Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6emdNLHY5PF3heqjFJBcSIDsbR0.roa
File: 6emdNLHY5PF3heqjFJBcSIDsbR0.roa (raw, json)
Hash identifier: a/4xzFE3quIOQcB+mlOlvqIftCWexMYJnU+aSW4ayoA=
Subject key identifier: E9:E9:9D:34:B1:D8:E4:F1:77:85:EA:A3:14:90:5C:48:80:EC:6D:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019649532FCB153D6CBD2A07AEAB9C5BD7B6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6emdNLHY5PF3heqjFJBcSIDsbR0.roa
Signing time: Fri 18 Apr 2025 14:35:10 +0000
ROA not before: Fri 18 Apr 2025 14:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 193.124.203.0/24 maxlen: 24
194.87.148.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:53:2f:cb:15:3d:6c:bd:2a:07:ae:ab:9c:5b:d7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 18 14:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e99d34b1d8e4f17785eaa314905c4880ec6d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:5d:08:27:ce:d6:e3:7b:de:93:95:0d:b0:
a5:24:4c:24:8c:58:45:79:99:65:a1:ea:b3:7c:99:
62:aa:e0:07:cd:2a:ea:c2:4a:f3:00:9d:bb:6e:f8:
3b:f4:29:3c:c6:12:af:68:35:8c:b2:1a:4b:5c:87:
93:d0:a0:2c:fb:89:ef:ae:36:48:82:b8:b2:f5:70:
7f:ab:71:02:61:e3:ae:74:c8:d7:c6:e5:b8:f3:37:
a1:c0:21:13:ef:81:af:3b:c5:22:76:70:5e:7a:b5:
a4:b5:e0:43:21:28:63:67:86:77:20:15:82:07:5d:
7e:ff:0c:ff:04:67:21:4d:4a:8a:d3:de:02:28:90:
92:39:fd:82:81:4b:f5:4d:e9:2b:ca:d9:e0:cb:d9:
00:c5:1b:d1:a9:e2:a7:11:bd:39:d4:a7:a2:f3:85:
32:8c:2e:4f:93:97:d2:d2:29:d5:c8:a3:5c:d3:78:
d8:ad:9b:8b:f7:6f:54:76:b3:47:25:ea:37:f5:47:
e9:11:42:41:30:59:94:a6:17:ca:c9:0e:28:69:7f:
8e:88:c8:1f:d5:59:bf:99:c0:50:63:cc:5f:09:82:
1f:a7:5c:a8:88:05:18:99:c8:7e:b9:66:e4:f2:af:
bc:aa:dd:f7:95:bb:f2:02:cd:dd:bf:66:b1:ca:1c:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:9D:34:B1:D8:E4:F1:77:85:EA:A3:14:90:5C:48:80:EC:6D:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6emdNLHY5PF3heqjFJBcSIDsbR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.87.148.0/24
194.87.189.0/24
195.133.2.0/24
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
51:06:2f:25:cc:9e:c7:b1:c8:ae:76:2e:92:5f:f0:78:2b:fd:
19:8a:e1:af:33:7e:6b:3d:9a:98:e5:6f:2e:05:64:4d:5a:0c:
be:bc:3d:78:76:98:90:fe:71:89:6e:05:de:52:3b:7c:e3:5a:
89:76:1e:58:08:e8:ee:01:13:ca:bf:41:f6:c8:6b:dc:02:eb:
9c:b1:35:df:d9:cf:42:81:3f:67:7b:5b:21:a5:dc:b8:44:3d:
55:44:59:cf:cb:85:01:92:63:e1:3b:06:3b:b2:10:61:8b:9e:
a0:1b:5d:8c:c5:cc:1a:e0:bc:a4:6d:d3:29:e5:08:27:72:22:
20:1c:d0:3d:70:4b:38:ca:00:c0:34:41:d4:84:4b:1b:44:9c:
9b:cd:61:7d:58:e2:3f:49:79:4f:72:3b:57:c2:26:b1:d9:d0:
ca:fb:6b:fe:d5:29:bf:8b:6b:1c:57:e5:68:1b:8c:d0:a7:2a:
94:b3:41:30:17:77:a5:e2:d1:3b:e4:29:a2:d1:51:fc:c8:e3:
ec:7f:e5:33:6d:39:77:ec:4e:2b:bd:0c:31:ee:c3:3e:df:2c:
b4:46:95:6a:42:52:b6:54:e6:73:44:52:d2:d2:c6:82:5b:ed:
79:7a:ac:81:b8:a1:7d:3e:4b:82:ae:80:5d:d8:c4:b2:4a:df:
2b:99:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:29 2025 by rpki-client