Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/6Ln300RL4O58jHgSpUHDLRYbUKI.roa
File: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (raw, json)
Hash identifier: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=
Subject key identifier: E8:B9:F7:D3:44:4B:E0:EE:7C:8C:78:12:A5:41:C3:2D:16:1B:50:A2
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 019420D59DA96FAE86F277647D7445509BF3
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/6Ln300RL4O58jHgSpUHDLRYbUKI.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 45.150.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9d:a9:6f:ae:86:f2:77:64:7d:74:45:50:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b9f7d3444be0ee7c8c7812a541c32d161b50a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:b2:7a:97:97:70:b6:27:a6:0e:e7:61:53:
9a:b7:e5:32:36:6f:f5:35:bb:5c:c8:df:e1:8c:3d:
ac:e4:08:84:30:cd:c1:d1:7f:99:c8:77:72:f9:c1:
4f:4c:89:e4:7e:59:ba:73:89:47:c2:b1:96:56:7d:
1c:44:cd:8f:d6:12:9b:6c:4d:0a:50:33:be:18:76:
f2:92:36:c1:74:fe:ac:41:11:1b:4c:4a:c9:94:04:
5b:2c:c0:bf:56:17:40:47:1f:4c:c0:e7:39:7f:22:
99:71:6d:b4:f0:cf:c6:2f:b1:64:28:eb:24:f8:57:
9f:bb:aa:95:00:37:9e:c6:0d:b1:66:22:af:bf:de:
fa:ae:d9:87:c6:f5:de:49:c0:dc:cb:51:7e:51:d5:
8f:b3:07:78:24:e9:dd:a5:89:34:d7:d0:b7:53:d2:
c3:85:57:34:fd:3f:4d:fa:d3:ad:1c:e8:25:74:8a:
94:30:6e:c3:f1:24:13:50:15:e1:d8:1e:41:46:d7:
e4:a1:02:46:b7:12:28:ba:b4:ce:3c:af:51:b6:39:
82:73:75:27:d0:1d:8d:d7:af:77:70:d5:80:1d:2a:
0b:f7:56:f5:9d:71:22:38:5c:51:7d:ff:6e:5f:8d:
f7:5c:36:aa:de:5e:d5:74:09:16:fe:83:da:20:6d:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:F7:D3:44:4B:E0:EE:7C:8C:78:12:A5:41:C3:2D:16:1B:50:A2
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/6Ln300RL4O58jHgSpUHDLRYbUKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:31:97:60:a4:ee:fa:c2:9e:a5:ba:46:4c:c8:4e:f1:aa:e1:
85:0f:f1:5b:c1:57:07:e9:6a:05:21:c4:71:79:1a:73:a3:57:
40:a2:ae:7a:8e:82:e6:a1:33:37:f3:a3:cc:61:6b:e4:dd:94:
95:ec:d2:6c:5b:70:c3:c7:17:0d:4d:1f:67:a5:f5:a2:5a:0e:
f8:c5:c0:1e:46:4c:de:e0:a1:11:ee:12:fd:b3:bc:fb:70:f6:
0b:48:d3:a5:6c:12:4b:c0:bd:ea:c6:35:30:12:e4:7b:24:00:
84:41:d3:4b:10:9b:81:0c:68:03:0e:e4:29:37:ee:9e:37:2a:
c1:a1:97:64:c4:02:7f:c2:0a:93:ee:92:46:db:e0:51:88:ec:
aa:9e:64:62:79:ca:ef:2f:95:34:4f:17:21:e8:2c:e2:a3:7c:
5c:e7:f8:ec:73:5d:47:fa:1d:56:91:1b:6b:4c:19:d1:2d:ca:
8f:12:5a:7b:0a:b4:d8:48:07:81:37:04:3c:ef:7d:7e:cf:b5:
9b:82:4f:5e:a2:4a:a5:7e:6a:45:5c:6a:9d:61:b1:9a:01:7f:
61:14:b1:c1:a0:08:c5:41:02:cd:97:33:f5:bd:71:f7:c6:fb:
8a:9d:4b:90:84:84:de:d7:94:c3:ab:1b:a3:97:c5:c4:6a:72:
b0:ca:49:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1Z2pb66G8ndkfXRFUJvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4
ZmRmY2IwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI5ZjdkMzQ0NGJlMGVlN2M4Yzc4MTJhNTQxYzMyZDE2MWI1MGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs82yepeXcLYnpg7nYVOat+UyNm/1
NbtcyN/hjD2s5AiEMM3B0X+ZyHdy+cFPTInkflm6c4lHwrGWVn0cRM2P1hKbbE0K
UDO+GHbykjbBdP6sQREbTErJlARbLMC/VhdARx9MwOc5fyKZcW208M/GL7FkKOsk
+Fefu6qVADeexg2xZiKvv976rtmHxvXeScDcy1F+UdWPswd4JOndpYk019C3U9LD
hVc0/T9N+tOtHOgldIqUMG7D8SQTUBXh2B5BRtfkoQJGtxIourTOPK9RtjmCc3Un
0B2N1693cNWAHSoL91b1nXEiOFxRff9uX433XDaq3l7VdAkW/oPaIG2yuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi599NES+DufIx4EqVBwy0WG1CiMB8GA1UdIwQY
MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt
ZjA2YmJmYjg0MDhmLzEvNkxuMzAwUkw0TzU4akhnU3BVSERMUlliVUtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm
LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZacMA0G
CSqGSIb3DQEBCwUAA4IBAQCLMZdgpO76wp6lukZMyE7xquGFD/FbwVcH6WoFIcRx
eRpzo1dAoq56joLmoTM386PMYWvk3ZSV7NJsW3DDxxcNTR9npfWiWg74xcAeRkze
4KER7hL9s7z7cPYLSNOlbBJLwL3qxjUwEuR7JACEQdNLEJuBDGgDDuQpN+6eNyrB
oZdkxAJ/wgqT7pJG2+BRiOyqnmRiecrvL5U0Txch6Czio3xc5/jsc11H+h1WkRtr
TBnRLcqPElp7CrTYSAeBNwQ8731+z7Wbgk9eokqlfmpFXGqdYbGaAX9hFLHBoAjF
QQLNlzP1vXH3xvuKnUuQhITe15TDqxujl8XEanKwykmA
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:17 2025 by rpki-client