Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9vfmUm9RByccnOb6XlV_ph-gPk4.roa
File: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (raw, json)
Hash identifier: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=
Subject key identifier: F6:F7:E6:52:6F:51:07:27:1C:9C:E6:FA:5E:55:7F:A6:1F:A0:3E:4E
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019663839781D4F93485134F7F77791FEF5D
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9vfmUm9RByccnOb6XlV_ph-gPk4.roa
Signing time: Wed 23 Apr 2025 16:38:10 +0000
ROA not before: Wed 23 Apr 2025 16:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 62.171.228.0/22 maxlen: 24
194.238.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:83:97:81:d4:f9:34:85:13:4f:7f:77:79:1f:ef:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 23 16:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6f7e6526f5107271c9ce6fa5e557fa61fa03e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:7f:1f:9f:d1:b4:97:2b:7b:fb:eb:99:0d:
c3:ab:51:f0:45:84:43:45:0d:74:4a:5c:2c:8f:f4:
3e:ca:15:68:6f:8d:23:1d:72:a0:fd:63:85:87:fc:
4b:5b:24:c4:37:ae:d5:ff:1f:3e:67:8a:99:10:af:
df:66:5b:5d:92:76:dc:2e:89:cf:51:80:f2:43:9f:
84:08:0c:ef:f8:94:8d:d0:66:7b:9e:4c:e8:d6:9d:
84:78:3a:9b:cb:a6:27:8e:db:fa:7d:2b:6e:ee:7e:
16:18:94:2c:ec:ce:ff:c7:ab:67:e1:39:f7:4d:0f:
0d:35:4c:b0:0a:21:72:32:20:86:4b:df:d2:cf:a8:
fd:22:5a:61:9e:de:e4:a8:21:e3:0a:01:07:87:23:
54:fe:03:64:ee:5c:90:f2:d9:95:49:e0:ae:29:a8:
64:61:5e:42:8e:8b:10:87:a9:f8:28:60:16:89:fc:
70:e4:e7:d7:4e:ba:43:d2:81:e3:90:ce:47:ec:4c:
be:a4:7c:7b:62:2e:6b:12:df:2f:3e:19:22:f6:53:
1b:99:b0:e3:d4:3a:c4:5b:16:74:d9:05:7f:eb:d0:
12:97:90:f6:bc:e6:52:45:e0:b0:4c:e0:36:1c:f1:
c2:0d:e6:c3:39:63:40:8e:5b:51:b0:10:23:c3:0a:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:E6:52:6F:51:07:27:1C:9C:E6:FA:5E:55:7F:A6:1F:A0:3E:4E
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9vfmUm9RByccnOb6XlV_ph-gPk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.228.0/22
194.238.56.0/22
Signature Algorithm: sha256WithRSAEncryption
82:af:41:2d:85:c2:3c:52:54:c0:b2:57:1b:8c:5c:36:87:30:
fc:0c:14:fa:63:4a:10:87:0c:8c:7f:77:63:ea:16:18:f1:6d:
7a:11:ca:e1:37:2b:e1:d1:9d:5f:d9:34:59:c9:18:b8:ff:03:
69:61:25:e6:48:44:04:3d:f8:09:68:fb:56:5d:2e:a7:ec:9d:
16:fe:05:e8:8c:66:53:bb:2b:8d:83:da:99:cb:5b:53:7a:af:
5b:a9:8f:12:50:9e:61:f6:9d:70:ee:17:87:06:57:88:e9:d2:
29:79:56:b7:15:6e:7f:62:b6:14:7b:33:60:a1:bd:a6:71:21:
5e:75:87:42:94:1d:cb:88:d6:17:43:de:c0:57:6d:0d:33:84:
89:7c:1b:d6:f4:97:42:b1:5c:29:d8:4f:92:8e:54:ab:bd:5d:
51:f2:3c:71:2b:92:3b:37:b1:2a:ad:2b:13:e8:cf:86:d2:30:
0b:82:f5:ae:75:fa:0c:17:bf:fb:f2:e8:98:34:79:f2:98:2d:
ff:6f:4e:b3:36:b8:71:76:12:9a:01:fc:87:64:ea:74:0b:8f:
eb:9a:f1:da:45:c2:89:35:e7:b4:1e:8d:88:3f:2e:62:a8:ef:
4e:54:2f:56:73:88:f4:cc:47:73:c5:cb:3a:9b:9b:de:a0:c9:
55:ac:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:17:34 2025 by rpki-client