Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/6q_G_Z0qExivoFkdxz0SlPRdfWc.roa
File: 6q_G_Z0qExivoFkdxz0SlPRdfWc.roa (raw, json)
Hash identifier: 4SryP0DdQLuQOQZ+IBOlNc/zDAm8n4lQ1lbM4SRDA1Y=
Subject key identifier: EA:AF:C6:FD:9D:2A:13:18:AF:A0:59:1D:C7:3D:12:94:F4:5D:7D:67
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019422FC3E5A0DACCA6BACD68CF0725AE5F7
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/6q_G_Z0qExivoFkdxz0SlPRdfWc.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 87.121.168.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.172.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
193.203.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3e:5a:0d:ac:ca:6b:ac:d6:8c:f0:72:5a:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaafc6fd9d2a1318afa0591dc73d1294f45d7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:8c:bb:8d:06:de:79:5f:9b:f3:93:5d:97:
b7:40:09:92:aa:43:56:d9:fb:eb:f1:48:da:d3:ac:
ac:1b:fe:22:48:95:b3:12:f5:25:24:d9:40:45:3c:
bc:3d:ff:1f:6e:b9:66:e9:fe:35:e2:d0:b9:fc:b8:
36:fd:9d:66:ea:b1:bc:5a:cb:49:61:e7:f6:30:df:
73:e8:98:28:95:d7:85:2e:ea:d0:c8:1d:36:8b:3f:
a6:e0:72:82:f6:3b:a9:e2:36:76:3a:8b:1a:ce:40:
d0:99:57:4c:87:69:f3:be:65:6f:d1:fb:c3:f2:3a:
39:9b:26:d7:99:ca:bd:09:74:06:43:9d:ac:68:40:
56:b4:ec:78:22:94:89:d1:ca:fe:93:40:28:6f:25:
ca:d0:b3:4a:0d:34:2b:06:95:c1:73:bb:2f:5d:81:
3a:1c:07:d1:25:14:25:a9:0b:0c:c7:53:c5:d8:30:
6c:90:ff:de:4f:00:6f:6a:b6:eb:a9:49:7b:26:b1:
a5:3f:84:24:64:6f:95:22:bd:72:26:12:4b:8e:60:
43:9e:f4:9d:a5:1c:e4:21:c3:12:0f:68:a1:11:c6:
9d:3b:a9:ec:b6:c6:7d:63:3a:a6:6a:90:e1:28:94:
b5:1d:02:f8:f4:c6:22:fe:d9:31:02:9b:1b:78:55:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:C6:FD:9D:2A:13:18:AF:A0:59:1D:C7:3D:12:94:F4:5D:7D:67
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/6q_G_Z0qExivoFkdxz0SlPRdfWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.168.0/21
185.64.24.0/22
193.203.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7a:0f:f6:b0:ec:92:29:50:a1:b7:d7:5b:2f:be:fc:0e:fe:
8e:c8:e6:0f:04:46:95:4f:20:ff:35:db:d9:06:84:99:cf:91:
9b:db:bb:c6:2a:32:0d:51:f2:d3:42:64:9a:53:e4:9e:03:71:
8b:f7:df:fe:ff:be:a3:17:f7:d6:37:6b:71:4e:90:77:57:1d:
17:c1:d6:ad:9a:89:9f:09:f4:16:3b:38:f4:ac:97:fc:c0:63:
9b:a1:02:f1:64:a2:5a:4e:79:1d:73:75:45:40:04:2f:08:bc:
c1:4f:e1:ac:cd:b9:03:42:2f:a9:b4:6f:b0:5e:e4:5f:2c:f5:
d2:b3:5b:66:cc:30:d3:8a:e0:3a:13:4d:cb:db:da:b4:28:36:
41:23:c3:d8:8e:f7:51:60:34:68:61:ee:a6:35:06:4d:58:81:
1a:d4:54:2b:d7:5b:4f:69:c8:d1:f8:c3:4e:9a:26:15:06:92:
ff:52:2f:ad:b7:cf:de:3a:ae:b9:d5:1b:c7:59:aa:ee:62:81:
24:9a:c9:db:46:40:70:67:c7:ec:24:10:dc:05:3d:01:c7:dc:
5f:35:e0:a9:fc:79:95:d0:1a:be:bb:e7:a4:f1:12:1d:bf:83:
3e:c7:3b:0a:0e:7d:55:c5:16:3e:24:52:f4:83:a3:20:cc:1d:
bd:33:af:7c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi/D5aDazKa6zWjPByWuX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjUwMTAxMTc0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFmYzZmZDlkMmExMzE4YWZhMDU5MWRjNzNkMTI5NGY0NWQ3ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LiMu40G3nlfm/OTXZe3QAmSqkNW
2fvr8Uja06ysG/4iSJWzEvUlJNlARTy8Pf8fbrlm6f414tC5/Lg2/Z1m6rG8WstJ
Yef2MN9z6JgoldeFLurQyB02iz+m4HKC9jup4jZ2OosazkDQmVdMh2nzvmVv0fvD
8jo5mybXmcq9CXQGQ52saEBWtOx4IpSJ0cr+k0AobyXK0LNKDTQrBpXBc7svXYE6
HAfRJRQlqQsMx1PF2DBskP/eTwBvarbrqUl7JrGlP4QkZG+VIr1yJhJLjmBDnvSd
pRzkIcMSD2ihEcadO6nstsZ9YzqmapDhKJS1HQL49MYi/tkxApsbeFXFBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOqvxv2dKhMYr6BZHcc9EpT0XX1nMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvNnFfR19aMHFFeGl2b0ZrZHh6MFNsUFJkZldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDV3moAwQC
uUAYAwQAwcv+MA0GCSqGSIb3DQEBCwUAA4IBAQBPeg/2sOySKVCht9dbL778Dv6O
yOYPBEaVTyD/NdvZBoSZz5Gb27vGKjINUfLTQmSaU+SeA3GL99/+/76jF/fWN2tx
TpB3Vx0XwdatmomfCfQWOzj0rJf8wGOboQLxZKJaTnkdc3VFQAQvCLzBT+GszbkD
Qi+ptG+wXuRfLPXSs1tmzDDTiuA6E03L29q0KDZBI8PYjvdRYDRoYe6mNQZNWIEa
1FQr11tPacjR+MNOmiYVBpL/Ui+tt8/eOq651RvHWaruYoEkmsnbRkBwZ8fsJBDc
BT0Bx9xfNeCp/HmV0Bq+u+ek8RIdv4M+xzsKDn1VxRY+JFL0g6MgzB29M698
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:49 2025 by rpki-client