Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6MLXsU-C_a2Naw2UFoKI4rqENRw.roa
File: 6MLXsU-C_a2Naw2UFoKI4rqENRw.roa (raw, json)
Hash identifier: 39TIXQQriJWJ/TFpiiH7TEi8zGelw8Dz/22mlXVdESo=
Subject key identifier: E8:C2:D7:B1:4F:82:FD:AD:8D:6B:0D:94:16:82:88:E2:BA:84:35:1C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019663F607F5DAC4180E25C71BE0D684C1BA
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6MLXsU-C_a2Naw2UFoKI4rqENRw.roa
Signing time: Wed 23 Apr 2025 18:43:10 +0000
ROA not before: Wed 23 Apr 2025 18:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 91.192.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:f6:07:f5:da:c4:18:0e:25:c7:1b:e0:d6:84:c1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 23 18:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c2d7b14f82fdad8d6b0d94168288e2ba84351c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:0f:03:95:3b:f9:a4:9c:ac:fd:94:59:3d:
4f:43:40:be:ae:85:22:8d:0f:83:a3:89:5f:79:4d:
82:12:f6:3c:7c:7b:42:f0:5d:63:54:ca:79:58:61:
66:6a:af:47:43:e2:e9:ed:e7:ed:75:09:f4:23:e3:
a3:4c:ea:22:d9:52:10:99:64:0e:d6:45:3d:c7:02:
ec:92:ef:08:88:e0:8a:d5:a5:f7:9f:8f:0c:c7:d7:
ae:e4:36:6a:3c:00:26:be:8b:94:00:a1:7d:90:49:
b7:c7:c6:64:41:cf:c5:14:66:02:c5:1e:4d:61:11:
17:73:4f:ee:7c:d1:b6:8c:68:94:e0:5e:f6:51:d1:
e0:5c:c9:eb:18:8b:06:5c:b3:7d:c1:99:f8:bd:e2:
f4:b6:41:41:f5:a1:ad:df:51:65:fc:38:40:ac:f0:
84:30:04:4d:10:e7:49:59:92:23:0c:f4:27:c4:43:
d4:c1:73:ef:8f:6a:97:01:f4:46:a7:03:6f:bf:1c:
12:bb:43:d3:05:ae:56:0c:87:eb:0c:09:4b:38:4b:
b4:75:82:ae:f5:fa:29:59:0a:39:83:90:cf:4e:7f:
37:b9:fa:13:7b:bd:2a:92:6b:6b:3c:85:24:98:54:
89:ff:02:42:9d:c9:24:a8:33:43:a7:d6:06:62:f1:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:D7:B1:4F:82:FD:AD:8D:6B:0D:94:16:82:88:E2:BA:84:35:1C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6MLXsU-C_a2Naw2UFoKI4rqENRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6c:3f:99:c3:c3:09:f3:95:52:13:f2:b9:79:dd:b0:78:09:
35:3e:b7:79:d2:a3:b1:30:fe:2d:65:3c:71:46:d6:6d:51:3e:
f9:cf:39:a9:72:56:72:f7:3f:a5:33:fe:7b:03:6c:fc:c8:b1:
30:55:83:33:34:26:39:03:67:20:d9:24:83:28:c2:ee:9a:15:
13:63:42:8c:f3:25:53:70:63:4d:df:a7:0c:91:52:04:29:b1:
6a:b0:0b:2d:39:09:6f:98:2b:f5:eb:0e:86:c8:df:d1:bc:37:
fa:02:de:56:dd:3b:72:c3:ee:a5:67:af:9d:48:d7:b4:e3:f0:
01:b2:04:8e:25:0c:22:53:21:48:e3:85:00:8a:99:e7:3c:65:
d0:90:fc:0e:36:24:82:7e:e0:67:2d:12:74:69:a4:8d:47:02:
39:29:ec:35:84:21:34:2f:c2:7e:e3:ff:37:54:b6:ac:a6:f3:
7c:28:54:bd:f6:8e:d7:fe:f9:bb:1a:12:25:4f:b2:d3:d9:4d:
7c:32:5e:17:e8:98:8b:9d:1a:5b:0f:fa:35:94:79:f4:2e:6c:
f3:e9:eb:9f:23:b2:cd:d6:69:c6:35:f2:ff:4e:6d:7c:03:4e:
17:2e:dc:11:8c:b3:cd:f9:f3:35:71:27:ee:b6:ce:f1:5e:47:
5c:28:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:10 2025 by rpki-client