Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/AJM-6Zm39xTWDgtragWJQRfYqM8.roa
File: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (raw, json)
Hash identifier: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=
Subject key identifier: 00:93:3E:E9:99:B7:F7:14:D6:0E:0B:6B:6A:05:89:41:17:D8:A8:CF
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D18649B37AD72FB3B84C7845DDD67
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/AJM-6Zm39xTWDgtragWJQRfYqM8.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 31.169.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:18:64:9b:37:ad:72:fb:3b:84:c7:84:5d:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00933ee999b7f714d60e0b6b6a05894117d8a8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:da:d7:b6:e3:55:e4:9b:4a:13:9e:5a:b7:
ab:25:93:93:fe:4d:31:2d:10:de:83:40:cd:cf:f3:
1c:bc:e0:e2:ad:23:bf:be:e9:8d:97:d1:6d:3a:e7:
b0:8d:88:f0:ca:63:98:24:90:4b:31:9c:89:24:9f:
06:1f:04:b8:2f:8f:e0:37:65:f2:c3:6e:ff:15:41:
27:88:62:45:49:6d:82:09:eb:1f:0d:20:1b:b6:09:
92:52:09:c4:5c:41:d3:6d:bc:67:1f:e2:6d:37:b0:
a8:02:72:79:fb:ff:c1:2a:40:a2:97:99:fe:3f:5f:
61:0c:cd:ba:e6:51:0c:af:15:00:a9:24:06:81:34:
c0:cd:7f:f3:65:04:ef:8e:9e:c1:31:56:8a:7f:f9:
cc:91:76:a8:2f:10:ec:50:82:94:ca:f4:af:75:57:
24:b4:bb:17:12:ec:49:77:05:a4:c1:1c:11:54:bb:
80:7f:ff:eb:bf:f1:d2:ad:e9:4e:11:f0:2a:17:21:
26:9b:a1:e5:b2:db:ac:e7:bd:55:6a:f7:c1:da:01:
8c:35:06:90:b2:f7:16:c3:91:d2:7e:e8:b3:32:e1:
e9:3a:9a:65:62:72:23:dc:bf:b4:4b:4e:c1:78:31:
1e:2e:6f:87:ac:0e:ed:9b:63:2b:1f:87:08:95:62:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:3E:E9:99:B7:F7:14:D6:0E:0B:6B:6A:05:89:41:17:D8:A8:CF
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/AJM-6Zm39xTWDgtragWJQRfYqM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e5:cb:a3:12:c2:ab:38:a4:82:6b:59:da:ad:12:9c:e8:cf:
2d:c5:aa:9c:21:c7:13:0e:0f:03:0b:d5:85:c5:c0:d2:a2:46:
5b:df:00:0b:e1:c2:d3:02:6a:bc:89:2b:5d:14:2a:b7:2d:5b:
f3:69:ed:2a:f1:f1:76:20:18:b4:e7:06:95:86:71:71:21:88:
22:b1:3d:cb:28:3c:a7:61:f2:9b:cf:7c:ac:25:73:6b:df:e2:
6f:59:04:e5:dc:08:d2:d0:5e:05:11:6c:5a:01:c7:e1:1c:4e:
27:b0:6b:b0:11:0a:00:3e:98:92:b0:4c:df:58:d4:f0:78:3e:
5b:c8:cc:ea:a5:6c:50:f4:b7:5a:ef:ec:df:ca:10:67:94:9d:
66:7a:9e:05:70:af:09:5f:1d:4f:ef:cb:e4:a0:db:b4:d0:98:
69:51:3c:c3:fb:f7:cf:39:17:87:2f:67:1a:63:0b:43:11:f9:
39:6d:62:6e:0f:ef:3e:de:2b:4c:02:d1:cc:48:ba:17:fb:dc:
73:cb:b3:2d:68:db:d4:f4:40:ef:cc:47:b9:e5:48:78:1b:da:
f4:b8:24:5e:63:40:7d:cb:dc:0c:8d:3b:11:bd:3c:b1:ee:4e:
48:08:6b:c0:16:1d:80:7b:0f:55:ac:ec:d6:3a:69:5f:ff:65:
5f:25:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:49:00 2025 by rpki-client