Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/RR6pycHaTPsIe6GNf5JqSPKOd08.roa
File: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (raw, json)
Hash identifier: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=
Subject key identifier: 45:1E:A9:C9:C1:DA:4C:FB:08:7B:A1:8D:7F:92:6A:48:F2:8E:77:4F
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019420D65E731F8946C9A0647FE378FB5500
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/RR6pycHaTPsIe6GNf5JqSPKOd08.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61087
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5e:73:1f:89:46:c9:a0:64:7f:e3:78:fb:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451ea9c9c1da4cfb087ba18d7f926a48f28e774f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:6a:1a:01:be:54:a8:e2:99:31:96:c6:9a:
59:f6:f8:e5:cc:0a:8a:63:0c:38:26:4c:56:a3:95:
71:bc:43:e2:5b:69:5d:a0:da:af:63:bd:3d:8d:a2:
a2:26:eb:e4:5b:e7:9f:65:fc:7d:14:b6:7c:66:dd:
6e:f6:82:d9:91:d7:b0:69:5c:65:ae:0e:78:9f:07:
23:36:26:99:43:07:e7:4d:b7:3d:06:67:c5:8b:0e:
93:95:5b:da:20:b4:90:e6:2e:b1:8c:fb:23:de:91:
c1:c3:d9:47:1e:a4:4c:13:90:fa:40:78:0a:f7:7e:
d7:f4:c2:c7:de:b4:79:d4:05:fb:95:69:20:e7:6a:
c2:dd:c2:f6:c0:d4:56:79:6d:8d:87:38:d7:f7:61:
92:28:67:6a:a3:cf:ce:38:d0:af:91:97:55:05:ff:
59:4c:af:2d:02:3f:ef:fc:79:9d:f9:21:f8:58:03:
b7:42:5d:83:84:18:ea:5a:d2:b8:9d:c8:54:fe:a9:
51:4d:30:7d:09:37:9f:3d:dd:da:06:6a:9b:de:0c:
54:d5:7c:c4:34:39:97:c3:54:4a:11:e0:5a:14:37:
95:c7:67:25:4c:b2:0c:0b:41:88:2c:72:ec:13:a8:
90:b3:b8:cb:db:49:6a:62:45:0d:b3:8b:6e:fd:54:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:A9:C9:C1:DA:4C:FB:08:7B:A1:8D:7F:92:6A:48:F2:8E:77:4F
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/RR6pycHaTPsIe6GNf5JqSPKOd08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:43:45:85:27:5d:e3:49:c7:9a:a5:7c:0b:69:a0:ac:0c:c9:
3c:08:ee:1f:d7:c4:6c:8f:5f:d2:c1:c1:c7:bd:04:58:15:7b:
e6:8b:d7:ff:df:c9:07:ae:9e:dd:b6:e6:5f:7e:ea:df:08:ce:
50:1b:82:63:a3:42:96:5f:0d:6b:0b:e5:c3:d3:2d:31:73:24:
7e:97:0d:29:50:9e:d5:a8:51:bc:93:84:81:50:5e:3a:97:07:
99:98:bf:9d:58:88:56:c5:7d:77:e4:72:e6:cf:ce:ab:72:56:
4e:41:85:ce:a8:91:2d:69:1b:b0:16:6e:15:75:1b:7b:e7:8e:
e0:22:e5:a0:60:7a:c8:a8:b6:98:95:2e:6c:ee:bb:2f:54:e1:
85:1f:20:10:3b:fc:43:72:6b:cd:40:53:04:de:eb:5b:d7:78:
d8:14:3a:3b:63:be:52:41:67:48:b1:7e:92:4f:34:75:d1:4d:
8c:99:0e:c9:83:a2:bb:da:b7:f7:70:d5:74:be:43:fa:e1:16:
6a:f0:03:02:27:76:40:17:0f:20:b0:44:3b:07:40:a9:a2:58:
cd:d6:a7:55:0f:87:28:11:c8:a7:1f:b4:db:e6:8c:b6:c0:bb:
d7:2b:4b:58:4b:dc:7c:a7:e2:c0:a1:f2:d0:16:f3:1b:42:3c:
62:8c:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 21:45:29 2025 by rpki-client