Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6UQMPyyrSltgZKt9kY8HsJ94OKg.roa
File: 6UQMPyyrSltgZKt9kY8HsJ94OKg.roa (raw, json)
Hash identifier: JJplIG00y2STKxWUrtdlHZUHbk+zMDIQWFHEUMZ9ioU=
Subject key identifier: E9:44:0C:3F:2C:AB:4A:5B:60:64:AB:7D:91:8F:07:B0:9F:78:38:A8
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5E459D8748AE355B01D195F51556
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6UQMPyyrSltgZKt9kY8HsJ94OKg.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214361
IP address blocks: 87.107.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5e:45:9d:87:48:ae:35:5b:01:d1:95:f5:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9440c3f2cab4a5b6064ab7d918f07b09f7838a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:b0:b0:6e:61:55:3d:4f:56:cd:9a:f7:a8:
fc:77:13:4a:05:08:fe:c3:b9:37:df:2f:cb:73:5d:
23:81:d6:88:59:6b:d0:41:09:4a:5c:94:d7:8d:bb:
38:49:a5:1f:dd:5a:bf:88:81:42:e7:9c:f6:67:4d:
a6:b2:8d:47:b0:dc:85:a6:77:7e:64:b8:fc:cf:80:
d8:c7:0e:ef:51:e6:1e:f8:4e:14:dd:55:6c:5c:8f:
47:0f:87:6d:77:0b:b7:5c:31:dc:0a:c4:b0:04:6f:
32:80:59:a1:2d:cf:d7:d8:b7:11:03:6a:f6:3f:f5:
f6:b0:c1:8d:c9:76:36:87:48:af:87:e4:67:df:26:
19:2e:9d:61:8d:af:16:55:f4:ad:79:6a:13:f0:7a:
ba:84:3f:24:5b:8a:91:93:84:9c:5a:80:07:15:a2:
88:6e:15:d0:61:45:5a:ed:b8:63:26:4e:8b:a3:b4:
9f:06:9f:66:dc:30:54:d0:40:52:e3:fc:e8:ae:cd:
7b:1a:b5:4c:75:ab:14:70:f3:22:45:c6:51:59:49:
e4:ac:e5:27:0c:f6:7d:d1:3b:f3:13:5d:04:56:35:
49:47:76:a9:9b:88:ee:f4:6d:f0:f0:8b:59:0f:18:
ec:52:7d:84:b3:63:f3:56:e7:79:9a:56:f7:17:f4:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:0C:3F:2C:AB:4A:5B:60:64:AB:7D:91:8F:07:B0:9F:78:38:A8
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6UQMPyyrSltgZKt9kY8HsJ94OKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c4:13:e7:03:4d:1a:96:c0:52:69:3a:e5:07:66:20:c5:f7:
99:0a:3b:47:cd:44:c5:15:08:9b:88:d5:8a:7b:b0:01:5a:ef:
06:4b:3e:20:26:ce:b5:04:ac:39:a7:cd:a8:64:83:2b:68:d1:
eb:fd:1f:00:68:2d:93:87:8b:54:65:05:4c:2f:66:bc:28:a9:
1d:a8:7c:09:0b:33:b9:81:fa:9b:83:60:5f:52:00:9f:49:07:
cf:7c:11:75:7d:a4:27:7e:59:78:e4:5b:40:b4:76:38:04:26:
d2:75:d1:fe:f2:16:59:05:a9:92:ce:b2:92:4c:be:f6:fc:da:
97:fb:50:0e:4d:1f:7b:88:8f:37:31:69:ff:ff:6c:4d:30:36:
85:56:f2:0d:17:30:48:07:70:08:29:8f:40:0f:37:dc:70:a7:
cc:db:6c:33:8e:39:79:79:2c:d8:32:d8:a1:fd:6e:6d:41:7b:
ce:af:67:06:93:02:27:e7:2c:15:bf:a2:1f:d9:c9:62:35:f3:
73:0c:99:4e:96:f6:71:04:cd:b3:ed:41:6f:11:37:56:f6:2f:
f1:fb:da:80:de:97:a8:2c:cf:49:07:43:82:aa:4b:48:c6:b9:
7d:1d:50:e0:ed:96:6e:7c:82:b6:65:c3:71:4c:31:f0:38:f8:
a7:7a:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:38 2025 by rpki-client