Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/s6nYW-wwFY4e4FliH1slATjjkcI.roa
File: s6nYW-wwFY4e4FliH1slATjjkcI.roa (raw, json)
Hash identifier: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=
Subject key identifier: B3:A9:D8:5B:EC:30:15:8E:1E:E0:59:62:1F:5B:25:01:38:E3:91:C2
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01942521CC94F2709E6FD8F2B767979DDD16
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/s6nYW-wwFY4e4FliH1slATjjkcI.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51375
IP address blocks: 84.235.101.0/24 maxlen: 24
84.235.102.0/24 maxlen: 24
84.235.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cc:94:f2:70:9e:6f:d8:f2:b7:67:97:9d:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3a9d85bec30158e1ee059621f5b250138e391c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:18:60:97:0a:32:3f:54:c9:ab:ad:a1:f8:
4d:78:81:df:c5:61:5b:66:3c:d4:dd:90:7e:fc:42:
0f:22:ac:33:8d:78:3a:7d:20:72:ec:d8:13:a2:ae:
4a:bc:c4:5a:1e:8c:ee:d4:97:c6:56:b4:dd:f5:f3:
5e:67:89:09:7f:8c:33:6e:b1:2a:60:dd:aa:9e:6f:
d7:9a:3d:ab:b8:92:c1:73:43:9d:c5:ba:3b:97:14:
22:5c:0a:9c:07:92:3f:38:31:82:95:86:90:84:3c:
5e:c0:e8:c4:3a:b7:16:7a:55:83:2e:e2:dc:c7:1b:
fa:6e:17:10:2c:88:9c:bc:07:08:21:8b:d7:a1:7b:
fc:a9:fc:8a:a8:1d:69:e5:15:d0:9c:a8:dd:0a:75:
df:8b:2f:95:9f:8a:d2:13:62:42:0f:52:af:a9:d6:
72:38:ca:c3:42:30:c5:8d:ab:6a:60:26:57:7e:18:
04:4f:25:16:3f:a8:98:c7:97:c1:c0:83:66:94:fd:
b9:a1:e2:44:ed:eb:29:4b:93:bd:be:0c:7f:a5:e2:
f5:40:30:f5:15:55:77:9b:db:dd:24:cd:b6:df:2d:
bc:0f:ff:9b:0e:a2:4c:b7:be:da:45:e9:cf:78:7a:
88:63:63:ac:b7:47:8f:fa:2d:af:b4:18:94:97:ef:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:D8:5B:EC:30:15:8E:1E:E0:59:62:1F:5B:25:01:38:E3:91:C2
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/s6nYW-wwFY4e4FliH1slATjjkcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.235.101.0-84.235.102.255
84.235.107.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1f:a6:9c:f9:35:0f:f8:a9:7c:4a:46:e3:48:88:33:89:20:
23:d2:a7:5c:17:c0:9f:ea:8d:6e:f9:78:58:ed:ea:f1:3b:98:
53:39:ff:b8:26:5b:45:b0:6e:57:de:66:b8:06:ec:f1:b0:e7:
e6:e0:e5:b2:d9:ce:16:4b:07:a8:38:5d:0d:89:86:19:54:46:
09:8d:0a:31:59:e2:30:30:ae:dd:e9:2d:f6:61:2a:03:e6:32:
c8:d0:0c:00:fa:12:2d:11:7b:35:dc:06:bb:34:db:58:7b:0a:
86:a6:9f:e4:f5:23:7c:bf:65:51:c6:0e:56:1c:17:11:f7:9e:
82:c5:0a:11:9e:b7:25:70:4b:de:62:bd:a4:6f:8a:e3:23:1a:
40:19:f4:24:2b:ae:24:2f:63:e7:df:71:4c:19:5e:b9:cb:4d:
7d:03:5f:cd:4a:c3:25:68:6d:4d:b5:71:0c:5a:89:93:37:f1:
ff:29:e2:e1:1c:f9:25:ec:3c:bf:1b:81:c6:4b:b8:53:cb:f1:
5a:60:1d:81:e6:4d:97:3d:06:6f:bf:b6:25:e3:e7:d3:ca:24:
e0:04:18:0c:8b:80:7f:f3:da:fa:4b:fc:31:fb:fc:c6:b0:9b:
8f:32:d6:4e:3d:a6:ef:9c:a3:1f:e2:e7:32:34:2f:aa:34:36:
79:ef:89:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:54:27 2025 by rpki-client