Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6aWp4k9uMmiXy5qqEWHXgGbfnYc.roa
File: 6aWp4k9uMmiXy5qqEWHXgGbfnYc.roa (raw, json)
Hash identifier: 2vtWgc5L8/rOso42BhXevr4LQ6SqMlquprymFdHBzLI=
Subject key identifier: E9:A5:A9:E2:4F:6E:32:68:97:CB:9A:AA:11:61:D7:80:66:DF:9D:87
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F00FF4CDA4136A6654676FA70127C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6aWp4k9uMmiXy5qqEWHXgGbfnYc.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60656
IP address blocks: 85.187.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:00:ff:4c:da:41:36:a6:65:46:76:fa:70:12:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9a5a9e24f6e326897cb9aaa1161d78066df9d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:38:db:7d:43:77:c0:ee:e3:17:19:fb:1f:81:
83:98:d9:92:20:91:6d:79:61:99:64:5a:d7:ea:93:
0c:89:e2:25:26:c7:11:5e:73:64:02:a9:8b:ab:74:
06:61:83:01:2a:9e:03:5d:c8:d8:fe:85:f2:65:3e:
4a:cb:59:d5:db:f2:ec:b4:a8:3d:d4:4d:3c:57:24:
1f:db:bb:9c:1b:8d:93:54:f4:37:26:62:47:c4:06:
f9:63:e4:bf:21:0d:41:6f:9e:86:fd:92:06:95:40:
11:25:39:b3:d7:10:26:ac:93:0a:20:25:d1:0f:b2:
ff:5e:c3:6f:26:85:b0:f3:39:99:01:40:9a:93:ae:
c2:e4:43:70:d5:4f:9f:79:13:a2:eb:bd:28:c7:5b:
d7:23:47:c1:f2:32:88:34:b9:99:e3:fd:24:96:74:
39:5f:42:4d:0a:aa:c1:4f:44:c8:d4:b5:0d:98:2e:
4c:d2:7b:5e:09:27:af:8a:d0:7a:7c:e2:7f:10:5e:
1a:0e:87:3c:74:a7:0e:16:12:83:69:a7:6e:7c:4d:
93:cb:6e:33:70:3f:3f:51:13:3e:4a:9b:04:89:b8:
9f:36:f1:b6:29:1a:d9:f5:9f:2b:69:87:a1:d6:6e:
0e:1e:7a:ef:d1:b8:08:49:29:e8:6e:7b:b8:2c:4f:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:A9:E2:4F:6E:32:68:97:CB:9A:AA:11:61:D7:80:66:DF:9D:87
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6aWp4k9uMmiXy5qqEWHXgGbfnYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.15.0/24
Signature Algorithm: sha256WithRSAEncryption
98:36:e1:6d:eb:7b:15:13:bc:8d:08:ae:ad:28:0a:de:0b:11:
55:3a:88:b8:13:03:ab:38:3b:f0:31:bf:29:5d:d9:b8:0f:4d:
16:4c:c5:1b:98:fd:9c:af:10:88:ad:df:32:21:f3:30:66:33:
5e:fe:3d:04:9c:94:90:4d:9d:4b:24:0f:6d:c3:6d:4c:4f:99:
d2:3a:7e:78:ab:15:43:5d:f9:a5:e0:72:b7:c4:2f:ea:37:5d:
2e:64:f3:fb:a4:99:b5:ba:0b:31:de:f7:8e:6a:84:ca:d1:c5:
a4:6e:25:1f:64:c9:9d:25:49:16:0a:47:55:13:0f:97:a5:ff:
16:e6:95:7a:1e:19:af:f5:47:94:d0:25:c2:71:88:a3:43:39:
b3:ff:66:fd:0d:e5:ab:40:77:b0:fd:25:ee:6e:fc:e7:c8:0c:
bf:19:45:ca:f6:d2:ae:c7:7e:9c:57:d8:f5:f6:dc:82:97:00:
37:dd:6b:cb:d3:56:67:4a:53:2d:ae:be:e1:2f:5b:3b:37:6c:
79:bf:06:cf:35:f5:13:f5:a4:00:a6:ac:02:f7:f4:d0:04:e2:
f2:22:59:bf:b6:f8:41:30:de:a3:e4:58:f4:8d:7b:9f:f5:5f:
c2:3e:74:af:bf:b9:8c:c2:14:1b:c6:78:81:57:b7:3c:d6:14:
fd:70:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:31 2025 by rpki-client