Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa
File: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (raw, json)
Hash identifier: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=
Subject key identifier: EA:2E:26:FC:79:27:0E:25:50:45:F1:E8:02:CF:98:54:50:B8:5E:7E
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 0196A0C4BEA3CB30340BEA2200A1CA910EBA
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa
Signing time: Mon 05 May 2025 14:06:10 +0000
ROA not before: Mon 05 May 2025 14:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215984
IP address blocks: 89.150.43.0/24 maxlen: 24
89.150.56.0/24 maxlen: 24
89.150.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:c4:be:a3:cb:30:34:0b:ea:22:00:a1:ca:91:0e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: May 5 14:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea2e26fc79270e255045f1e802cf985450b85e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:43:58:7b:be:11:91:1a:1d:a4:53:6b:5c:cc:
47:4d:d2:71:05:d3:51:6b:0b:c3:70:1b:f6:b3:da:
66:fc:d1:eb:1b:b8:64:24:e6:f4:8d:a0:41:60:a7:
5e:a3:ef:22:53:43:87:8c:b1:1c:fe:ea:6d:e8:e1:
2d:db:fa:65:79:7b:23:a9:0a:bb:63:d5:a7:85:82:
5e:e2:c0:03:1a:41:55:ad:24:29:aa:21:d4:aa:28:
bf:a8:c7:12:28:a6:c2:23:b7:1c:fd:0c:18:c8:9d:
82:49:ee:c7:94:98:ea:3a:7b:7a:74:2b:71:48:73:
4b:d8:5f:f9:d5:14:97:13:7e:f7:1a:3a:86:27:83:
57:fb:b4:ee:b3:74:41:9e:55:a0:ab:6c:a0:d6:dd:
e4:7e:e9:93:94:00:6b:c7:5f:3c:2e:82:92:54:5d:
45:31:c7:70:85:21:c0:20:3d:d6:4d:68:2d:a8:c4:
a5:54:23:aa:d9:8c:68:3d:50:6a:3f:8d:d4:26:27:
56:9c:72:00:bd:5f:21:5c:f5:a4:88:b1:1f:b5:af:
20:81:58:15:ac:e1:13:42:88:d7:98:fa:5d:95:c3:
b8:39:31:ee:b9:69:48:9e:f1:43:89:a5:a2:56:6b:
e5:d7:6c:3c:28:9a:fc:64:b2:31:69:07:a0:bf:04:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2E:26:FC:79:27:0E:25:50:45:F1:E8:02:CF:98:54:50:B8:5E:7E
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.43.0/24
89.150.56.0/24
89.150.61.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c1:4d:29:1b:f1:97:80:82:aa:8b:34:99:14:5c:df:7e:18:
24:c5:80:5c:e1:e2:73:2f:f8:f5:05:bb:7f:70:c7:6b:5d:ff:
f8:00:1d:b4:01:11:e8:47:95:14:33:14:5f:1e:ea:1c:43:79:
98:ee:fb:e6:0c:2d:7e:2f:2f:96:b1:12:03:1d:3c:4b:27:48:
0a:0d:7e:c8:99:0c:db:0b:91:3a:63:f5:f7:be:81:69:a0:11:
9b:17:15:29:72:8a:2e:bc:18:cf:13:c7:b8:52:19:a8:02:0a:
ec:9a:3f:43:28:59:14:b0:b6:a0:0c:73:9c:a3:26:98:f8:c3:
a6:ca:96:2c:f0:f5:29:2f:58:f7:d7:0a:7c:dc:ad:c0:87:3b:
b7:ea:70:30:a9:2a:72:52:2a:15:d3:6e:5a:0c:b8:43:26:51:
3f:9c:01:67:a0:b0:e9:63:d4:49:b6:f0:d2:4f:b1:a3:83:ed:
fd:35:2c:06:aa:38:58:dc:78:72:96:96:88:f1:da:e9:c5:fb:
5f:49:49:13:a2:ca:a9:e6:44:e9:77:88:c7:87:01:f4:8a:f6:
a5:74:d2:97:f7:9e:cc:08:b0:ec:c3:89:9d:b7:07:75:bf:09:
d0:01:6a:7c:e2:d5:c6:8e:02:6f:5e:19:78:2a:e0:fb:4b:41:
fa:c1:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:28:11 2025 by rpki-client