Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa
File: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (raw, json)
Hash identifier: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=
Subject key identifier: E9:12:A8:D9:CA:15:C6:B6:1A:61:FB:1A:CD:F7:89:EB:3B:E5:F4:D8
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019424B336A0DA6130AFC36EAFF9236D0634
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa
Signing time: Thu 02 Jan 2025 01:48:32 +0000
ROA not before: Thu 02 Jan 2025 01:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213049
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:36:a0:da:61:30:af:c3:6e:af:f9:23:6d:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 2 01:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e912a8d9ca15c6b61a61fb1acdf789eb3be5f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:f3:90:7e:e1:3c:42:f8:e0:d1:b9:cf:c1:
fa:5f:70:22:a1:e0:f7:f1:53:d3:69:a5:a4:ec:9b:
33:6d:59:e6:3b:08:dc:2a:17:65:5f:f1:17:58:bf:
c9:34:c7:60:6b:02:4a:b6:11:7f:4c:d8:0e:e2:c2:
2d:04:76:20:bc:50:05:7f:a3:a2:ad:00:c6:31:5e:
ca:64:a9:b4:20:c5:60:a2:d2:3b:eb:ef:3f:55:e2:
71:37:1f:6d:f9:ae:40:5c:32:f2:a4:10:1e:c2:a5:
c6:7e:88:77:97:26:19:08:04:db:34:ef:dc:57:08:
b1:34:11:23:bd:a3:4d:12:75:49:5c:88:02:ff:81:
28:99:b7:93:33:1f:a5:dc:e2:73:52:6a:4e:41:92:
5e:1a:81:a5:4c:cb:99:a4:dd:31:6f:3c:19:fe:a0:
04:4c:c8:b3:47:c5:a7:7f:3e:33:c4:fd:1e:73:a9:
53:64:b0:8a:3a:51:e8:b5:51:24:04:76:51:e3:37:
f7:8d:7a:92:e1:22:7f:71:47:92:19:c7:ed:1a:32:
9b:85:1c:45:e2:aa:d0:bf:08:50:f5:35:31:54:0c:
f5:0b:1c:24:9a:24:7b:3f:60:c0:aa:b8:1e:53:10:
c9:c9:f0:1f:28:a5:be:56:6d:50:70:05:2d:65:e4:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:A8:D9:CA:15:C6:B6:1A:61:FB:1A:CD:F7:89:EB:3B:E5:F4:D8
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f0:c1:31:d5:7a:2c:74:d8:d6:ba:4b:54:9f:db:3b:09:76:
e4:46:23:31:e9:5f:5f:33:11:a9:55:e0:23:e6:89:9b:15:f3:
a3:8e:02:4e:d8:08:41:ef:bd:c1:b3:51:51:f6:7d:1d:a6:a5:
56:36:60:e8:ce:e4:8a:c3:e2:b5:df:f6:80:8a:00:5d:be:aa:
4a:0a:16:c8:77:d0:b0:51:e2:92:9d:29:87:d6:cf:10:4a:16:
e4:da:3d:5c:ca:a2:d7:6c:ad:1b:dc:c5:4c:a4:10:c0:3a:84:
78:91:7b:24:e3:f2:2c:93:3c:be:21:bf:dd:72:a1:26:30:51:
b7:ca:09:f8:28:3b:88:51:c7:f2:df:4d:d1:8b:23:52:4e:da:
f2:60:dc:21:8a:90:a1:bb:fd:92:3a:a0:2a:9d:ab:c6:d3:8f:
bf:9d:c1:11:36:33:d5:1c:51:15:a9:63:41:b9:16:03:7a:d7:
26:c3:36:d2:89:43:62:a3:a2:4c:28:8c:64:1c:a5:7d:2d:7e:
62:2e:a4:2f:6d:cc:8e:c2:1b:9c:9e:ff:f2:dc:b3:01:5c:2d:
89:e2:d3:b7:be:18:a6:26:f6:75:f6:9c:ae:cb:f1:e1:de:e5:
a5:16:62:25:f7:92:ce:a7:7a:09:a8:c1:f9:0a:12:f6:09:bf:
2a:e0:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 1 00:53:10 2025 by rpki-client