Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/6nn-10KbmPgCc6evrpm-TWzQPN8.roa
File: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (raw, json)
Hash identifier: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=
Subject key identifier: EA:79:FE:D7:42:9B:98:F8:02:73:A7:AF:AE:99:BE:4D:6C:D0:3C:DF
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019427B555DF292FE35D0AEADFC998C4CD05
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/6nn-10KbmPgCc6evrpm-TWzQPN8.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60813
IP address blocks: 45.148.221.0/24 maxlen: 24
45.148.222.0/24 maxlen: 24
45.148.223.0/24 maxlen: 24
81.90.96.0/20 maxlen: 20
81.90.96.0/24 maxlen: 24
81.90.97.0/24 maxlen: 24
81.90.98.0/24 maxlen: 24
81.90.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:55:df:29:2f:e3:5d:0a:ea:df:c9:98:c4:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea79fed7429b98f80273a7afae99be4d6cd03cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:11:be:76:b8:d6:45:a9:00:de:4a:37:77:85:
c5:e4:ee:d7:16:0c:ef:cd:f0:eb:d2:c5:5e:94:be:
65:26:45:25:7a:f4:6c:1b:88:90:08:d2:ea:50:14:
db:de:c1:d5:3c:24:96:38:aa:ec:cc:96:1d:10:e9:
93:6e:d8:3b:64:8a:e8:ac:21:e1:dc:de:a1:11:98:
2b:0f:2e:9d:32:8a:66:77:ac:27:65:7b:d5:26:87:
37:d4:07:10:e8:1c:43:2b:73:33:f5:7e:72:03:18:
b2:9e:8d:9f:45:7b:2d:e3:9d:fc:6c:68:60:bc:6d:
23:ed:37:f5:0a:59:62:51:41:8f:82:33:c9:82:a3:
50:0d:01:a1:63:2e:f8:cf:ef:90:87:4e:cd:7c:dd:
ac:67:25:7f:58:05:f0:81:8a:c5:8b:2c:ab:d2:af:
62:35:45:bd:15:6c:88:b8:2f:80:ed:28:f6:1f:a2:
a9:b5:b5:57:a1:25:39:fa:83:52:6c:b1:74:83:b3:
60:81:ed:48:03:d3:96:77:42:46:93:f1:ac:f3:d6:
c3:52:c8:d7:4f:38:81:95:da:7b:25:13:ab:a0:01:
94:9b:40:0b:f7:fe:2b:a1:d8:b9:34:1a:97:cc:1a:
64:86:54:e5:8f:55:ca:51:0e:5d:c6:ce:4b:7c:e7:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:FE:D7:42:9B:98:F8:02:73:A7:AF:AE:99:BE:4D:6C:D0:3C:DF
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/6nn-10KbmPgCc6evrpm-TWzQPN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.221.0-45.148.223.255
81.90.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:6c:de:89:ce:f2:54:a2:94:9e:ec:94:f2:df:0d:6e:99:8e:
b9:01:bb:39:6d:9c:d2:20:39:55:f1:15:e5:cd:7d:24:b2:c6:
6f:80:e5:57:c9:38:bf:cc:41:97:dd:e5:d4:84:d7:68:95:69:
4d:22:82:4d:91:6e:d4:25:47:b6:02:6c:37:43:eb:dc:c5:d5:
cb:f6:91:b6:ac:68:9c:45:28:e2:ce:02:84:00:3c:80:23:06:
1f:a1:9f:64:63:52:59:37:3d:10:b0:c0:c5:c6:a5:81:11:74:
f1:af:b1:65:6c:cf:6e:bb:ef:7e:6f:31:4d:e3:8e:6c:5a:45:
6c:71:9e:20:31:99:6b:f8:f0:91:6a:76:fa:84:9f:ab:ba:23:
90:0f:fd:0e:5b:4e:d3:7a:3e:28:b8:2f:a5:af:c2:a2:58:50:
10:bc:9d:33:74:06:0a:bd:15:b7:fc:81:58:5f:c6:65:46:17:
3a:bf:7b:85:c8:d0:1c:45:8c:a7:3b:48:80:1c:20:41:1a:2b:
84:3c:95:52:31:23:54:66:a4:1c:2f:a8:a7:19:85:d8:a2:7d:
27:21:95:ef:1d:d7:d2:26:af:c4:9e:13:ef:3e:32:93:68:f7:
c1:13:db:d1:65:f6:e5:3e:f6:d1:c6:b4:a1:a1:e5:c1:31:69:
3a:3e:dc:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client