Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa
File: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (raw, json)
Hash identifier: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=
Subject key identifier: EB:3D:10:F2:60:D4:31:35:05:3E:7F:0D:12:68:95:70:CA:DA:09:DC
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 0194258E5FF3C2A0CD12B9F436593DA4BA4A
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa
Signing time: Thu 02 Jan 2025 05:47:55 +0000
ROA not before: Thu 02 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 185.7.82.0/24 maxlen: 24
185.7.83.0/24 maxlen: 24
2a03:403::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5f:f3:c2:a0:cd:12:b9:f4:36:59:3d:a4:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 2 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3d10f260d43135053e7f0d12689570cada09dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:39:ac:63:bf:60:fb:5a:80:92:5f:c0:7f:
b1:35:a9:22:09:87:40:28:05:bf:28:dc:df:e3:5a:
f7:93:19:2a:99:72:ee:eb:06:2f:80:dc:26:db:04:
e0:4f:fc:ad:44:5d:06:f2:ee:2b:0c:f8:07:01:e6:
5c:0e:f8:09:f6:d3:12:17:e8:a0:0c:62:2d:9f:0c:
9e:ec:ca:0f:44:cd:f5:cf:22:96:59:fe:d1:d7:e9:
83:91:ab:ad:67:4e:63:d6:db:72:bd:21:fb:41:69:
7c:ae:59:19:78:23:5c:59:f7:e3:fa:21:e9:72:f6:
ea:34:82:84:f7:0c:d9:da:12:97:d7:00:49:77:0b:
43:22:8d:cc:03:a1:d9:91:df:f8:aa:16:2f:57:57:
c6:11:74:df:44:f2:a6:51:17:2c:97:a8:1e:d6:e2:
2c:62:bd:00:7c:40:be:a8:42:19:bb:fb:86:31:9b:
6d:93:3c:68:c4:1e:84:db:e5:78:29:9d:8e:8f:10:
ac:90:7c:86:46:85:3c:10:bd:69:32:71:94:d1:8d:
ee:bd:f5:38:20:4c:6f:ce:b2:64:8b:8c:f0:fe:a8:
8d:f1:5c:f7:a5:95:cf:f2:84:90:61:4c:37:84:8b:
2b:0c:a6:2c:22:7b:f6:f1:5d:be:41:3a:dc:7f:35:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:10:F2:60:D4:31:35:05:3E:7F:0D:12:68:95:70:CA:DA:09:DC
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.82.0/23
IPv6:
2a03:403::/32
Signature Algorithm: sha256WithRSAEncryption
21:eb:38:fa:4c:d7:63:9d:06:0e:25:a3:2f:99:ad:b7:fd:2f:
84:3a:23:86:6e:af:2b:5a:ac:36:cc:78:87:77:74:b8:05:c9:
16:75:a9:4b:7c:16:ff:1f:df:ec:74:d2:5f:74:09:81:df:4f:
f6:fc:de:a5:50:61:f0:c2:bb:b9:4f:55:a5:f3:b1:2e:07:c5:
3f:ea:55:46:8d:29:cf:6b:52:f5:d4:df:fd:4f:53:ae:c8:2f:
6a:b4:5b:bd:9c:84:91:62:f0:a7:c1:78:41:24:66:9d:cf:ac:
83:2c:41:b5:9f:94:82:21:77:29:dc:67:21:e3:a5:04:6e:1c:
4c:f7:67:71:d2:60:70:a0:e4:e3:1a:ac:a0:99:af:fe:2e:d8:
a0:66:8f:35:74:5d:f8:ed:f8:61:e3:48:e0:e4:42:8e:ae:9e:
ac:56:8d:6f:1a:3c:7d:21:5a:b5:a0:8d:ad:aa:34:15:bd:73:
cc:1e:bb:05:fa:34:56:4a:1f:90:58:0e:e2:0e:31:df:8f:bc:
4e:db:07:77:07:0e:30:e0:41:1a:10:37:79:66:df:3b:b2:44:
17:6c:86:f0:ba:fe:c7:a3:ad:33:c9:5e:10:86:00:2c:ef:b8:
00:b3:18:a2:1b:67:c3:d1:27:e9:47:54:99:54:4f:a1:99:9f:
9c:47:1c:90
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljl/zwqDNErn0Nlk9pLpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5
MmFlYjcwHhcNMjUwMTAyMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjNkMTBmMjYwZDQzMTM1MDUzZTdmMGQxMjY4OTU3MGNhZGEwOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcY5rGO/YPtagJJfwH+xNakiCYdA
KAW/KNzf41r3kxkqmXLu6wYvgNwm2wTgT/ytRF0G8u4rDPgHAeZcDvgJ9tMSF+ig
DGItnwye7MoPRM31zyKWWf7R1+mDkautZ05j1ttyvSH7QWl8rlkZeCNcWffj+iHp
cvbqNIKE9wzZ2hKX1wBJdwtDIo3MA6HZkd/4qhYvV1fGEXTfRPKmURcsl6ge1uIs
Yr0AfEC+qEIZu/uGMZttkzxoxB6E2+V4KZ2OjxCskHyGRoU8EL1pMnGU0Y3uvfU4
IExvzrJki4zw/qiN8Vz3pZXP8oSQYUw3hIsrDKYsInv28V2+QTrcfzVEXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOs9EPJg1DE1BT5/DRJolXDK2gncMB8GA1UdIwQY
MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt
NDU2NWYwNGY4ZDg1LzEvNnowUThtRFVNVFVGUG44TkVtaVZjTXJhQ2R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1
LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuQdSMA0E
AgACMAcDBQAqAwQDMA0GCSqGSIb3DQEBCwUAA4IBAQAh6zj6TNdjnQYOJaMvma23
/S+EOiOGbq8rWqw2zHiHd3S4BckWdalLfBb/H9/sdNJfdAmB30/2/N6lUGHwwru5
T1Wl87EuB8U/6lVGjSnPa1L11N/9T1OuyC9qtFu9nISRYvCnwXhBJGadz6yDLEG1
n5SCIXcp3Gch46UEbhxM92dx0mBwoOTjGqygma/+LtigZo81dF347fhh40jg5EKO
rp6sVo1vGjx9IVq1oI2tqjQVvXPMHrsF+jRWSh+QWA7iDjHfj7xO2wd3Bw4w4EEa
EDd5Zt87skQXbIbwuv7Ho60zyV4QhgAs77gAsxiiG2fD0SfpR1SZVE+hmZ+cRxyQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:14 2025 by rpki-client