Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa
File: 1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa (raw, json)
Hash identifier: 0J2OSGJwBb5kAz+zyMm7vxWi9lhbUdLxvf6hoAONtig=
Subject key identifier: FB:A4:D4:65:D7:9A:5A:E5:1F:66:81:F3:E0:50:06:92:96:0F:73:82
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019642DBE95787C71FBACF47337D9BBCA74A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa
Signing time: Thu 17 Apr 2025 08:27:10 +0000
ROA not before: Thu 17 Apr 2025 08:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213387
IP address blocks: 194.36.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:db:e9:57:87:c7:1f:ba:cf:47:33:7d:9b:bc:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Apr 17 08:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba4d465d79a5ae51f6681f3e0500692960f7382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:cf:ef:21:80:df:5c:95:ec:aa:c6:f8:c3:
3c:28:38:f6:92:f6:84:54:17:0d:8d:4c:8d:d5:b0:
75:af:82:fb:9a:bb:0e:d2:17:fa:7e:c0:fc:76:20:
50:15:0e:b2:c6:4c:c6:e4:db:de:a7:aa:be:d1:19:
b2:fa:fd:80:7e:60:1b:56:0d:b3:7c:b6:25:9f:6c:
ce:d7:41:70:e7:af:0b:1c:24:9d:5d:d2:e5:99:a3:
88:94:ec:fb:39:cc:62:c7:aa:20:fd:a9:a7:24:6c:
16:f8:34:8e:65:7d:c6:d3:f9:8d:b1:72:72:cb:ba:
89:9a:a6:c8:48:29:a5:99:10:fa:d3:d8:ce:d1:0e:
c2:09:e8:17:f8:80:d8:fc:07:a7:98:c8:3a:dd:7d:
59:eb:8c:c1:3b:5b:c4:04:01:40:55:67:a8:c3:72:
a8:6b:c2:d9:46:9b:04:d0:73:b3:33:20:bf:29:d1:
e1:2a:56:ff:c4:67:fd:81:13:9d:2d:2d:13:13:5a:
ba:ae:cb:a7:9b:c6:45:3b:78:6e:33:6b:da:45:fc:
3a:37:c0:11:9a:7f:17:40:27:30:c8:5d:99:79:41:
ba:6e:5f:06:90:bc:94:86:97:a8:2a:f6:1b:46:14:
f6:83:90:9d:f5:12:1e:dd:68:ef:0b:7e:75:75:e6:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:D4:65:D7:9A:5A:E5:1F:66:81:F3:E0:50:06:92:96:0F:73:82
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:85:88:2f:78:68:5c:29:8f:31:de:98:a1:7e:ce:f1:9d:c0:
03:c2:1d:45:7c:99:c2:3c:4d:6f:60:47:36:8f:58:2b:24:c8:
ff:62:34:df:dc:85:5b:2f:63:61:59:5e:88:29:92:e2:59:b2:
d3:7e:f8:c1:44:dc:a7:c7:51:9c:9a:05:fe:47:d0:8f:68:34:
ce:fd:8a:19:5b:a9:1c:04:6a:be:b6:13:71:e7:29:67:9b:71:
de:b9:02:01:fb:89:9d:64:20:d9:50:22:53:b5:1e:0d:9d:00:
46:d2:13:6a:47:07:df:f2:1a:4c:67:45:2e:e6:53:cf:fb:19:
42:e2:44:c5:76:71:d4:10:d9:ed:be:f3:76:83:2d:e8:67:e4:
85:fb:86:67:d8:c8:64:9a:d7:78:d2:e5:5d:5a:5f:e4:63:fb:
10:f0:72:14:f7:c4:3c:bb:e2:8e:3d:6f:6f:69:f2:94:50:98:
0c:e5:b4:da:00:02:5f:fd:05:75:60:e8:1a:8d:ae:2d:ad:1c:
40:70:66:3f:44:e9:70:f6:09:13:18:32:cd:8c:e5:6e:bb:13:
dd:e2:c4:5f:74:4c:5d:dc:e4:e2:7e:a4:db:a4:f2:96:0d:fa:
b3:6f:81:39:69:73:56:62:0c:9c:8c:13:a5:95:7f:50:04:88:
71:49:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:20:06 2025 by rpki-client