Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6vcwdf42ggsBQl3jGoDf6H8-SFk.roa
File: 6vcwdf42ggsBQl3jGoDf6H8-SFk.roa (raw, json)
Hash identifier: h36c3hlzlsbpvfq9Q6YKm2TV1NNIUb3M3HkFcWsV1TY=
Subject key identifier: EA:F7:30:75:FE:36:82:0B:01:42:5D:E3:1A:80:DF:E8:7F:3E:48:59
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B244945EDE450A197ABD046791156C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6vcwdf42ggsBQl3jGoDf6H8-SFk.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199297
IP address blocks: 45.88.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 19:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:94:5e:de:45:0a:19:7a:bd:04:67:91:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf73075fe36820b01425de31a80dfe87f3e4859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:6f:2e:b8:e2:a0:f3:b1:f1:9b:05:04:b6:69:
82:81:67:6f:0a:23:6c:ce:1a:3e:6a:e8:c4:99:d3:
0d:3a:c4:f1:ce:df:d4:58:65:0c:fd:b0:2b:67:f7:
61:bc:41:26:ec:79:d9:98:e5:c3:6f:37:83:a2:44:
e5:58:0b:fc:d0:d5:f4:fa:76:d5:bb:23:92:58:48:
84:47:8d:db:d8:40:81:8d:f6:fc:41:c4:32:9c:69:
e5:0b:81:c0:82:94:12:fa:3b:b1:6f:9b:90:f7:86:
17:5f:e1:48:6d:ae:04:c2:e2:42:80:d1:07:59:4a:
89:57:c2:8b:89:1b:4a:aa:dd:c6:67:0d:1a:f0:56:
ff:49:c1:9c:5d:d6:d4:e2:73:b6:3c:11:18:20:54:
b3:5a:5f:6c:9e:0d:1c:8e:61:93:54:f5:cd:b9:1b:
0e:85:f9:ec:fc:e2:74:17:93:0a:47:f1:29:10:3d:
86:0c:6d:37:3f:22:9a:b7:c9:52:3e:7a:ed:10:8b:
f5:9e:94:35:33:4e:9c:3e:e8:23:aa:a5:b3:c0:fe:
2b:e2:fe:fc:a0:4c:74:9d:2f:57:86:5c:5e:47:a5:
bf:e9:11:7a:7d:c9:ac:ca:7a:d2:c7:c8:a5:f6:1c:
24:03:2c:4f:7a:e4:35:6b:08:ca:f2:4a:c6:a0:eb:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:30:75:FE:36:82:0B:01:42:5D:E3:1A:80:DF:E8:7F:3E:48:59
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6vcwdf42ggsBQl3jGoDf6H8-SFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.180.0/24
Signature Algorithm: sha256WithRSAEncryption
72:93:24:ae:97:3d:0b:f0:b7:46:2b:91:67:73:70:c4:1f:ea:
b1:b3:f1:68:7a:bd:7a:c0:d5:1e:2e:e4:6e:3b:6f:07:52:2c:
33:e5:d5:b2:d7:96:40:d6:0b:10:25:de:a2:81:3c:b7:16:6f:
bb:a6:ba:88:b0:8a:f9:e1:50:14:ce:dc:08:39:c5:21:3c:96:
ed:d3:85:57:75:fa:47:25:cc:bd:eb:a8:9f:31:48:b7:14:8a:
6d:aa:c1:75:6b:2a:ea:d2:b5:6b:bf:e7:32:27:8a:39:21:61:
01:89:5a:6b:82:fb:72:64:24:ba:fe:3d:46:2a:e6:5d:1b:be:
6d:fc:0c:c3:d6:14:e2:56:8d:5d:fc:1e:38:c2:8c:a2:36:c1:
b6:b8:b0:6b:04:48:61:05:76:ef:65:ac:cf:e4:e6:06:f2:fa:
41:10:10:62:a5:e8:26:c2:af:9f:f9:04:a4:1a:e6:f0:82:5f:
3b:e2:5c:9b:db:f9:61:29:78:66:15:4a:8a:53:02:ef:64:7b:
d2:57:af:b7:53:23:73:e6:ba:be:3b:c0:1f:50:23:29:de:c5:
32:05:c8:29:da:eb:3c:d3:a6:96:54:9b:fb:9b:4b:1d:1d:b2:
99:b0:0e:41:9a:45:36:c5:fb:61:a0:b9:2a:17:98:01:10:d4:
10:44:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:48 2025 by rpki-client