff:b5:f8:85:49:96:0f:58:b7:0d:b5:ab:94:9b:4d:38:3f:
0b:7f:2b:fa:cb:fe:7c:95:3c:e4:4c:bb:14:1e:cc:8e:0f:ba:
6c:d4:bc:bd:01:3f:e7:16:a3:24:ed:0c:c1:2e:ad:cf:50:8c:
dd:d1:49:79:d3:17:29:f8:99:3a:e7:25:7b:98:f4:c2:4b:82:
bd:89:4e:8d:c2:6d:77:4d:7f:27:ba:79:0c:49:ad:1c:58:3b:
ca:ae:6f:21:49:db:fd:64:f5:02:0e:ce:67:84:d0:41:ed:fc:
00:e2:d8:15:c1:16:5f:31:aa:7d:19:3c:03:26:e7:7f:94:02:
4f:23:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:59 2025 by rpki-client