Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/K6BqTeCnFAwbc4jI0igEhaoB-bI.roa
File: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (raw, json)
Hash identifier: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=
Subject key identifier: 2B:A0:6A:4D:E0:A7:14:0C:1B:73:88:C8:D2:28:04:85:AA:01:F9:B2
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067BF16A7CE602890F9171688891E1F
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/K6BqTeCnFAwbc4jI0igEhaoB-bI.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 91.238.203.0/24 maxlen: 24
185.106.176.0/24 maxlen: 24
193.200.130.0/24 maxlen: 24
193.200.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bf:16:a7:ce:60:28:90:f9:17:16:88:89:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ba06a4de0a7140c1b7388c8d2280485aa01f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:41:2e:02:4a:f2:18:c5:6e:68:15:7b:5b:
ca:85:30:ee:e4:a3:9f:03:88:78:77:4a:f3:b9:ad:
e8:91:60:98:c9:ac:2e:5c:2d:62:0e:e4:79:d9:2a:
40:3d:28:32:e7:05:9f:2f:38:12:57:af:f5:0d:78:
10:f6:c8:65:e2:7f:7b:3d:3f:2a:5c:fb:4a:f5:fe:
ff:b9:dc:89:91:e3:d5:0b:69:a1:9f:01:f6:4a:6f:
5c:43:6d:c5:2f:55:d3:13:ee:3d:2b:59:27:48:0f:
c8:4a:36:d8:94:0f:83:80:f8:45:3a:7d:0d:d4:6f:
ee:1a:7a:10:12:14:59:7e:0c:62:58:25:c2:aa:c4:
27:69:10:59:74:fe:3a:00:ef:46:bb:2d:46:20:82:
c1:07:9d:7e:a1:fc:39:9c:6e:10:68:4b:7f:74:da:
75:81:b0:56:1f:c1:ee:94:15:9c:d6:ae:5c:b6:6c:
16:5a:c3:a5:6e:7a:05:1c:b5:bf:16:08:a5:f1:67:
88:24:94:d5:3d:f3:af:d1:ac:58:1d:1f:0f:1e:2a:
e5:2a:cf:43:7a:d9:a0:31:28:e9:3a:f6:46:93:3e:
b3:a6:bd:58:2a:73:f6:a3:c0:37:77:e7:d5:e3:52:
01:68:78:14:c1:f8:f4:42:1c:9b:03:19:c5:f0:b9:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:6A:4D:E0:A7:14:0C:1B:73:88:C8:D2:28:04:85:AA:01:F9:B2
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/K6BqTeCnFAwbc4jI0igEhaoB-bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.203.0/24
185.106.176.0/24
193.200.130.0/24
193.200.134.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0e:d6:98:62:db:69:04:01:fc:46:23:79:c0:bd:d5:ce:f0:
69:2e:81:3c:d3:f6:94:d3:63:ec:ae:27:8b:a8:01:cf:53:57:
4e:14:6a:d6:22:94:1e:9c:62:7f:cb:a7:44:05:97:b7:c6:61:
80:b8:54:6a:ea:12:31:4a:59:30:68:4e:d7:d9:5d:03:25:22:
91:3f:47:27:f0:fd:36:6b:08:e6:1f:50:d7:3e:a7:67:95:2d:
73:32:f0:60:17:5a:c0:fa:98:8e:ca:8b:15:db:bd:06:e0:9a:
6c:75:00:98:73:08:9c:e2:6a:1b:f7:f8:db:92:6a:58:5f:02:
42:25:a6:f4:73:68:0a:27:60:8b:43:3a:6c:c7:9c:f5:54:22:
f3:91:0b:6f:74:70:34:ee:ed:3a:56:33:f2:1a:59:9e:f3:59:
28:52:b7:d1:35:e3:35:0d:4e:74:90:6d:31:67:59:5e:ed:e4:
d2:c2:2b:c6:57:50:f6:76:5d:d6:10:67:81:fc:25:06:7b:8e:
fc:62:b4:6b:05:33:14:f2:d8:fd:84:dc:7a:56:85:e0:c1:4a:
9d:01:8d:ce:fb:ac:67:81:8b:38:a9:af:00:95:e7:23:23:06:
4c:c0:da:56:5b:ff:e2:b4:23:22:b5:29:1a:b4:bc:11:7a:65:
2c:c9:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:21 2025 by rpki-client