Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/6DiQrdbcJOqBfsf9QDEXeVd2izY.roa
File: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (raw, json)
Hash identifier: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=
Subject key identifier: E8:38:90:AD:D6:DC:24:EA:81:7E:C7:FD:40:31:17:79:57:76:8B:36
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 01942067E238E47BB8036F7E859885B02368
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/6DiQrdbcJOqBfsf9QDEXeVd2izY.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199938
IP address blocks: 185.41.104.0/22 maxlen: 24
194.39.187.0/24 maxlen: 24
194.39.215.0/24 maxlen: 24
194.40.244.0/24 maxlen: 24
194.41.1.0/24 maxlen: 24
2a01:55e0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e2:38:e4:7b:b8:03:6f:7e:85:98:85:b0:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83890add6dc24ea817ec7fd4031177957768b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:80:7f:09:52:6f:fb:b5:17:04:54:b9:76:
26:4a:7f:3b:c5:dc:7c:2e:24:72:a2:9c:48:3c:2f:
37:4d:3a:11:28:0a:83:03:50:4e:d6:89:a9:0b:44:
98:f5:8b:17:10:aa:61:08:57:0f:8c:01:0a:b2:be:
33:d6:99:83:d5:18:8c:59:f2:52:ac:39:7a:d7:21:
be:ed:a3:19:fc:03:75:c6:46:3f:af:53:90:b4:66:
94:25:01:9c:a9:81:45:5b:b7:d1:07:7a:29:47:52:
46:a0:7f:6f:08:b2:33:0d:22:23:69:ca:af:b0:8a:
bf:97:0f:d6:b0:21:1e:8a:78:46:24:2f:40:93:56:
d6:55:29:d5:c6:ca:53:a5:2f:31:6b:30:cc:43:8b:
9a:7c:bb:56:ae:2a:59:c3:d8:07:46:cd:d5:81:2a:
05:91:ef:e8:85:53:e4:99:3a:b7:56:79:83:62:a4:
1c:e4:b0:58:86:5d:e4:78:18:9d:c7:f4:70:b6:b3:
76:37:74:3c:60:e4:d6:26:43:e9:69:ed:ba:0c:cb:
ee:5e:98:2e:fe:a7:37:e8:13:b9:41:bc:c9:29:d6:
9f:eb:b1:43:0c:22:28:70:7d:dc:69:f7:d1:be:9b:
d4:17:c9:f8:5f:e5:62:d0:29:12:93:89:f9:18:a9:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:90:AD:D6:DC:24:EA:81:7E:C7:FD:40:31:17:79:57:76:8B:36
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/6DiQrdbcJOqBfsf9QDEXeVd2izY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.104.0/22
194.39.187.0/24
194.39.215.0/24
194.40.244.0/24
194.41.1.0/24
IPv6:
2a01:55e0::/29
Signature Algorithm: sha256WithRSAEncryption
97:9a:c8:83:b7:46:61:24:d1:61:19:73:78:29:0e:d2:b9:31:
cf:6b:e1:9c:a9:67:b5:4a:bb:12:3d:33:f2:03:0d:f2:64:95:
c5:a1:49:2b:72:ef:f5:32:aa:e6:7e:50:2a:60:5b:38:e0:c1:
c2:f2:da:ee:0a:ec:f6:3f:b1:81:07:aa:0f:05:ea:8e:e8:08:
d6:71:51:1d:08:08:d5:a4:07:ea:02:bb:00:2d:9a:58:3d:02:
a5:f5:51:6f:89:11:fe:36:fe:d6:e6:ec:83:b9:44:c8:f1:6b:
ec:a5:c4:8a:84:d4:f0:e4:5c:ec:8d:5d:53:9c:92:5f:ea:8f:
d7:ce:52:f1:05:b6:e4:03:47:1e:0d:d6:ec:a0:f4:43:cc:31:
76:9f:4d:f9:d5:a9:28:4b:c8:02:9a:f7:8c:52:6c:63:30:e0:
25:98:a2:9f:04:16:24:a9:05:8a:13:60:0b:88:f6:e5:55:f0:
f5:32:50:9c:ab:80:68:b0:25:6d:2b:93:00:48:dc:4d:60:e5:
66:a9:b1:3f:62:c4:0f:1e:9f:de:9b:cf:5c:23:ef:2e:8a:57:
ac:91:9d:69:b9:0f:25:8d:ec:d2:b8:c6:ab:4e:82:1c:1b:d8:
d9:43:e5:c6:2f:2e:e5:85:50:2a:ac:26:d3:17:c5:0f:06:6c:
14:0b:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:01 2025 by rpki-client