Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/6U3Xs040zPO-wT1n1ipqEnLqdc0.roa
File: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (raw, json)
Hash identifier: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=
Subject key identifier: E9:4D:D7:B3:4E:34:CC:F3:BE:C1:3D:67:D6:2A:6A:12:72:EA:75:CD
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 0194228DDBF83A4ACC5CDCB69A0ABC962B5F
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/6U3Xs040zPO-wT1n1ipqEnLqdc0.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48782
IP address blocks: 91.212.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:db:f8:3a:4a:cc:5c:dc:b6:9a:0a:bc:96:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e94dd7b34e34ccf3bec13d67d62a6a1272ea75cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:a5:94:7e:a8:5f:5e:19:64:f2:58:56:a1:
c2:12:51:09:99:41:2d:97:5f:21:57:91:c0:a4:80:
e7:95:b0:23:ab:a0:4c:92:16:87:f8:df:54:f2:27:
75:a1:c7:8b:3f:1b:be:81:a5:52:83:d0:c2:20:36:
f4:59:b6:cd:5f:3d:d5:59:a1:e8:bb:6f:a1:c0:19:
74:c8:48:ca:86:11:60:2d:18:bf:bf:4d:c2:b8:fd:
cb:2f:6c:c1:1e:d6:d0:ad:1a:32:f0:d7:08:73:a6:
79:08:b5:4e:12:0d:43:29:8c:35:38:82:3c:07:db:
4f:ba:48:a6:21:a8:a9:41:4b:28:4c:54:4c:f9:9e:
6a:63:28:32:36:9c:59:54:10:09:92:43:a5:1b:55:
b7:cd:d4:e2:a7:bc:6b:eb:cb:ae:93:fc:c0:16:14:
30:e9:92:9c:11:80:bf:84:0a:30:15:66:8d:98:b7:
0d:6d:98:dd:c3:83:b9:03:2c:82:2d:6c:0e:ab:45:
f2:55:b6:c5:88:5f:12:9c:b9:31:1d:17:af:75:44:
e4:3a:9f:9e:66:78:b0:74:23:af:44:93:0f:90:8d:
b4:ea:a9:35:26:64:e9:c9:84:cb:23:b5:21:9a:2b:
8a:0e:07:c5:93:58:c5:f0:09:64:0c:14:16:cb:3c:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:D7:B3:4E:34:CC:F3:BE:C1:3D:67:D6:2A:6A:12:72:EA:75:CD
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/6U3Xs040zPO-wT1n1ipqEnLqdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ce:97:39:19:59:87:4e:23:d4:29:7f:b5:58:a3:b1:b9:e0:
ca:9f:1c:9e:f8:19:3d:05:85:c0:65:42:cc:6a:82:40:f4:6b:
cf:78:69:df:48:48:9a:f6:2e:4f:4b:b5:27:21:40:d4:a3:f4:
33:b4:d4:0a:a7:89:0e:0d:d3:4f:f8:15:6c:d8:c5:ec:3e:56:
91:e2:09:08:f5:96:09:bc:a6:73:48:a1:47:75:2d:30:2b:99:
e3:5b:08:a5:4b:dc:7f:bb:5a:46:d8:7b:57:59:e3:02:a3:37:
ec:73:df:4b:23:05:49:a5:49:ff:34:9e:30:b4:b4:6f:2e:6d:
42:4b:ff:46:27:62:e3:43:0f:05:9c:d2:19:2f:d2:54:01:a3:
e7:78:f9:9f:65:6d:5d:d2:a9:9d:31:f9:c3:f6:20:61:ea:16:
d7:14:52:af:69:97:06:7a:bb:dc:97:5b:01:4e:ed:3c:20:1b:
4f:8b:60:5a:71:fa:af:63:ac:91:9e:37:8e:e9:53:59:89:a0:
19:cb:6c:82:07:30:c2:c7:62:c7:ba:4a:e3:82:3f:a4:7a:18:
8e:93:34:06:e7:25:43:3b:ca:a0:0c:42:56:f9:60:46:e0:5a:
b1:34:5b:19:33:25:71:e7:67:9e:7a:6d:13:0a:3e:fa:0e:ba:
5e:fa:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:43:33 2025 by rpki-client