Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa
File: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (raw, json)
Hash identifier: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=
Subject key identifier: E9:4E:03:B5:52:92:27:C2:FD:56:3D:F2:41:7B:E8:C6:49:02:50:D7
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0194258F62AD8BF6680026F119C7C363D9C0
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.206.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:62:ad:8b:f6:68:00:26:f1:19:c7:c3:63:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e94e03b5529227c2fd563df2417be8c6490250d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:c5:c0:85:00:63:58:35:91:d2:62:04:9b:
60:08:7d:b2:b8:1c:ef:2e:c0:6e:2b:a1:84:ce:54:
5c:81:9e:4c:f2:e0:00:a4:8d:6a:07:22:4a:ed:a2:
6b:88:e3:78:90:2c:ef:96:b8:1d:36:bb:98:de:ad:
5e:e7:18:59:3c:73:f3:2a:f1:a2:d5:3f:78:18:c8:
cb:97:88:7f:54:c3:1f:7e:46:89:13:74:f0:bf:35:
29:40:7a:49:fc:4c:77:bd:14:6b:be:45:57:2e:80:
49:cf:cd:04:47:f1:9d:1b:02:14:33:12:29:d8:46:
7d:21:e8:54:41:11:9c:03:a1:be:0b:d2:19:77:0a:
06:e5:42:c0:f5:a1:40:6b:2d:ea:ab:67:d4:00:aa:
ce:0f:e5:a0:1c:f5:c6:20:0e:a6:7e:b1:9a:be:29:
08:30:0f:12:60:f7:f3:b9:40:95:8f:02:11:2c:82:
a5:67:47:c4:ee:97:e8:74:3c:1e:86:5c:86:2c:0e:
a1:2f:1b:6a:76:c0:b5:92:e0:0c:a0:a3:ee:fa:10:
ca:5f:ed:2c:e2:1b:55:7d:d2:ae:fa:c3:fb:5e:67:
93:d1:c8:dd:47:11:5c:f0:8c:54:bd:ef:00:df:0c:
74:b3:e9:5e:62:d9:1d:79:04:40:20:00:e4:7f:66:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:03:B5:52:92:27:C2:FD:56:3D:F2:41:7B:E8:C6:49:02:50:D7
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.48.0/24
Signature Algorithm: sha256WithRSAEncryption
42:65:53:f3:9d:cf:49:9d:ee:17:89:ea:18:1f:bb:d7:2e:15:
1f:f5:fe:99:43:83:9e:95:3c:c0:a3:5f:43:26:45:f7:bd:1a:
16:75:38:b3:1c:29:61:d7:ee:47:b0:4f:a1:3f:43:74:09:61:
05:71:ab:ac:78:b4:bb:8d:c4:42:49:5c:cb:ca:21:7a:c3:d5:
99:ed:42:99:99:d6:fd:1e:43:50:53:10:95:c3:e3:54:62:a2:
e3:b2:ae:a6:9c:37:68:b1:36:c1:22:45:c4:54:94:85:f4:fb:
bc:e5:9d:b9:89:3d:c4:b7:b2:14:73:3a:94:09:c3:3b:bf:7d:
b6:9c:49:e9:0b:e5:98:1a:a4:4b:77:1b:95:0c:98:09:e0:15:
9c:6a:48:ec:14:a3:18:6b:ac:29:3b:28:bb:8b:6d:bd:4e:a6:
73:ae:9a:8b:6b:88:1f:16:ad:a0:2e:42:6b:d8:83:dc:ed:75:
28:88:f0:62:e5:ba:86:68:6a:9c:93:4b:ae:a8:2a:bd:0d:76:
87:af:6b:ba:45:1b:28:49:e7:ca:a6:92:81:1c:30:62:0b:d7:
fb:c9:bb:cf:75:36:92:e3:bc:ef:e8:e4:3b:6b:56:c3:e1:35:
05:73:7f:75:8b:2c:e4:ea:9b:9e:86:0d:17:7e:72:26:e3:4d:
91:4c:0e:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2Kti/ZoACbxGcfDY9nAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGU1NjE3NzMwOGMyMGM0MmZiZjQyZjMxMGY0YzBlZjZi
Mjc4OTAwHhcNMjUwMTAyMDU0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTRlMDNiNTUyOTIyN2MyZmQ1NjNkZjI0MTdiZThjNjQ5MDI1MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYXFwIUAY1g1kdJiBJtgCH2yuBzv
LsBuK6GEzlRcgZ5M8uAApI1qByJK7aJriON4kCzvlrgdNruY3q1e5xhZPHPzKvGi
1T94GMjLl4h/VMMffkaJE3TwvzUpQHpJ/Ex3vRRrvkVXLoBJz80ER/GdGwIUMxIp
2EZ9IehUQRGcA6G+C9IZdwoG5ULA9aFAay3qq2fUAKrOD+WgHPXGIA6mfrGavikI
MA8SYPfzuUCVjwIRLIKlZ0fE7pfodDwehlyGLA6hLxtqdsC1kuAMoKPu+hDKX+0s
4htVfdKu+sP7XmeT0cjdRxFc8IxUve8A3wx0s+leYtkdeQRAIADkf2aRFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlOA7VSkifC/VY98kF76MZJAlDXMB8GA1UdIwQY
MBaAFBEOVhdzCMIMQvv0LzEPTA72sniQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYt
NmY0ZTY1ODViNTRiLzEvNlU0RHRWS1NKOEw5VmozeVFYdm94a2tDVU5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wZTU3MTEtMmZkNC00MGNhLTkxMzYtNmY0ZTY1ODViNTRi
LzEvRVE1V0YzTUl3Z3hDLV9Rdk1ROU1EdmF5ZUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW84wMA0G
CSqGSIb3DQEBCwUAA4IBAQBCZVPznc9Jne4XieoYH7vXLhUf9f6ZQ4OelTzAo19D
JkX3vRoWdTizHClh1+5HsE+hP0N0CWEFcauseLS7jcRCSVzLyiF6w9WZ7UKZmdb9
HkNQUxCVw+NUYqLjsq6mnDdosTbBIkXEVJSF9Pu85Z25iT3Et7IUczqUCcM7v322
nEnpC+WYGqRLdxuVDJgJ4BWcakjsFKMYa6wpOyi7i229TqZzrpqLa4gfFq2gLkJr
2IPc7XUoiPBi5bqGaGqck0uuqCq9DXaHr2u6RRsoSefKppKBHDBiC9f7ybvPdTaS
47zv6OQ7a1bD4TUFc391iyzk6puehg0XfnIm402RTA7N
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:06 2025 by rpki-client