Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6LVRU_9vBqoJic2dRStCxZu68do.roa
File: 6LVRU_9vBqoJic2dRStCxZu68do.roa (raw, json)
Hash identifier: GiU2UIOR/48j2LNUSGKnPpI4WpTDccaRNOmx8pjavxo=
Subject key identifier: E8:B5:51:53:FF:6F:06:AA:09:89:CD:9D:45:2B:42:C5:9B:BA:F1:DA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200FB1D0445C17302BE403E7D147A1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6LVRU_9vBqoJic2dRStCxZu68do.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30644
IP address blocks: 14.102.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:b1:d0:44:5c:17:30:2b:e4:03:e7:d1:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b55153ff6f06aa0989cd9d452b42c59bbaf1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:6f:c6:ed:13:ef:ef:51:4f:71:7c:8c:b0:
24:cc:52:38:25:f6:49:82:ba:3d:f0:30:fc:21:bd:
97:d1:ce:ac:e5:67:33:ec:bc:24:a2:f2:8e:1a:4c:
8f:6e:fa:41:ce:d1:65:e3:41:25:83:1f:78:b9:f2:
34:ee:a1:c0:96:54:8e:d4:3f:19:23:c1:4d:b9:80:
f7:64:3f:0e:13:42:85:3a:6c:f2:49:a1:15:3b:75:
7b:0f:e2:b7:81:4f:2f:e0:7f:6e:5a:e6:85:0e:d2:
1a:39:96:76:4f:a5:b9:8a:1a:12:31:a6:cd:71:d0:
af:0a:a9:73:16:38:fb:33:29:1d:bf:7c:1d:4d:32:
f2:6d:0e:4f:0a:bd:94:da:57:7a:10:7e:19:0e:e2:
88:e5:ef:17:ad:7d:f4:f1:37:88:8a:a4:bb:32:19:
a3:2e:43:99:d8:60:e9:50:53:c3:81:d3:4e:e0:ef:
34:7e:c7:19:78:2f:13:7f:cb:46:6c:fc:95:c2:83:
cc:58:94:40:18:89:bf:aa:85:02:1c:8a:84:53:1e:
5c:78:48:83:ca:58:5f:b4:31:53:ef:56:4e:b1:06:
45:5d:3e:88:ee:a8:95:e3:58:9f:b2:64:eb:bc:2b:
31:76:b9:13:c4:02:6e:24:36:3e:25:1c:12:9d:ce:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:51:53:FF:6F:06:AA:09:89:CD:9D:45:2B:42:C5:9B:BA:F1:DA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6LVRU_9vBqoJic2dRStCxZu68do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:04:31:c8:05:e0:13:7e:c1:5d:a0:81:9f:e1:bd:01:84:
03:85:26:bf:70:89:df:0e:d5:40:ac:94:de:1c:ba:3a:58:d4:
4d:11:e8:34:95:77:a7:63:64:93:f3:f1:a8:87:82:af:75:bd:
f0:b5:ef:4b:6c:e7:5d:55:41:5c:49:96:cd:2b:00:47:12:4c:
3a:35:75:de:4b:cb:32:9d:d9:48:3c:f5:68:52:9c:ad:f2:df:
f7:81:da:38:88:b6:f7:aa:56:be:c5:53:dd:df:4e:7a:11:5e:
65:ad:ce:ab:2b:bd:07:d2:ab:e0:89:97:53:18:d4:a4:dc:9c:
e7:bb:4c:c8:16:6a:3f:2f:95:83:ac:bb:31:f8:7c:ab:13:1a:
be:f3:34:db:a2:90:79:98:35:26:92:1f:a7:95:ae:04:67:66:
14:9c:a1:d5:fb:92:39:bb:ba:ab:e1:c8:2b:c7:c2:17:25:f2:
0c:0c:d4:a2:08:59:3c:71:7f:05:46:06:7e:09:cc:d9:4e:34:
30:b8:b0:7a:1e:8b:2c:16:c7:fc:14:5f:ea:68:4d:1f:9e:1a:
25:ec:4e:48:66:51:62:f2:00:b1:88:97:f2:6d:d6:6c:ba:1e:
73:fe:1e:f9:43:e4:19:e1:e6:f2:55:48:b1:7d:57:65:67:db:
85:51:5c:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIA+x0ERcFzAr5APn0UehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTAxMTM0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI1NTE1M2ZmNmYwNmFhMDk4OWNkOWQ0NTJiNDJjNTliYmFmMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54dvxu0T7+9RT3F8jLAkzFI4JfZJ
gro98DD8Ib2X0c6s5Wcz7LwkovKOGkyPbvpBztFl40Elgx94ufI07qHAllSO1D8Z
I8FNuYD3ZD8OE0KFOmzySaEVO3V7D+K3gU8v4H9uWuaFDtIaOZZ2T6W5ihoSMabN
cdCvCqlzFjj7Mykdv3wdTTLybQ5PCr2U2ld6EH4ZDuKI5e8XrX308TeIiqS7Mhmj
LkOZ2GDpUFPDgdNO4O80fscZeC8Tf8tGbPyVwoPMWJRAGIm/qoUCHIqEUx5ceEiD
ylhftDFT71ZOsQZFXT6I7qiV41ifsmTrvCsxdrkTxAJuJDY+JRwSnc7NiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi1UVP/bwaqCYnNnUUrQsWbuvHaMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNkxWUlVfOXZCcW9KaWMyZFJTdEN4WnU2OGRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbpMA0G
CSqGSIb3DQEBCwUAA4IBAQCRCwQxyAXgE37BXaCBn+G9AYQDhSa/cInfDtVArJTe
HLo6WNRNEeg0lXenY2ST8/Goh4Kvdb3wte9LbOddVUFcSZbNKwBHEkw6NXXeS8sy
ndlIPPVoUpyt8t/3gdo4iLb3qla+xVPd3056EV5lrc6rK70H0qvgiZdTGNSk3Jzn
u0zIFmo/L5WDrLsx+HyrExq+8zTbopB5mDUmkh+nla4EZ2YUnKHV+5I5u7qr4cgr
x8IXJfIMDNSiCFk8cX8FRgZ+CczZTjQwuLB6HossFsf8FF/qaE0fnhol7E5IZlFi
8gCxiJfybdZsuh5z/h75Q+QZ4ebyVUixfVdlZ9uFUVwG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:38 2025 by rpki-client