Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rAshbN8FGclmbCxn26-tJgHGoQ.roa
File: 6rAshbN8FGclmbCxn26-tJgHGoQ.roa (raw, json)
Hash identifier: opLWy6xo8hnTnmbvqC1VwkDPh9mSYQJKVnyOiWKwBtI=
Subject key identifier: EA:B0:2C:85:B3:7C:14:67:25:99:B0:B1:9F:6E:BE:B4:98:07:1A:84
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CA769C712F9E2FF041DBEA8FC2A4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rAshbN8FGclmbCxn26-tJgHGoQ.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209433
IP address blocks: 93.115.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ca:76:9c:71:2f:9e:2f:f0:41:db:ea:8f:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab02c85b37c14672599b0b19f6ebeb498071a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:19:05:50:9f:ff:4f:51:6b:e5:3d:43:a1:
20:fd:84:5a:1e:e3:aa:17:dd:8d:48:4b:5d:98:e4:
9e:dc:f3:15:a8:73:4f:7d:ef:ad:3e:49:09:84:77:
e5:21:d3:ec:5e:b9:9f:b6:21:c3:4c:b1:cc:fb:cb:
8f:6c:c9:21:cf:e0:dc:17:1e:d3:43:29:99:c7:29:
ff:db:5c:79:f5:d2:f1:4d:f3:63:ac:1e:cb:06:21:
dd:a9:90:d1:96:cc:66:e5:cd:d3:5b:69:ce:11:bd:
8f:80:39:48:02:93:95:70:67:ec:47:6c:03:98:7d:
7b:a6:db:da:0d:eb:23:ff:b4:08:f4:03:5d:b4:a6:
dd:af:f4:8a:4b:cb:9b:5d:af:28:60:43:2b:e8:c9:
ea:43:c2:bd:8e:89:c5:8b:e3:5f:0e:84:07:f5:81:
0b:83:4a:08:59:7d:9e:23:a8:f0:2f:8f:3d:a2:9a:
08:4b:49:b2:54:18:80:97:d7:ee:69:cf:9d:07:60:
be:35:1a:1e:9f:3d:54:5f:f2:c7:1e:3b:17:cb:a9:
8d:71:d6:bc:cf:d7:a7:dd:6f:5d:3e:4f:ad:e0:2c:
a7:6c:44:6a:7e:78:94:30:f3:92:8c:eb:ba:18:56:
47:6e:27:fe:82:98:5b:11:b0:67:17:5e:50:8d:ef:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:2C:85:B3:7C:14:67:25:99:B0:B1:9F:6E:BE:B4:98:07:1A:84
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rAshbN8FGclmbCxn26-tJgHGoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3b:86:87:91:1b:fe:79:a7:9f:49:0e:80:1c:f1:e6:be:2f:
1d:3b:69:06:84:e2:1f:36:ae:20:da:89:38:88:3f:d4:4c:ad:
9f:00:e1:28:6f:7e:bd:e2:8d:84:0f:b1:6f:ec:76:20:98:de:
b6:a7:39:1f:72:16:79:1e:30:2f:3e:da:d1:af:e5:8a:00:6a:
05:8a:f8:c6:a4:85:b4:3e:28:87:2c:ce:e6:5d:99:92:5b:9d:
0e:ca:76:c9:7c:06:91:4d:f0:9b:69:2f:40:9e:7e:01:a8:10:
f6:9a:ef:03:91:03:87:37:a5:fd:76:58:d8:ed:0a:d6:15:e3:
45:41:0e:f5:c9:63:96:d8:c4:d0:40:e2:83:3d:49:b9:a9:4e:
cb:a1:98:3a:8a:2f:3f:78:ba:6b:88:e8:0a:0e:da:b3:16:51:
1c:77:9b:b4:60:6a:ff:45:20:c0:ee:c7:78:d1:45:3f:8b:41:
52:47:bb:4f:35:41:d8:5b:b7:e4:92:a8:ee:90:7b:e0:57:ed:
1c:7e:4a:e4:fb:07:c6:9f:df:21:75:73:2e:8f:31:68:6a:bf:
a4:4c:0d:d9:56:93:b4:fc:e2:4a:11:7e:d2:ac:d2:c0:9f:99:
bc:69:5d:cd:e6:48:d2:e8:f3:c1:13:02:ff:1c:2a:12:bb:8c:
93:2e:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:39:53 2025 by rpki-client