Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa
File: 6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa (raw, json)
Hash identifier: OiM+asEBFnJBn2ul9evzYMK3DJnJ0TrJLx139d4J6Rk=
Subject key identifier: EA:F5:38:63:E1:4B:21:E1:4B:B7:16:D8:AD:84:31:3F:BA:C4:90:9C
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 019420D5C8906FF41F0AE2CC7CC69BAC7F0F
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202240
IP address blocks: 79.98.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c8:90:6f:f4:1f:0a:e2:cc:7c:c6:9b:ac:7f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf53863e14b21e14bb716d8ad84313fbac4909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:d9:b0:4b:8f:86:47:ec:82:09:9e:54:de:
0c:25:91:06:8a:86:85:fc:9b:82:b9:51:d3:63:c1:
b3:b6:c2:b1:72:ba:77:10:3f:9e:1d:b6:18:85:e1:
bd:c8:2d:30:e8:46:83:6c:07:b7:06:ce:75:da:d7:
0b:5f:2d:c3:c1:b0:7e:75:12:9f:42:22:a7:71:77:
a5:7a:43:02:dd:dc:97:92:29:b7:df:8b:17:b4:3b:
5c:a2:f6:ac:1a:e6:2a:7b:fd:2e:ae:79:16:41:05:
4f:6c:1e:d1:55:c4:ab:0d:39:e7:8c:4c:db:52:36:
81:32:a9:9a:2b:9a:a5:a1:07:66:a5:1e:0b:1c:b7:
9f:ca:9a:3b:79:e3:bb:2c:82:09:f0:3d:b7:aa:08:
4c:b7:98:28:b8:d3:a4:88:80:ba:21:25:5a:ec:0d:
0b:18:5e:49:9c:66:a2:31:50:22:fd:9c:34:4e:0e:
bb:76:ba:bf:e0:7c:df:76:81:20:37:e1:39:7b:5e:
fc:6a:99:f5:1e:de:9c:41:7c:21:82:cf:bc:45:8a:
cd:54:ec:1a:29:59:a7:bf:4e:da:16:3a:c7:29:d5:
76:25:a7:29:b2:3f:e2:1f:82:1c:2d:e2:c2:91:19:
cf:b8:22:b6:33:e3:cf:14:4b:bd:66:ca:c4:d9:09:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:38:63:E1:4B:21:E1:4B:B7:16:D8:AD:84:31:3F:BA:C4:90:9C
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.188.0/22
Signature Algorithm: sha256WithRSAEncryption
74:61:3e:44:9a:3d:fc:17:02:40:09:3f:f4:af:6c:e5:42:4f:
d8:6e:5c:4f:50:2e:a9:3e:2d:42:01:11:25:1d:31:92:2d:b8:
cb:98:e3:84:ec:f3:79:3d:0e:05:6d:84:ad:bc:f4:c2:8b:a2:
fe:2d:8d:6f:90:e9:79:d9:00:b4:ab:a2:24:24:5a:94:06:b5:
9c:2e:f5:ad:41:55:e3:93:29:fd:75:04:73:7b:88:4e:67:8f:
cd:19:92:10:34:45:07:a0:bc:ce:f4:63:b8:41:d8:61:a2:30:
30:c2:64:43:df:95:1c:40:b7:73:16:c7:51:9c:aa:e4:bb:16:
2d:73:1f:68:be:e6:8b:52:ad:bd:20:4c:a9:16:23:de:04:f2:
4b:26:47:80:de:37:48:74:88:bc:96:fd:6f:88:19:40:38:04:
3f:fa:01:e7:6a:70:22:95:b8:b0:24:fd:35:52:32:12:e9:12:
ba:be:84:2c:12:a7:a9:45:b2:50:10:ca:d5:bf:53:68:e7:0e:
fc:92:2c:c4:9b:c3:9d:84:d4:13:5c:b0:30:a3:ae:fb:f1:9d:
ff:3c:83:e4:6b:70:0f:67:1e:26:93:54:71:a7:03:6b:66:30:
e2:45:b0:9e:ff:d6:43:68:47:96:0a:42:f5:28:05:0f:ea:c7:
29:c6:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:56:56 2025 by rpki-client