Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bG6zp_fbYSGm06PvPKRjV3wwalM.roa
File: bG6zp_fbYSGm06PvPKRjV3wwalM.roa (raw, json)
Hash identifier: DnULPJG592qTjvNBSVKpEConkSAmBxUzPiV7qzEbd/I=
Subject key identifier: 6C:6E:B3:A7:F7:DB:61:21:A6:D3:A3:EF:3C:A4:63:57:7C:30:6A:53
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C4DB31D2F33F30BEBFA7CF99D9847
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bG6zp_fbYSGm06PvPKRjV3wwalM.roa
Signing time: Thu 02 Jan 2025 09:50:19 +0000
ROA not before: Thu 02 Jan 2025 09:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5573
IP address blocks: 195.112.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:4d:b3:1d:2f:33:f3:0b:eb:fa:7c:f9:9d:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c6eb3a7f7db6121a6d3a3ef3ca463577c306a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:d6:fd:14:b9:39:0b:55:f7:bb:cd:44:59:
5d:ea:08:9e:34:bd:33:4c:09:ff:41:c5:6f:67:c6:
41:0f:46:d1:ff:a7:6a:f7:1d:57:c1:00:bc:10:66:
0a:50:f2:3f:0e:83:49:a9:39:77:14:88:05:89:8e:
58:f7:e4:4d:34:48:29:9e:6e:3b:b2:04:4d:35:b8:
6d:e3:b7:17:b2:42:95:2a:db:1d:d9:14:2f:25:ec:
b1:9d:fa:b4:f7:93:ce:ad:30:31:1a:cd:c7:a2:31:
19:ce:6f:30:e7:5d:6b:36:3f:ab:3d:fc:12:d9:f2:
b5:e9:47:3f:d5:45:65:d1:02:76:97:b0:28:3c:60:
af:77:8b:ec:b5:fe:a1:3c:e1:b6:15:05:c9:71:68:
63:d1:9a:d8:53:24:6d:3a:d5:09:ad:64:55:79:59:
ef:c9:6a:e2:63:d9:79:45:b4:37:30:4f:ee:d9:78:
c2:db:ac:53:35:72:3b:d8:f6:24:7e:90:61:33:0f:
97:8d:62:41:0d:f3:ae:b1:94:d3:c0:81:cf:2c:9e:
81:94:1b:99:f0:67:4a:5b:b3:e0:11:a4:e4:29:68:
ec:a9:12:f6:2b:8a:15:0e:93:6f:65:cb:51:3d:ce:
68:d7:cd:4f:1e:99:06:78:f6:cd:ca:95:ed:4c:d2:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:B3:A7:F7:DB:61:21:A6:D3:A3:EF:3C:A4:63:57:7C:30:6A:53
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bG6zp_fbYSGm06PvPKRjV3wwalM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.112.224.0/19
Signature Algorithm: sha256WithRSAEncryption
42:da:83:d6:a1:85:da:99:2e:d9:46:37:44:e3:78:8d:06:3f:
9a:59:de:de:af:cd:c6:7f:4a:2f:a8:9c:e0:93:1d:3b:f0:40:
4e:5b:5a:52:a6:48:a9:7c:d6:d8:ee:7e:cc:dc:c9:d7:1d:eb:
13:f3:41:6b:ec:ad:7b:c3:ab:10:70:0d:e7:7b:57:60:1a:a6:
79:19:d8:e9:2c:da:68:0e:7d:5a:b4:13:c7:21:3e:ae:1b:52:
5a:2a:a1:2d:16:ce:d8:ca:96:89:a1:bd:a8:e5:b2:c9:6e:f1:
cc:c7:f0:21:d7:ff:88:91:c7:55:bb:33:7f:a5:fb:cf:98:ca:
b2:7a:70:98:95:a7:50:b2:a0:15:99:cd:58:e4:52:c0:78:05:
9b:c7:3d:8a:fb:42:2b:fe:da:93:53:5d:cb:ca:26:7f:21:f7:
84:fe:ee:9d:c9:11:b5:6b:f8:01:df:cc:37:1b:4c:3f:19:56:
5e:97:cc:71:64:39:0c:c8:42:b6:ab:5d:d9:78:22:d6:14:8d:
f7:cd:f4:34:9c:d7:e5:f1:0d:18:5e:4c:19:5e:e6:2b:71:9f:
7d:c0:53:8d:60:b6:90:87:eb:cb:63:fc:bc:a4:d1:37:b9:1c:
04:3d:44:6e:fb:40:f1:02:b0:b9:84:c8:a8:a4:14:70:1f:5f:
3c:2d:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:05 2025 by rpki-client