Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/6G5nNFKJWFzHfNQU02eI4MMaEEg.roa
File: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (raw, json)
Hash identifier: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=
Subject key identifier: E8:6E:67:34:52:89:58:5C:C7:7C:D4:14:D3:67:88:E0:C3:1A:10:48
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 01942369538C9E3BDD98DC734E6E6CEEB9BD
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/6G5nNFKJWFzHfNQU02eI4MMaEEg.roa
Signing time: Wed 01 Jan 2025 19:48:12 +0000
ROA not before: Wed 01 Jan 2025 19:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.201.149.0/26 maxlen: 26
2001:7f8:25::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:53:8c:9e:3b:dd:98:dc:73:4e:6e:6c:ee:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Jan 1 19:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e86e67345289585cc77cd414d36788e0c31a1048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:27:95:e2:c0:cf:ca:d4:4a:92:7f:04:b5:
94:2f:5d:80:ec:8d:55:3b:33:cb:d5:8c:4b:ef:0b:
df:3c:16:a0:0b:3e:fb:0c:19:bd:ca:86:37:4f:24:
5a:51:4f:82:8b:55:68:d1:1d:4b:77:b0:70:0d:f4:
4e:c7:ef:8f:cf:1c:9e:65:42:ba:1a:ac:ec:d3:ff:
9a:53:da:ef:f7:24:4b:0d:59:a8:26:36:38:94:f1:
53:0c:dd:a1:90:0b:6b:7d:1e:a1:cc:e9:51:c5:b4:
d3:11:fb:73:a3:f4:cf:05:d9:82:3c:88:4f:33:aa:
19:14:fc:d2:b9:ef:d4:5a:be:99:0b:bb:21:f0:1a:
c3:54:05:ee:d4:73:01:64:6d:da:a9:0c:bc:df:c8:
fc:51:bc:4e:43:a8:ed:25:3f:11:c3:0b:23:de:c7:
6b:57:31:7b:d1:ea:e3:3f:8e:d0:e6:b6:23:10:08:
79:c9:1e:55:54:a3:b4:24:57:26:86:a0:5d:09:4a:
56:7e:cf:29:de:49:66:21:e4:0d:65:26:d2:d0:5d:
3a:36:05:d4:bf:9a:b1:59:03:ac:9e:0f:c1:ea:cd:
89:e8:14:d1:95:23:ae:db:6a:ad:2f:2a:ab:8c:75:
db:fe:47:cd:ab:bc:5a:92:1e:d3:75:17:f9:ac:d1:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:67:34:52:89:58:5C:C7:7C:D4:14:D3:67:88:E0:C3:1A:10:48
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/6G5nNFKJWFzHfNQU02eI4MMaEEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.149.0/26
IPv6:
2001:7f8:25::/64
Signature Algorithm: sha256WithRSAEncryption
8c:a6:e9:54:61:ec:09:67:90:1c:64:fb:96:da:13:bd:77:d9:
04:25:01:88:41:88:a8:85:17:7e:28:c0:39:c8:6d:53:b8:d5:
24:71:87:23:55:38:8e:94:02:5f:d1:88:8a:b5:67:d1:6f:31:
52:ca:3d:67:06:0c:e5:fc:48:fe:41:00:11:d1:2c:41:50:09:
27:33:ea:29:74:c1:c8:2f:9f:79:01:a3:91:af:bc:1e:c6:c2:
de:9e:20:e4:84:9c:6c:83:33:1e:ea:15:9f:2e:f2:f6:e4:83:
3e:1d:d8:75:94:8e:ea:69:dc:b3:c1:88:66:3a:ed:0f:a1:a2:
11:55:95:c4:46:8c:44:15:03:ea:dd:6a:1d:5c:07:68:3f:9c:
58:68:89:ff:20:8d:a1:57:49:06:b2:5f:9d:2b:8e:7f:29:3a:
38:26:fe:39:6f:dc:b2:fe:77:63:4e:df:9c:c4:49:5e:f0:5b:
6d:d5:99:1f:11:51:ae:35:9d:f4:8c:cc:08:ce:cc:56:9c:fa:
86:5f:22:08:27:26:df:93:57:38:d9:6e:c6:e5:2d:30:01:d7:
35:17:d4:98:ad:9a:10:3c:ae:08:31:ed:a6:a6:fb:6d:67:fc:
aa:89:0b:4c:cc:50:cc:04:7c:72:82:2d:a5:38:31:04:5b:24:
e4:47:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:33 2025 by rpki-client