Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6nDsYNJOCDteGVzUJeewMZQhqhs.roa
File: 6nDsYNJOCDteGVzUJeewMZQhqhs.roa (raw, json)
Hash identifier: 0TYsHHyXExIrCfhJEmrDpx9SIaiwmE17vz3YhmAtMTQ=
Subject key identifier: EA:70:EC:60:D2:4E:08:3B:5E:19:5C:D4:25:E7:B0:31:94:21:AA:1B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF60896B64ABF6AC8B6B4F0933E3F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6nDsYNJOCDteGVzUJeewMZQhqhs.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34314
IP address blocks: 151.237.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f6:08:96:b6:4a:bf:6a:c8:b6:b4:f0:93:3e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea70ec60d24e083b5e195cd425e7b0319421aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:ee:ce:f3:19:c1:33:31:59:4e:50:e3:d9:
bb:01:cc:51:a1:db:01:07:9a:86:dd:6c:c5:6f:28:
d5:d4:10:e5:2c:66:ef:44:90:f5:ee:4c:be:70:4a:
e0:2f:36:f7:c7:f7:ae:08:a3:c3:e4:da:c3:c6:60:
cf:7b:0b:5a:15:53:6a:0b:b8:4f:fe:3c:70:b9:e3:
db:50:e5:94:94:0e:25:f4:ce:e7:5b:ba:27:83:bf:
8d:98:5c:fc:7b:97:b9:2a:41:11:d4:0e:c5:64:1d:
00:8c:a3:92:df:12:76:3e:99:a4:60:b2:b8:fe:f5:
8d:5b:fb:a7:6c:90:53:11:a5:5f:25:8e:09:cd:a3:
d2:90:25:a5:e8:12:49:7f:36:aa:a6:1f:7b:fc:df:
11:b7:f7:2c:30:98:37:ba:7c:f5:97:78:c7:2c:17:
1e:85:0c:b3:b7:22:45:03:9c:3a:91:f7:2b:98:1c:
56:63:68:40:57:7d:3f:96:20:9b:de:60:ec:80:6e:
d1:2a:cc:f2:19:55:16:c9:45:34:00:03:54:7f:17:
3a:cb:5c:7f:40:a1:de:25:3d:08:5e:64:e4:ed:ab:
93:8e:32:a2:9c:7c:d4:dc:47:4d:62:ad:bc:c9:9f:
84:65:68:f7:17:bb:6f:3a:5b:7c:f9:19:7d:d2:4a:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:EC:60:D2:4E:08:3B:5E:19:5C:D4:25:E7:B0:31:94:21:AA:1B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/6nDsYNJOCDteGVzUJeewMZQhqhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.143.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:f8:8e:6c:99:6e:90:b6:c1:4d:76:f9:18:49:bb:90:5f:
06:c9:fe:30:06:ff:e2:8a:d6:70:85:e4:5a:f7:88:90:6d:fd:
16:44:71:6e:35:84:10:ce:fb:87:23:18:fb:17:68:3f:55:49:
86:61:bb:8b:49:0b:50:93:b0:99:60:7a:f0:65:5b:ba:95:2c:
83:65:80:8c:73:bb:c5:8d:85:6c:e1:66:4c:ed:b6:48:1e:69:
d1:76:98:f8:46:46:56:8c:80:92:a6:48:fa:55:71:74:b2:8f:
44:97:14:9d:d3:46:2e:f2:02:fe:01:c3:cd:1f:63:ff:a6:1a:
10:d0:2d:db:c4:a7:a1:91:f0:aa:be:92:bc:86:16:7c:60:eb:
20:74:42:33:6e:e7:46:52:5d:44:b1:c9:16:71:e6:e9:2b:5d:
b0:d1:7d:8c:e7:d9:0e:13:ac:1b:12:db:30:97:55:f0:dd:2d:
46:ba:6c:66:81:09:55:66:c7:51:03:05:17:3e:62:34:70:94:
27:4c:4f:41:b3:1e:f9:66:65:0e:06:6a:d9:28:e8:00:5c:28:
37:07:3d:34:98:3c:2d:21:e8:76:fa:65:85:e1:8a:74:c0:a3:
34:fc:f2:7c:98:0a:e8:8b:7a:d0:41:fa:69:01:13:b9:6c:53:
3a:1d:ff:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvYIlrZKv2rItrTwkz4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTcwZWM2MGQyNGUwODNiNWUxOTVjZDQyNWU3YjAzMTk0MjFhYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyvuzvMZwTMxWU5Q49m7AcxRodsB
B5qG3WzFbyjV1BDlLGbvRJD17ky+cErgLzb3x/euCKPD5NrDxmDPewtaFVNqC7hP
/jxwuePbUOWUlA4l9M7nW7ong7+NmFz8e5e5KkER1A7FZB0AjKOS3xJ2PpmkYLK4
/vWNW/unbJBTEaVfJY4JzaPSkCWl6BJJfzaqph97/N8Rt/csMJg3unz1l3jHLBce
hQyztyJFA5w6kfcrmBxWY2hAV30/liCb3mDsgG7RKszyGVUWyUU0AANUfxc6y1x/
QKHeJT0IXmTk7auTjjKinHzU3EdNYq28yZ+EZWj3F7tvOlt8+Rl90krmUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpw7GDSTgg7Xhlc1CXnsDGUIaobMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvNm5Ec1lOSk9DRHRlR1Z6VUplZXdNWlFocWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+2PMA0G
CSqGSIb3DQEBCwUAA4IBAQA5TviObJlukLbBTXb5GEm7kF8Gyf4wBv/iitZwheRa
94iQbf0WRHFuNYQQzvuHIxj7F2g/VUmGYbuLSQtQk7CZYHrwZVu6lSyDZYCMc7vF
jYVs4WZM7bZIHmnRdpj4RkZWjICSpkj6VXF0so9ElxSd00Yu8gL+AcPNH2P/phoQ
0C3bxKehkfCqvpK8hhZ8YOsgdEIzbudGUl1EsckWcebpK12w0X2M59kOE6wbEtsw
l1Xw3S1GumxmgQlVZsdRAwUXPmI0cJQnTE9Bsx75ZmUOBmrZKOgAXCg3Bz00mDwt
Ieh2+mWF4Yp0wKM0/PJ8mAroi3rQQfppARO5bFM6Hf8o
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:18 2025 by rpki-client