Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6DKPMNriuuz5czJiETGvSTeZJTk.roa
File: 6DKPMNriuuz5czJiETGvSTeZJTk.roa (raw, json)
Hash identifier: Won6pxgmbG/3Nyt61zaGAHF2tGR423C85mRCMrJv3/8=
Subject key identifier: E8:32:8F:30:DA:E2:BA:EC:F9:73:32:62:11:31:AF:49:37:99:25:39
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D659B00ECA847C717EA544A7487F38
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6DKPMNriuuz5czJiETGvSTeZJTk.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 178.255.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:b0:0e:ca:84:7c:71:7e:a5:44:a7:48:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8328f30dae2baecf97332621131af4937992539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:74:0b:15:6e:e8:dd:5b:72:f9:7a:c9:c7:
f3:04:af:85:b6:68:67:ec:6e:23:64:b5:48:4f:75:
77:b0:60:a1:62:ba:bd:d1:59:47:76:30:9a:e7:28:
00:a6:c8:d9:c3:0f:de:35:2d:4d:45:11:48:4c:b1:
ec:20:d1:23:3d:48:3e:f9:b0:1c:5c:68:26:a2:06:
ff:a3:9b:3c:5d:30:53:28:b9:7a:8b:48:74:e8:55:
cf:c3:3e:e7:12:3f:91:1b:ee:c8:65:6f:ef:7d:77:
b9:b8:28:8d:15:07:4a:2d:e1:f4:11:28:14:c0:64:
5f:c7:23:bb:32:2b:17:7f:0e:e2:68:f2:17:1a:d2:
27:c8:34:30:ec:75:d2:78:23:cf:b3:5d:ba:29:93:
42:47:c2:08:c5:a2:0f:1b:57:16:06:b2:1d:70:e8:
2b:a0:6a:b0:95:0e:77:c4:01:02:24:0c:6f:70:7e:
3e:af:1d:39:2a:1f:c1:ea:38:cd:be:d1:1e:3d:2a:
45:c3:97:5c:aa:96:76:ce:67:63:fa:88:d0:34:0d:
2e:f7:cb:16:05:80:b5:b4:4c:1c:8b:9b:39:5f:97:
e6:eb:c2:ec:2d:99:70:47:05:cf:e9:85:1b:62:91:
28:c3:4b:01:74:f1:38:e6:41:59:12:6f:14:c5:a7:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:8F:30:DA:E2:BA:EC:F9:73:32:62:11:31:AF:49:37:99:25:39
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6DKPMNriuuz5czJiETGvSTeZJTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:2a:3d:0c:be:22:ce:00:e8:a4:09:83:4d:2e:1d:ad:2c:8e:
8c:6f:14:c1:e5:44:b7:c2:77:bd:ea:60:88:b7:e9:91:45:2b:
db:60:a5:4f:12:ec:61:1a:e4:8d:fe:90:41:0f:df:0b:53:05:
38:31:f6:f2:87:a3:73:f4:c1:f5:53:53:2c:c7:f1:27:fd:1c:
e5:8a:ee:35:3a:28:ac:98:a0:2e:2b:bc:9b:84:3c:19:f6:79:
6f:57:f4:a9:13:41:ad:af:d9:87:e8:7d:13:9e:d0:f3:a9:64:
36:c0:43:65:75:66:86:56:7c:01:68:08:1c:5a:61:5c:63:60:
af:99:7d:9c:5a:0d:4c:57:2e:cc:cf:1d:d1:4c:74:fc:ff:9c:
e1:9e:17:8d:2d:08:b1:83:75:e5:b2:65:30:48:0a:13:98:74:
84:76:21:c5:f3:7a:39:40:a1:71:da:d3:c9:84:09:51:d6:aa:
29:9a:88:08:e2:0d:e9:1e:0b:18:0d:fb:27:09:85:43:27:4e:
37:e5:15:27:53:e8:80:ae:55:a7:36:70:63:ef:59:46:f1:c7:
98:01:d3:b2:fe:bb:d2:a9:d2:aa:d7:5d:9d:91:86:f5:4f:da:
bb:1c:34:0d:eb:c0:ab:72:8d:95:c3:c7:47:2d:a7:3f:8a:c8:
9e:af:77:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lmwDsqEfHF+pUSnSH84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODMyOGYzMGRhZTJiYWVjZjk3MzMyNjIxMTMxYWY0OTM3OTkyNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtN0CxVu6N1bcvl6ycfzBK+Ftmhn
7G4jZLVIT3V3sGChYrq90VlHdjCa5ygApsjZww/eNS1NRRFITLHsINEjPUg++bAc
XGgmogb/o5s8XTBTKLl6i0h06FXPwz7nEj+RG+7IZW/vfXe5uCiNFQdKLeH0ESgU
wGRfxyO7MisXfw7iaPIXGtInyDQw7HXSeCPPs126KZNCR8IIxaIPG1cWBrIdcOgr
oGqwlQ53xAECJAxvcH4+rx05Kh/B6jjNvtEePSpFw5dcqpZ2zmdj+ojQNA0u98sW
BYC1tEwci5s5X5fm68LsLZlwRwXP6YUbYpEow0sBdPE45kFZEm8UxacfwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgyjzDa4rrs+XMyYhExr0k3mSU5MB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvNkRLUE1Ocml1dXo1Y3pKaUVUR3ZTVGVaSlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsv/0MA0G
CSqGSIb3DQEBCwUAA4IBAQBKKj0MviLOAOikCYNNLh2tLI6MbxTB5US3wne96mCI
t+mRRSvbYKVPEuxhGuSN/pBBD98LUwU4Mfbyh6Nz9MH1U1Msx/En/Rzliu41Oiis
mKAuK7ybhDwZ9nlvV/SpE0Gtr9mH6H0TntDzqWQ2wENldWaGVnwBaAgcWmFcY2Cv
mX2cWg1MVy7Mzx3RTHT8/5zhnheNLQixg3XlsmUwSAoTmHSEdiHF83o5QKFx2tPJ
hAlR1qopmogI4g3pHgsYDfsnCYVDJ0435RUnU+iArlWnNnBj71lG8ceYAdOy/rvS
qdKq112dkYb1T9q7HDQN68Crco2Vw8dHLac/isier3fQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:43:01 2025 by rpki-client