Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa
File: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (raw, json)
Hash identifier: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=
Subject key identifier: 83:A2:20:D2:33:CD:31:EE:0C:00:CB:E3:78:84:70:E0:98:AB:74:31
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8F0079F76EA1B5CC2A6F8597A0E1
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61301
IP address blocks: 89.252.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:00:79:f7:6e:a1:b5:cc:2a:6f:85:97:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a220d233cd31ee0c00cbe3788470e098ab7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:15:a9:db:66:ba:b9:28:fe:34:93:1c:e6:
2f:c2:f4:98:b8:4b:f3:7d:c2:c1:c8:3d:57:15:07:
a2:62:f0:9a:51:e1:c7:43:a5:b7:10:63:e2:e8:80:
e2:37:03:ae:70:97:58:c9:d5:17:a5:cf:08:56:19:
d7:18:b2:3e:5e:e0:6d:0d:08:a2:0e:d7:64:45:17:
22:7b:bd:90:6b:0d:88:c6:82:2f:b5:11:d7:4f:51:
a1:5b:d1:c9:e8:8d:1d:7f:06:9e:c4:8f:c8:8f:93:
5a:4f:4c:b8:2d:0c:ff:c0:e8:21:30:12:95:8f:0d:
75:a3:0d:7b:02:b7:d0:bd:ab:aa:1b:ea:d4:57:ad:
dc:49:b8:56:18:ef:53:e7:d5:95:10:f9:27:65:43:
19:f7:25:c5:ac:b4:10:8b:33:b2:44:11:5d:56:85:
b3:63:a6:c0:bc:76:68:91:8c:1a:9e:6e:41:b4:b3:
8a:f5:2c:9a:a2:78:44:39:f2:20:a9:e0:3d:6c:e4:
ee:4e:5e:6b:19:a7:08:ec:ba:0e:f6:f7:00:b7:80:
39:96:c5:93:e9:65:0d:3b:a1:27:a3:2c:7d:6c:ff:
2a:93:01:a5:92:09:d0:c2:66:e3:67:69:d5:ea:17:
3f:3d:13:cf:73:d9:5f:7a:27:84:42:54:c7:c5:ee:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:20:D2:33:CD:31:EE:0C:00:CB:E3:78:84:70:E0:98:AB:74:31
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.201.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7c:be:d5:56:c9:55:48:e6:36:29:70:b2:10:3c:c5:f6:c3:
92:18:87:9d:d8:d4:63:ff:7e:77:89:43:f3:b3:b8:5a:3a:05:
3d:50:83:0c:11:25:3c:fa:10:04:bd:e5:28:95:d5:e1:d9:63:
d8:1b:16:17:ce:68:59:57:07:35:ac:08:c0:6e:ab:56:ea:33:
1e:ff:a4:87:c8:14:c2:fe:76:a1:ca:65:48:4a:e2:e2:fe:fc:
cf:fd:a5:d5:5d:bf:53:00:c5:6c:c1:ca:5b:64:92:42:d4:48:
6d:72:86:bf:be:7d:28:65:0a:09:5f:19:a8:03:57:03:1d:42:
c4:ca:33:3f:83:9c:f1:5c:17:23:59:a1:50:07:28:2d:13:f7:
e3:aa:b0:05:c7:4a:9f:95:cf:45:17:68:5d:8d:77:90:63:9b:
db:d8:09:c6:5f:f3:c9:d1:07:8a:67:8f:da:d3:37:a0:31:26:
92:5e:6c:b8:d1:6d:3e:5e:72:7f:7a:ba:36:b3:9d:a4:31:7c:
d6:3d:fa:2d:97:20:be:0a:96:90:05:aa:3a:7a:44:a5:2e:7d:
92:8b:02:2d:eb:ab:14:c0:94:4f:5b:49:4d:6b:0b:d7:6d:68:
ce:f0:61:60:91:9e:32:d3:aa:12:75:f4:ab:d3:33:86:93:72:
84:a2:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:01 2025 by rpki-client