Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/lW6KevOszM5D-5TUsA8x1cxhIzM.roa
File: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (raw, json)
Hash identifier: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=
Subject key identifier: 95:6E:8A:7A:F3:AC:CC:CE:43:FB:94:D4:B0:0F:31:D5:CC:61:23:33
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01942143B2B2F49B12A2267FCCB0ADDB569D
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/lW6KevOszM5D-5TUsA8x1cxhIzM.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 217.195.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b2:b2:f4:9b:12:a2:26:7f:cc:b0:ad:db:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956e8a7af3acccce43fb94d4b00f31d5cc612333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:32:d1:da:9e:78:6a:8a:c0:2e:46:d6:2c:
32:c9:5c:55:21:bb:ad:a1:10:ac:88:69:db:8e:f3:
28:5f:1b:58:a3:11:d0:d7:39:73:b0:56:36:a3:10:
30:cc:2b:65:4e:21:bc:0f:87:cc:2c:b9:c6:9b:f7:
ed:8c:65:bc:64:38:5a:3b:90:48:c7:0b:68:52:f3:
fb:9f:8c:59:84:e3:a5:38:9b:95:d6:ce:ac:4f:5c:
77:32:87:49:8e:be:7d:51:50:04:22:ba:dc:64:fd:
da:45:c1:72:62:26:3a:c4:04:50:da:10:8c:8e:02:
c9:04:19:6d:b8:60:8d:f5:f2:4a:a8:e4:5d:83:b7:
75:6e:f1:be:b7:0b:4a:09:56:ef:c6:36:e1:61:27:
fb:7f:f8:41:85:15:1f:18:04:3f:76:00:c8:03:84:
aa:0f:a9:e8:2a:40:aa:40:ee:9e:78:6f:05:2b:07:
6f:e9:ef:ae:43:9a:d2:66:6f:38:b4:5d:33:f8:d3:
58:a5:39:3c:81:01:6f:03:11:49:ed:a4:1f:6b:5d:
c7:34:10:38:4b:d8:95:f1:f8:c9:80:4d:25:d5:4e:
0c:09:9d:f7:9b:fa:d4:9f:bd:9c:da:57:6a:6b:2d:
d6:6f:ee:52:26:43:ba:62:e7:31:7d:45:b6:9b:e2:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:8A:7A:F3:AC:CC:CE:43:FB:94:D4:B0:0F:31:D5:CC:61:23:33
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/lW6KevOszM5D-5TUsA8x1cxhIzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:0c:7a:5b:29:8e:36:d4:19:21:9f:86:dc:d7:19:ff:71:
92:ae:85:53:71:58:73:90:d7:51:c7:55:10:e6:c3:57:ae:56:
93:5f:62:a1:52:4b:75:37:7c:f7:35:0d:91:7a:2d:f4:8a:10:
47:af:95:d0:33:de:03:ad:4f:c2:2a:20:f4:31:1d:6a:84:06:
5a:30:40:29:02:e1:4f:f7:37:86:5f:36:b2:57:89:99:1a:6d:
e4:b1:2a:8f:4a:1f:28:94:ee:3a:e0:cc:84:5e:d6:3f:5c:f2:
e7:b1:42:ae:1c:39:21:e5:0b:37:ae:58:66:1f:db:77:f6:83:
2f:4a:45:a4:8a:42:90:af:23:79:13:8f:67:d5:13:2c:e2:1b:
f3:48:7c:28:97:1e:a3:05:bd:73:30:51:24:53:a8:6f:50:85:
70:aa:72:e0:1c:64:98:49:00:cc:d3:04:35:98:5c:6e:19:35:
e2:55:4e:f3:b2:30:9d:b3:07:fb:85:9c:6b:d3:df:1f:41:d4:
cc:6d:fe:a0:0c:0b:be:4c:fd:2a:a5:4a:43:39:eb:75:d0:42:
15:6d:6c:59:a2:b4:22:93:87:10:61:8d:1c:ba:c8:5e:d2:f0:
f7:2c:a2:57:3f:97:43:78:fc:00:b7:6b:0b:08:3e:dc:08:12:
aa:14:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:12 2025 by rpki-client