Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6wIUZIBC7o21wltDwigx7lx782g.roa
File: 6wIUZIBC7o21wltDwigx7lx782g.roa (raw, json)
Hash identifier: KsD2qATWnlH1JI+kDKAmMhUibT7qf+G28GI+6ncf2G8=
Subject key identifier: EB:02:14:64:80:42:EE:8D:B5:C2:5B:43:C2:28:31:EE:5C:7B:F3:68
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019588BAFA0D053708CD9478E7551DCFBE13
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6wIUZIBC7o21wltDwigx7lx782g.roa
Signing time: Wed 12 Mar 2025 05:01:49 +0000
ROA not before: Wed 12 Mar 2025 05:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59623
IP address blocks: 178.239.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:ba:fa:0d:05:37:08:cd:94:78:e7:55:1d:cf:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 12 05:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0214648042ee8db5c25b43c22831ee5c7bf368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:bf:f9:44:bb:02:19:e3:c2:bd:cd:9e:24:
5b:16:96:4d:b1:7e:ee:d9:f1:9a:4e:fe:0a:d2:f5:
a2:54:0c:9c:4b:7f:c7:e1:34:ad:1b:93:a1:03:d7:
1a:aa:5b:15:c7:47:4d:70:b9:c6:fd:a0:03:41:df:
45:03:ec:40:f8:d6:3f:05:f2:27:de:6e:b8:9c:ae:
1d:30:4c:9c:b3:1c:5d:45:8c:ef:80:65:c0:c0:11:
b6:69:d4:70:96:47:73:ae:07:8c:53:0c:50:46:eb:
84:07:69:0c:37:be:71:05:85:99:ed:cd:fa:4e:ee:
4b:22:0a:ab:c9:e7:c0:e0:07:f5:5c:18:91:e5:da:
1b:5b:b6:3c:ab:31:7a:83:b1:57:03:d9:08:04:0f:
8f:95:d3:ee:15:d9:bc:e5:09:a4:4b:21:07:25:07:
d4:96:c4:b1:5a:40:a6:ac:9d:66:16:da:fd:4c:99:
1c:09:5f:05:99:3b:e2:ca:ba:35:7c:ad:b0:57:f2:
68:47:d8:af:76:b1:3d:13:bf:f6:a4:94:25:fb:25:
b8:94:50:4c:6a:2f:cf:4c:74:7a:2a:73:21:ff:cc:
a0:bd:a9:b2:32:e9:9d:5b:b3:71:c3:27:d1:6b:4c:
1b:44:e6:1e:5b:de:a6:5a:92:d1:07:cf:56:2c:60:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:14:64:80:42:EE:8D:B5:C2:5B:43:C2:28:31:EE:5C:7B:F3:68
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6wIUZIBC7o21wltDwigx7lx782g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c8:34:52:37:57:0e:de:03:05:6e:f6:0c:83:68:41:35:5e:
32:23:9f:e6:df:27:5d:73:96:15:c2:d8:32:6d:73:50:9e:ae:
12:95:51:67:12:a4:b6:af:b2:73:91:69:18:0e:8c:64:c1:b0:
4a:1a:58:ee:a4:f2:b1:43:97:da:fb:d4:a9:7f:ce:dd:55:fe:
6b:15:1f:b7:ba:33:7f:49:01:99:4f:0d:10:32:ba:f4:ce:48:
c8:fe:8e:e6:2e:e9:dc:0b:c2:db:0b:0b:ad:4a:d0:65:18:66:
e1:d5:ef:ee:15:6a:13:41:78:65:7e:c1:3b:af:9a:93:67:58:
b8:7d:6a:81:d8:e4:8b:52:82:db:1b:2f:b5:f1:74:d8:cd:cf:
d8:b9:30:cf:c4:dc:70:01:72:f3:00:da:7a:92:7a:db:e3:88:
59:7d:c4:0e:62:fa:44:35:99:37:45:6e:0e:18:b8:cc:2a:96:
61:76:71:88:6e:07:0f:c7:1d:06:4d:4f:59:cb:31:92:db:7d:
86:2b:ca:26:0e:16:04:5e:b9:16:6a:86:40:56:81:28:ef:43:
12:c7:1b:c6:c1:56:6a:67:8d:b4:ca:5c:21:73:51:06:5f:5d:
0c:0f:f3:33:4d:db:57:7a:6f:bf:5e:12:74:6b:c4:69:85:81:
85:24:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:06:03 2025 by rpki-client