Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa
File: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (raw, json)
Hash identifier: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=
Subject key identifier: 93:A7:03:88:2B:7E:7B:0C:69:A9:E4:66:7C:9C:EB:8E:66:5C:35:8B
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D64E7F188966151F8AA2A963CC760
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59627
IP address blocks: 37.252.2.0/24 maxlen: 24
37.252.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:64:e7:f1:88:96:61:51:f8:aa:2a:96:3c:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a703882b7e7b0c69a9e4667c9ceb8e665c358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c3:4e:7e:3e:83:a9:d9:e1:2a:12:9f:d3:
c3:8a:a1:2c:c1:71:db:7a:fd:39:5a:42:48:ee:09:
18:86:21:99:8b:88:c3:e3:3d:d0:4c:ba:7e:a1:2b:
44:e0:26:d7:de:25:95:55:ab:66:0c:77:95:63:bc:
42:b7:af:7e:f5:36:31:93:74:fa:47:dd:e2:d1:9f:
7d:d4:54:2f:1f:64:b2:37:6d:60:e8:ac:ed:89:2c:
a5:c9:0a:85:1e:2c:db:20:27:b2:69:7c:5a:8d:e8:
3f:85:06:33:dc:5e:b5:0b:1b:ba:9f:67:3d:5e:f4:
28:d2:07:9d:a3:3c:2b:15:df:bf:52:4b:7d:bf:5a:
d5:66:29:a1:5f:b1:29:f8:cf:41:27:cc:10:cd:ba:
4d:1d:63:3a:a1:82:db:12:55:7c:f3:3d:c0:d6:e8:
b3:33:35:f3:23:c6:97:21:53:86:48:fb:d2:7e:84:
81:64:b6:1d:97:f3:ff:5d:b8:42:79:11:ae:40:85:
1b:55:2a:38:25:5c:a1:7b:2d:45:ff:f9:57:6e:72:
b4:ee:b2:48:85:97:fe:e9:57:a6:00:ce:20:db:5c:
65:24:95:8c:55:2c:b8:e8:c0:e5:88:6d:d9:98:c5:
56:a3:4f:cf:3a:d6:0c:4b:e4:6f:90:19:ab:3a:03:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:03:88:2B:7E:7B:0C:69:A9:E4:66:7C:9C:EB:8E:66:5C:35:8B
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.2.0/24
37.252.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0b:ee:69:be:1f:5c:13:35:3f:0c:80:fd:25:30:28:a5:00:
ae:99:f6:51:d7:c0:c6:df:b1:81:a8:f1:a0:5f:4d:f4:ef:24:
43:4a:c5:ca:56:3f:f2:22:a6:c6:7a:ac:ec:ae:29:fb:a9:f6:
c2:20:16:1a:f4:36:e6:cd:b6:77:f8:c7:b1:6c:82:97:55:7d:
b1:0b:3b:21:5f:b0:c9:29:d5:c1:b5:36:55:e5:cd:b2:ab:42:
4b:41:09:8f:e3:3b:fb:12:ee:51:87:e8:0c:23:93:54:ac:ae:
e5:8c:54:cb:bd:6c:c9:af:34:2a:d9:41:b1:39:30:0f:45:8c:
52:e9:a0:e6:20:bb:fa:10:99:a8:f8:be:17:8a:a0:41:40:dc:
aa:7d:2e:66:20:98:97:1d:1c:fb:15:c9:b1:60:1d:eb:22:d3:
a1:2b:43:83:76:6f:5a:b2:01:68:bd:d0:97:ee:83:79:48:76:
e6:49:53:70:78:99:78:9c:bc:af:58:93:32:74:8c:bd:f2:f2:
b9:16:fb:c2:26:b6:f8:e2:bf:aa:8c:ef:d0:e5:c9:42:18:2a:
94:56:08:08:cc:52:7e:b1:0d:ef:f3:1a:ed:77:ca:bb:f0:85:
25:66:cb:c1:4b:c3:94:7a:9a:db:8c:92:7f:9e:2c:a7:1d:49:
94:c1:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:31 2025 by rpki-client