Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6VKj0yHtTwBEy99DZT8sxCKcYPM.roa
File: 6VKj0yHtTwBEy99DZT8sxCKcYPM.roa (raw, json)
Hash identifier: fAjZp+bLGmGCBkTw6NBEsnihgd9TRQMJbzb4UYME5Zw=
Subject key identifier: E9:52:A3:D3:21:ED:4F:00:44:CB:DF:43:65:3F:2C:C4:22:9C:60:F3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01961472CDA7F5CD8A8FB324D61438860602
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6VKj0yHtTwBEy99DZT8sxCKcYPM.roa
Signing time: Tue 08 Apr 2025 08:09:50 +0000
ROA not before: Tue 08 Apr 2025 08:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 77.93.143.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:72:cd:a7:f5:cd:8a:8f:b3:24:d6:14:38:86:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 8 08:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e952a3d321ed4f0044cbdf43653f2cc4229c60f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:d6:6c:a3:71:9a:06:43:aa:7b:32:05:f6:
d5:67:0e:dd:73:4d:e0:73:8e:12:02:88:fc:19:64:
60:a4:75:0c:4f:3d:b8:c5:4b:56:0b:f2:97:2b:0f:
4b:a1:29:16:60:00:c2:f5:53:17:18:54:e8:99:dd:
90:71:dc:5d:50:61:a2:21:b8:04:2c:40:98:cb:9f:
66:e1:36:71:5a:16:ec:09:89:27:b9:cf:f2:18:35:
84:e4:a1:7a:23:74:6b:07:6a:60:2e:b9:e3:a8:60:
89:b0:ac:14:ae:cc:ee:bf:92:96:e3:1d:c5:a3:7c:
62:4e:94:fa:14:c7:cf:61:5a:c0:bf:2d:f0:44:a9:
67:36:e8:e3:2a:56:44:2a:25:bf:98:96:bd:77:44:
d1:49:e4:d6:dc:e4:f5:05:17:ff:6a:02:79:5f:b6:
da:96:d1:50:10:c7:b9:7f:1e:23:77:22:1c:f7:4f:
6a:1f:6a:33:8d:6c:d2:6c:f6:64:59:dd:f1:dc:f5:
8a:3d:5b:17:13:bf:d5:cc:e7:67:dd:2e:b5:b7:b0:
a1:ae:38:56:36:d8:1e:3f:eb:75:31:64:06:14:1e:
01:ee:37:16:db:ed:d5:55:51:7b:af:17:b6:7e:21:
f5:9b:a0:82:97:01:ca:e4:c5:ef:a7:95:66:e0:16:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:A3:D3:21:ED:4F:00:44:CB:DF:43:65:3F:2C:C4:22:9C:60:F3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6VKj0yHtTwBEy99DZT8sxCKcYPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
89.213.173.0/24
Signature Algorithm: sha256WithRSAEncryption
34:33:75:46:bd:ed:1a:24:a4:9f:0a:12:65:5a:04:c0:1e:f7:
27:0a:95:f2:a4:c2:be:22:f1:7c:99:58:26:eb:16:68:e1:6c:
44:4c:65:70:7c:70:1b:4d:04:3d:d2:54:f0:bd:2b:be:77:09:
06:66:77:25:44:80:3e:bb:96:70:01:fb:04:a1:60:1b:74:35:
9a:6d:b8:64:c0:30:97:72:49:73:79:62:af:e4:5c:22:26:74:
1c:72:6f:ba:13:ff:79:04:ca:33:a6:c9:a2:de:a4:9a:d8:6f:
7a:33:d6:fe:b5:88:6e:a8:ee:3c:92:9e:9e:1d:5a:9e:24:85:
7a:f5:b0:d8:19:2a:23:12:b6:c5:ac:b6:02:e5:70:23:ea:d3:
c0:c9:2c:32:66:24:e8:e0:d5:f8:46:f8:20:ab:4e:e0:52:ea:
bc:13:6d:58:2c:f4:1e:d5:46:15:7b:dd:cd:77:0f:84:c2:9a:
7c:a2:1d:3f:08:3f:5c:90:6a:76:3b:30:14:8d:5e:65:6d:97:
1f:e7:12:8e:fc:d4:88:bf:bb:99:f8:77:71:f4:bc:18:28:08:
78:27:58:ee:5b:18:19:0f:5b:49:32:b7:0f:c6:45:d3:e2:45:
df:5f:0c:07:00:25:2d:d6:09:e8:37:ce:fc:36:d6:3c:98:37:
50:32:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:25 2025 by rpki-client