Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/6AEXqJrMJ67ncmhnndvd75SrSyg.roa
File: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (raw, json)
Hash identifier: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=
Subject key identifier: E8:01:17:A8:9A:CC:27:AE:E7:72:68:67:9D:DB:DD:EF:94:AB:4B:28
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019666A6EC7AA0F946F114F266C6D3C41EC4
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/6AEXqJrMJ67ncmhnndvd75SrSyg.roa
Signing time: Thu 24 Apr 2025 07:15:37 +0000
ROA not before: Thu 24 Apr 2025 07:15:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30698
IP address blocks: 192.48.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a6:ec:7a:a0:f9:46:f1:14:f2:66:c6:d3:c4:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 24 07:15:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e80117a89acc27aee77268679ddbddef94ab4b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:c0:51:c1:11:88:86:57:64:aa:e7:9f:b4:
f8:40:05:45:cc:4d:47:a1:11:80:62:83:38:fb:17:
06:64:c5:af:3f:1f:10:25:24:88:1a:40:38:45:18:
15:eb:0e:a3:87:5b:eb:b9:09:bb:59:0b:95:0d:bb:
ad:bf:45:44:67:ec:b4:4a:70:5c:ad:30:df:ec:07:
0e:07:25:54:b2:85:55:c8:50:51:a5:1e:65:e6:f1:
bd:28:12:69:26:a2:f5:13:62:6f:f2:02:4a:59:ff:
4e:f2:c2:0b:9b:d7:b0:9c:fd:c9:74:f9:60:bb:c8:
d2:94:72:ac:cf:3b:63:19:73:36:fe:ee:66:89:d6:
21:29:e9:e7:57:55:dc:7a:3a:26:e6:8a:8f:a2:6a:
3b:1d:22:a4:45:a1:12:b9:8d:89:2e:0f:6c:62:b7:
60:f4:30:65:02:2f:68:3c:07:ad:74:55:61:00:09:
dd:3b:67:13:97:b0:f8:e5:80:28:d1:4b:75:60:4d:
83:b0:78:01:22:ee:da:1d:b5:20:a9:7d:e5:da:32:
f5:1e:ad:e8:7f:35:da:47:b4:d7:94:4b:30:a6:46:
3e:4b:8c:00:2f:5f:f4:0a:d5:d5:97:f8:7a:08:59:
f7:51:77:85:1f:15:b1:45:c2:31:cc:60:7e:b1:37:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:17:A8:9A:CC:27:AE:E7:72:68:67:9D:DB:DD:EF:94:AB:4B:28
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/6AEXqJrMJ67ncmhnndvd75SrSyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a3:a2:95:ec:62:5f:5c:38:84:ec:2a:34:c3:dd:04:0d:cc:
67:3f:d2:bf:74:a5:54:5a:57:e5:97:c8:9b:6e:2e:6c:35:c4:
b5:56:8d:f8:6f:ca:23:5d:54:15:3b:8c:3c:a7:30:42:c5:e7:
e4:4a:3f:80:20:28:2a:3c:e5:33:ff:7a:44:da:6c:a1:99:90:
5c:fe:12:8e:a2:d5:13:f8:41:00:4d:ad:a2:33:ae:5c:e7:65:
09:74:f3:80:98:3e:ef:c8:b6:d7:52:f8:df:ff:b4:01:fa:19:
9b:d1:8b:57:3a:a5:29:22:f7:d5:7d:3c:8f:59:0b:cb:47:ea:
73:7c:80:f0:d6:5e:ac:9e:c4:9a:c7:0c:72:b4:87:19:6c:7d:
9a:16:f5:75:ab:56:20:d1:0c:3b:bb:26:dd:8b:a2:15:9b:0d:
ed:ed:9b:ef:b5:e7:30:93:f2:cb:96:66:51:1f:99:61:1a:ff:
d2:e3:34:c6:f9:a6:d7:21:61:5a:5b:a9:17:a7:d5:61:44:ad:
d5:33:e5:28:94:cc:1b:db:20:9c:2d:52:ce:61:1f:61:37:f9:
0d:34:92:cc:6a:59:19:b3:7a:e5:07:95:c2:bb:31:80:cc:0e:
26:bc:04:15:7d:84:19:be:26:f7:f7:d8:09:df:21:91:7f:9d:
32:b6:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:23 2025 by rpki-client