Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6VGcemVH2DV5ohaQgiQcRenew8Y.roa
File: 6VGcemVH2DV5ohaQgiQcRenew8Y.roa (raw, json)
Hash identifier: +4Fg/PPYhb0y6uO4P1CK2RmbhGiJqaz/AhzGo+jHu7w=
Subject key identifier: E9:51:9C:7A:65:47:D8:35:79:A2:16:90:82:24:1C:45:E9:DE:C3:C6
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5049ABCAAAA8633663802C94F24E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6VGcemVH2DV5ohaQgiQcRenew8Y.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51235
IP address blocks: 81.12.56.0/23 maxlen: 23
87.107.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:49:ab:ca:aa:a8:63:36:63:80:2c:94:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9519c7a6547d83579a2169082241c45e9dec3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:90:38:19:a3:6d:4b:06:24:0c:5a:33:d6:
f7:2e:47:84:78:e4:27:75:d9:86:0b:1f:1f:a5:85:
b6:46:6b:48:86:80:6b:b6:29:7d:a0:58:f8:48:02:
6d:e3:ee:99:55:55:29:dc:e4:02:1b:f8:05:1b:29:
d7:ea:82:2c:cc:56:be:9a:7d:16:d5:b5:d1:b1:5a:
2b:50:78:83:37:aa:96:50:d9:a2:11:ed:03:f2:c9:
cf:db:30:ee:95:de:35:6a:0b:a7:87:1d:04:4a:c8:
e3:42:5e:13:3c:e5:7f:43:75:34:44:c9:88:de:94:
1b:ae:08:11:17:cb:d0:26:2b:45:05:bf:35:a8:ec:
ed:a1:e9:73:d3:79:9e:86:7d:8f:9d:90:17:bf:18:
31:9e:36:79:c8:12:d4:b7:75:97:b2:e0:b0:d1:c5:
5f:0b:76:7c:93:e7:f7:c5:de:5b:1e:d3:73:1e:56:
92:26:cf:c1:ae:a2:07:cc:41:d8:78:e8:d6:56:0f:
37:2b:00:ce:03:27:33:8d:17:ae:9b:c8:de:71:7a:
f2:ed:a7:c4:fb:f0:d0:61:3e:33:d2:b3:8c:5f:a7:
11:ae:33:51:48:a3:5b:62:43:66:7a:c1:3a:02:ec:
53:93:46:b9:9a:53:2a:09:77:85:e6:71:2f:5e:27:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:9C:7A:65:47:D8:35:79:A2:16:90:82:24:1C:45:E9:DE:C3:C6
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6VGcemVH2DV5ohaQgiQcRenew8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.56.0/23
87.107.139.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:24:52:25:d1:0c:f5:c9:fd:66:5f:f2:ba:18:38:28:99:46:
d0:71:c7:59:f7:79:cf:77:e5:75:58:80:c9:2c:a0:ad:2c:a8:
7e:5e:ee:7b:5f:fe:35:77:49:5f:b4:d2:8a:1f:ca:7a:cf:da:
89:fa:63:e4:78:8c:bb:64:fd:c1:77:55:9a:af:d5:3f:15:ee:
c8:46:2c:df:cd:a3:9d:66:c7:13:3d:a0:bc:95:dd:a5:fb:60:
0b:ab:bc:17:0a:e3:64:4e:a3:f3:c4:2f:2f:1d:50:c3:3a:85:
f6:25:99:e5:06:e2:3c:82:1a:e9:36:7d:a2:44:cd:db:3b:12:
ed:c9:84:1b:2f:97:9c:96:a2:54:26:a7:8b:f1:f1:28:44:c8:
f2:9b:44:ff:b2:8e:f1:6e:ab:8d:f3:69:e5:ee:51:3b:03:7e:
73:a5:9a:f0:04:fb:88:63:92:d3:92:06:f6:a6:a6:e9:66:f3:
bb:04:c5:75:ce:fc:be:58:63:3a:9f:69:e6:0e:77:d1:43:e3:
a5:ab:09:64:df:37:3c:1d:ae:72:90:c7:7e:30:ca:c7:96:6d:
2b:cf:b0:d8:be:63:bf:71:89:5e:aa:17:c5:31:ed:16:1a:17:
50:2d:ef:cf:48:4b:45:5e:25:68:56:03:51:e8:6a:85:da:fc:
a1:65:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:14 2025 by rpki-client