Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa
File: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (raw, json)
Hash identifier: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=
Subject key identifier: C6:24:4E:F5:32:A4:62:71:B7:17:95:D1:3E:D1:A9:F3:22:5F:19:D9
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0196367308E6EC671AD99D9E605B3AC21A1D
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa
Signing time: Mon 14 Apr 2025 22:37:10 +0000
ROA not before: Mon 14 Apr 2025 22:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 86.110.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:73:08:e6:ec:67:1a:d9:9d:9e:60:5b:3a:c2:1a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 14 22:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6244ef532a46271b71795d13ed1a9f3225f19d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:82:e6:36:a0:c8:ef:fa:c2:94:98:25:df:
c2:64:60:4d:35:c6:b0:f8:a6:71:b6:55:3c:40:05:
c8:e0:b0:14:7c:57:72:42:a2:50:68:b1:1d:da:2a:
dc:59:95:38:99:71:cb:22:c9:60:f3:77:99:3b:ce:
4b:02:ce:60:54:d2:cb:54:ca:60:1c:42:4c:12:f1:
8c:0a:06:b4:64:58:1d:37:89:5a:d1:da:bd:a5:12:
ed:29:e9:8b:11:4a:9b:94:25:c8:a1:27:50:a0:23:
1c:5e:31:af:8e:8c:68:ad:2d:20:68:8d:b7:e2:ab:
5b:04:60:d6:e5:1e:3f:fd:12:3a:ac:df:d2:91:f2:
aa:06:90:d7:c6:2c:48:e9:23:00:86:c0:a5:da:60:
4a:9c:68:3f:46:ce:76:ea:68:7b:2a:a7:56:91:e3:
78:3e:46:95:ee:5c:3a:fd:d5:67:9c:40:89:6f:1f:
2e:1d:87:86:20:d9:aa:04:62:11:cc:e0:45:90:5f:
41:08:f5:fd:1b:f0:7e:79:70:1f:e3:eb:e6:3f:69:
f2:ff:70:f7:c9:aa:ae:76:36:d9:7c:6d:6f:21:56:
d1:1f:90:fb:42:83:71:a4:da:0c:56:84:37:f0:62:
a5:67:72:6a:68:ca:c0:50:a3:fa:17:48:ad:be:dd:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:4E:F5:32:A4:62:71:B7:17:95:D1:3E:D1:A9:F3:22:5F:19:D9
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.60.0/24
Signature Algorithm: sha256WithRSAEncryption
be:05:55:22:42:d9:79:5b:88:a7:54:15:0e:73:d0:6f:6e:63:
ab:5d:5a:a3:a8:49:d8:69:5e:22:19:4c:e7:0e:c6:9c:61:c5:
e0:54:0a:3a:a6:5f:92:43:88:45:0c:7c:50:6d:7e:37:de:b1:
d6:01:46:d1:88:e3:48:12:5d:89:42:f8:cb:27:90:e5:8d:99:
74:f7:d8:79:46:dc:7f:ba:d4:8c:2a:68:8c:9f:d0:a5:a9:bf:
ea:49:4d:9e:be:01:5a:2f:45:9f:4d:f7:a7:e8:b4:2b:bd:51:
c3:16:41:bc:9a:8a:38:42:97:0e:fd:6a:e7:9e:e8:f4:23:8e:
e0:0c:5b:89:4a:f0:9d:32:96:a2:ed:b7:e4:b9:a4:ab:9d:d1:
2a:e7:3b:ae:9a:d1:52:73:0b:c9:44:f0:ee:88:6c:23:69:c1:
dc:4b:ab:4a:36:be:a7:7f:b6:b0:cf:9f:67:de:67:fa:60:e0:
3c:14:7a:df:dd:d4:d6:d8:c4:aa:48:a6:d4:f5:67:f8:e1:bb:
fe:ea:80:3a:17:ec:d9:e6:ff:00:a5:2c:12:76:f2:47:ae:b4:
79:fa:ed:a6:16:ce:eb:5a:65:e1:e0:d1:5a:4e:19:3e:71:54:
cf:b2:54:18:47:2c:d7:2d:3f:61:2c:ef:fc:ed:28:e0:71:a1:
bc:bb:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:06:22 2025 by rpki-client