Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6vVgiEYZMrCbvIg7snLCK0eClck.roa
File: 6vVgiEYZMrCbvIg7snLCK0eClck.roa (raw, json)
Hash identifier: Tngpy18O9mXhIwA2tB1D4grU8r3muto26EcUNWrRP0I=
Subject key identifier: EA:F5:60:88:46:19:32:B0:9B:BC:88:3B:B2:72:C2:2B:47:82:95:C9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C77FFB9C3DB0673DE1FB0A6AC6314
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6vVgiEYZMrCbvIg7snLCK0eClck.roa
Signing time: Thu 02 Jan 2025 09:50:30 +0000
ROA not before: Thu 02 Jan 2025 09:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42575
IP address blocks: 109.68.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:77:ff:b9:c3:db:06:73:de:1f:b0:a6:ac:63:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf56088461932b09bbc883bb272c22b478295c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:37:89:95:1d:3e:d1:d8:9b:ca:1d:38:54:
ff:53:9f:d6:95:bc:16:53:6e:c5:3f:a7:ff:2d:9c:
fa:09:96:3b:23:df:11:db:dc:57:e2:85:45:37:90:
87:9b:b8:fe:28:cc:f0:ae:a0:a0:0f:9c:56:4b:ae:
9a:58:75:ca:7e:ec:7a:23:4b:73:fa:e2:15:5f:26:
bf:e0:8e:d0:e9:c9:20:cf:39:06:0a:61:74:89:70:
7c:df:16:e9:10:21:69:4f:fe:f3:6a:41:f8:54:b5:
4c:43:da:d1:f0:47:44:a5:b5:e2:a4:09:be:59:7d:
0c:be:aa:8b:1e:97:e8:83:16:92:51:4f:ff:3f:60:
0a:73:18:cd:cf:78:5d:38:4a:99:eb:56:c3:9f:31:
e2:45:ce:df:bf:ec:c4:09:0e:5f:71:fb:97:d4:9e:
d0:d6:d5:2e:1d:cd:1a:6f:48:f1:32:08:03:ac:6f:
cb:17:73:69:38:ca:c7:db:ae:77:4f:bd:6d:9f:7b:
0c:00:78:21:b9:9d:e8:74:19:b4:a5:9c:96:a7:67:
c7:73:b6:13:da:37:b6:5f:45:34:d6:75:49:5b:11:
b6:ea:8b:77:3c:0c:9a:b9:6c:40:31:10:8e:cb:97:
5c:2c:ea:30:9a:1c:b8:c2:e7:18:71:e4:08:e8:67:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:60:88:46:19:32:B0:9B:BC:88:3B:B2:72:C2:2B:47:82:95:C9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6vVgiEYZMrCbvIg7snLCK0eClck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1d:0e:24:99:a7:9c:2b:cb:ad:a0:1e:36:d3:bb:72:49:c5:
18:9a:43:76:2a:2f:ff:66:d6:2e:1d:12:15:5b:64:33:04:9e:
7d:3d:d9:c7:b1:3d:ea:c4:2d:08:3a:f4:da:03:4f:13:c9:53:
86:0a:a2:3a:5b:b3:32:0a:f0:78:b4:12:01:88:93:b9:a1:14:
a8:97:c0:d9:e6:2c:6e:07:f6:de:1f:6b:77:c4:31:f9:96:8f:
d5:06:3e:8e:c0:9e:8c:df:8e:d7:78:83:d9:61:18:83:d6:3a:
d3:e1:c6:06:f1:ec:1a:8a:cb:a0:b2:da:07:e5:ac:30:65:e7:
6c:fa:d9:73:14:0a:56:9a:5a:3b:5f:c2:dc:d6:f0:04:45:82:
67:29:5d:38:9b:e2:c0:70:06:e2:f9:96:a1:71:60:49:cf:b7:
04:d9:47:86:c3:8a:3e:ed:a4:62:d3:d9:1f:d8:ad:c0:6d:0d:
2b:a9:61:37:1a:97:3b:c3:e1:78:8d:78:e5:8e:cd:12:17:40:
71:7d:30:09:6a:83:53:57:54:1c:e0:41:15:5b:c8:38:39:d7:
89:b9:1f:23:88:ed:ba:de:14:e5:80:6b:07:16:95:ae:55:95:
64:ba:f8:53:81:3c:a2:fe:b9:76:f2:8c:13:e7:eb:2b:4d:ca:
34:f3:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:02:58 2025 by rpki-client