Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa
File: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (raw, json)
Hash identifier: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=
Subject key identifier: EB:ED:AA:4E:53:2D:11:93:F3:38:74:80:B6:67:4D:85:C6:C4:D6:A4
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01942444942955D09ED2BBAD5973FE003DA6
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203985
IP address blocks: 94.240.28.0/24 maxlen: 24
94.240.29.0/24 maxlen: 24
94.240.30.0/24 maxlen: 24
94.240.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:29:55:d0:9e:d2:bb:ad:59:73:fe:00:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebedaa4e532d1193f3387480b6674d85c6c4d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:2c:7d:2f:45:b9:0d:7d:7f:92:d0:90:12:
bb:ec:65:33:f7:b7:a5:03:3e:46:02:c7:0e:66:80:
eb:54:4c:94:b4:6e:23:cf:e2:da:e9:8f:a2:e1:e2:
31:22:ac:a4:33:75:2d:7b:2e:6a:cf:37:fb:40:f6:
8e:15:45:19:21:e3:70:b3:d7:d2:94:9d:48:89:d7:
cb:09:02:a1:56:dc:27:8e:c0:ce:84:73:b9:8b:dc:
eb:8b:8d:6f:2e:18:aa:e0:28:18:c1:fa:db:b1:0e:
c0:4c:db:53:2a:31:5a:f2:8f:3c:d2:e1:ab:40:1d:
5d:d9:f7:b0:98:cf:25:a9:2d:f1:46:7f:f0:99:83:
7a:77:a1:d8:3b:c5:72:fd:4f:61:22:91:7c:d4:e6:
c6:c0:67:5b:b8:19:ce:43:a1:e7:8b:c2:0c:e8:e2:
a9:90:90:7d:c0:2a:85:38:55:37:63:49:d9:e6:b7:
18:52:5f:e0:3a:5e:c2:7b:13:f2:b0:97:a3:30:bb:
a4:56:e5:9f:9e:46:9a:3b:d7:03:59:38:66:35:1e:
05:28:8d:b8:6b:94:61:17:32:45:9b:7a:9f:4d:03:
da:cd:fa:ac:6a:66:06:7b:b0:36:38:48:49:de:7f:
41:d0:95:52:27:7b:34:b4:f3:74:c9:9b:1f:87:15:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:AA:4E:53:2D:11:93:F3:38:74:80:B6:67:4D:85:C6:C4:D6:A4
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d4:05:dc:7a:62:46:f2:aa:2b:b5:81:be:6d:2b:bc:13:8f:
bd:af:3c:5b:8c:d4:89:7c:3e:18:f8:81:8a:43:28:7a:9c:ce:
c5:e6:88:3b:68:aa:67:14:e2:cf:1f:84:24:2a:0a:26:c8:06:
6e:cc:56:d0:d6:20:6c:9c:18:c4:b3:bf:3d:12:75:35:fa:34:
56:c9:0b:78:93:83:4c:a9:05:d4:3e:2f:d8:f9:79:e1:35:61:
11:73:86:bb:dd:49:9f:b3:ba:58:43:c5:81:64:ef:4c:73:f7:
d4:71:53:da:30:17:e1:fa:fa:bc:c6:43:c3:0f:71:5a:a4:0d:
2a:5d:5b:9d:19:84:9e:9b:84:9c:6b:1e:a9:b9:1b:68:cd:ef:
e6:d4:95:96:79:cd:3b:bf:e1:2f:bd:f2:28:de:cd:8a:a8:38:
8e:ca:43:15:c0:cc:9c:c7:af:a3:98:3e:80:97:bf:c9:96:4a:
3e:b5:ff:85:61:9a:69:e0:6b:e1:01:32:8e:c4:5a:ee:f0:52:
4e:e5:df:73:13:df:fd:51:03:30:4e:e5:60:08:18:46:b6:7e:
22:f6:20:1a:30:e9:c3:b5:cc:4c:d4:01:44:86:d9:90:ad:b4:
fc:c0:98:62:8b:c2:06:65:a7:8d:67:64:2a:7d:f3:da:8e:af:
b0:4c:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:58 2025 by rpki-client