Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/6mSAzptlMtavroiRBEbzErufO08.roa
File: 6mSAzptlMtavroiRBEbzErufO08.roa (raw, json)
Hash identifier: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=
Subject key identifier: EA:64:80:CE:9B:65:32:D6:AF:AE:88:91:04:46:F3:12:BB:9F:3B:4F
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 019423D6E725ED8B309DC2BF086118F68C67
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/6mSAzptlMtavroiRBEbzErufO08.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39756
IP address blocks: 91.209.102.0/24 maxlen: 24
193.223.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e7:25:ed:8b:30:9d:c2:bf:08:61:18:f6:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea6480ce9b6532d6afae88910446f312bb9f3b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:61:70:a5:6d:a0:0c:5a:4e:92:fb:bf:a6:
0f:ad:85:3a:fb:0f:b0:da:ee:c3:39:26:db:b4:59:
2a:ab:8b:54:d9:29:8b:b3:d9:62:58:cd:10:81:f1:
9a:b5:c2:99:d4:2e:30:17:6d:86:75:fb:aa:16:82:
0f:9f:32:74:25:5c:76:8a:58:a7:d6:fe:f5:4a:81:
6b:bc:ba:0e:5d:61:7d:f5:d8:5d:51:ab:e5:12:56:
cb:63:23:31:de:46:b5:92:4f:15:ff:fa:88:9a:31:
1e:ce:b1:38:26:af:1a:75:dd:5f:06:1f:6f:98:5f:
1a:26:d2:dc:92:97:39:51:fd:70:c3:a0:f5:99:a1:
e9:dd:1e:eb:54:d7:6b:1e:69:78:2e:10:ef:b2:14:
7e:e0:ac:74:66:33:29:c3:06:30:1f:0b:d1:a9:24:
25:bd:ec:cb:2d:b8:b6:c6:6b:8d:9f:e9:86:50:7d:
98:97:a1:33:69:bc:8a:ab:55:b5:63:47:f8:b4:19:
4d:99:9a:6d:b8:a2:54:2d:59:c0:24:0c:4a:03:b4:
5f:e8:a6:6b:5b:9f:32:a5:fd:40:1e:7a:89:e9:c1:
91:46:1a:b1:d8:71:e5:7f:b7:87:9f:cc:6a:5e:6b:
89:cc:27:d2:11:79:53:d3:6f:18:81:1a:aa:1a:f3:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:80:CE:9B:65:32:D6:AF:AE:88:91:04:46:F3:12:BB:9F:3B:4F
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/6mSAzptlMtavroiRBEbzErufO08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.102.0/24
193.223.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ed:ab:4b:26:95:9d:98:3d:66:7f:3c:ed:bd:de:46:fd:57:
2e:08:ba:96:da:85:1c:07:64:be:bf:d3:54:2c:24:10:76:c7:
35:f7:53:b0:80:e5:fa:ea:5a:96:5d:cb:be:c6:13:7f:55:0d:
11:50:32:0d:88:a0:05:f3:4c:a0:06:47:6a:ec:ed:6b:23:47:
a3:9d:be:15:7c:6c:4d:1e:49:67:dc:15:6f:1c:13:7e:3d:ee:
ef:d3:b5:f5:68:aa:07:9c:6a:e7:92:7c:6d:e4:31:c2:b1:5a:
79:da:10:34:04:76:1c:e9:41:01:44:c5:c0:46:53:e9:a3:db:
08:de:a8:bb:e1:54:13:1f:ee:97:12:83:02:cd:15:49:80:aa:
5c:fe:20:d3:46:ef:ea:03:54:68:11:d7:0d:cf:d5:7f:63:73:
0f:64:96:ea:ee:af:5a:57:c2:0f:93:14:8c:eb:51:b2:15:09:
66:34:39:bd:44:98:f8:78:5a:28:90:1f:37:44:93:54:bb:c7:
f2:e2:b7:1a:35:ce:19:cf:74:1c:49:97:3b:b6:53:d6:44:58:
5d:6f:57:18:dc:c2:59:85:a7:aa:db:5c:f6:2d:f7:86:a8:4e:
0b:74:fd:f9:1e:70:fc:14:09:90:2a:f4:46:4b:ff:6d:74:b7:
24:d8:8b:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1ucl7YswncK/CGEY9oxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1Y2NkZDg4M2Y2ZGQxMTRlY2Y2ZjcyNzE2YTg0NjM0ZjY3
YWM5NzcwHhcNMjUwMTAxMjE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTY0ODBjZTliNjUzMmQ2YWZhZTg4OTEwNDQ2ZjMxMmJiOWYzYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0dhcKVtoAxaTpL7v6YPrYU6+w+w
2u7DOSbbtFkqq4tU2SmLs9liWM0QgfGatcKZ1C4wF22GdfuqFoIPnzJ0JVx2ilin
1v71SoFrvLoOXWF99dhdUavlElbLYyMx3ka1kk8V//qImjEezrE4Jq8add1fBh9v
mF8aJtLckpc5Uf1ww6D1maHp3R7rVNdrHml4LhDvshR+4Kx0ZjMpwwYwHwvRqSQl
vezLLbi2xmuNn+mGUH2Yl6EzabyKq1W1Y0f4tBlNmZptuKJULVnAJAxKA7Rf6KZr
W58ypf1AHnqJ6cGRRhqx2HHlf7eHn8xqXmuJzCfSEXlT028YgRqqGvPFfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOpkgM6bZTLWr66IkQRG8xK7nztPMB8GA1UdIwQY
MBaAFLXM3Yg/bdEU7Pb3JxaoRjT2esl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgt
NGFiYWY1M2E1MGFmLzEvNm1TQXpwdGxNdGF2cm9pUkJFYnpFcnVmTzA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgtNGFiYWY1M2E1MGFm
LzEvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9FmAwQA
wd9lMA0GCSqGSIb3DQEBCwUAA4IBAQAt7atLJpWdmD1mfzztvd5G/VcuCLqW2oUc
B2S+v9NULCQQdsc191OwgOX66lqWXcu+xhN/VQ0RUDINiKAF80ygBkdq7O1rI0ej
nb4VfGxNHkln3BVvHBN+Pe7v07X1aKoHnGrnknxt5DHCsVp52hA0BHYc6UEBRMXA
RlPpo9sI3qi74VQTH+6XEoMCzRVJgKpc/iDTRu/qA1RoEdcNz9V/Y3MPZJbq7q9a
V8IPkxSM61GyFQlmNDm9RJj4eFookB83RJNUu8fy4rcaNc4Zz3QcSZc7tlPWRFhd
b1cY3MJZhaeq21z2LfeGqE4LdP35HnD8FAmQKvRGS/9tdLck2Isl
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:38 2025 by rpki-client