Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/6a6m2sY5irDHLsl4ebhsVtwBNoA.roa
File: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (raw, json)
Hash identifier: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=
Subject key identifier: E9:AE:A6:DA:C6:39:8A:B0:C7:2E:C9:78:79:B8:6C:56:DC:01:36:80
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01942369AAF6767AC5963681AED012F4A953
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/6a6m2sY5irDHLsl4ebhsVtwBNoA.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.107.46.0/24 maxlen: 24
2a13:7f00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:aa:f6:76:7a:c5:96:36:81:ae:d0:12:f4:a9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9aea6dac6398ab0c72ec97879b86c56dc013680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:ab:3e:be:95:e0:49:ba:19:d1:74:c5:96:
2c:d5:d5:f5:f6:26:55:40:db:c9:6b:c0:23:ef:cd:
02:25:92:64:e8:46:ae:56:d0:64:69:e3:38:69:1f:
1b:56:71:38:d0:2a:5e:9d:06:e3:ad:b9:61:f6:3a:
c5:0f:46:66:20:bf:86:3c:27:e6:91:1e:67:ed:8c:
42:2e:cd:d6:51:c2:a9:fc:65:da:6d:2c:cf:68:00:
2c:c6:53:20:18:8b:17:69:61:b9:89:d0:b9:c0:c4:
d5:b3:1d:d1:51:b7:98:5d:69:32:0b:bb:3f:f9:0b:
50:e1:dc:b4:e2:91:b8:92:e3:07:f6:c7:ba:0c:a5:
fd:b9:7a:54:83:5a:6f:5f:ce:59:de:1b:73:03:53:
45:45:16:95:19:79:27:3f:5b:cb:bc:cf:87:cc:0e:
7d:1c:ef:29:fa:41:71:98:b0:ed:6b:7d:d4:30:2a:
55:b3:66:1b:f2:9c:74:0b:22:a3:de:88:f3:fc:0e:
cb:e3:32:c1:3e:c6:64:11:3b:b9:41:67:01:a5:4e:
38:f5:e6:7f:ab:27:f6:5d:ec:a8:88:c5:13:ff:32:
aa:04:18:85:5c:a1:56:4e:10:1c:16:99:a3:75:d9:
6f:c2:e5:45:81:35:97:ce:f6:00:17:ec:eb:d9:1e:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:A6:DA:C6:39:8A:B0:C7:2E:C9:78:79:B8:6C:56:DC:01:36:80
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/6a6m2sY5irDHLsl4ebhsVtwBNoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.46.0/24
IPv6:
2a13:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:90:dd:12:eb:3d:19:73:e2:b9:4e:6f:e3:44:15:40:7d:ee:
82:f1:16:05:1e:d8:74:c5:a3:05:de:00:52:3c:77:b6:05:51:
7f:06:fc:24:cf:97:a0:79:36:82:96:b7:cd:3f:3d:96:05:3d:
38:21:ae:19:f9:7e:ab:5a:3c:5a:97:bf:63:b7:b9:f0:60:d1:
7d:44:77:d4:f5:c4:01:37:16:03:53:69:92:85:3c:2e:c0:a5:
2b:87:5e:ec:1e:f0:92:61:06:3f:6a:85:72:c4:7f:a6:7e:b8:
e8:b2:58:52:9e:16:aa:c4:f8:a7:96:31:86:1a:d6:a0:ee:ec:
fa:3e:59:15:99:ae:d6:30:bd:06:f5:88:f4:73:15:31:52:64:
c0:55:fd:1d:f8:01:ff:46:68:ac:69:99:41:e9:02:28:db:9c:
cb:80:22:23:b4:d5:b5:f9:78:91:c2:83:6a:4b:c4:17:c3:30:
3e:1d:c9:3a:d5:4a:28:e4:9e:90:d3:5b:90:9b:93:a4:53:92:
26:26:70:41:a2:8a:dd:79:93:a5:67:cc:4f:11:3f:38:bc:94:
7b:d0:1f:b3:60:19:69:df:fb:9b:80:a6:54:79:e8:55:75:6a:
6b:aa:0c:77:e3:57:fc:d3:d7:0a:8b:62:b6:8e:1f:69:69:65:
bd:3b:13:25
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjaar2dnrFljaBrtAS9KlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjUwMTAxMTk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWFlYTZkYWM2Mzk4YWIwYzcyZWM5Nzg3OWI4NmM1NmRjMDEzNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K6rPr6V4Em6GdF0xZYs1dX19iZV
QNvJa8Aj780CJZJk6EauVtBkaeM4aR8bVnE40CpenQbjrblh9jrFD0ZmIL+GPCfm
kR5n7YxCLs3WUcKp/GXabSzPaAAsxlMgGIsXaWG5idC5wMTVsx3RUbeYXWkyC7s/
+QtQ4dy04pG4kuMH9se6DKX9uXpUg1pvX85Z3htzA1NFRRaVGXknP1vLvM+HzA59
HO8p+kFxmLDta33UMCpVs2Yb8px0CyKj3ojz/A7L4zLBPsZkETu5QWcBpU449eZ/
qyf2XeyoiMUT/zKqBBiFXKFWThAcFpmjddlvwuVFgTWXzvYAF+zr2R4okwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOmuptrGOYqwxy7JeHm4bFbcATaAMB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvNmE2bTJzWTVpckRITHNsNGViaHNWdHdCTm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWsuMA0E
AgACMAcDBQAqE38AMA0GCSqGSIb3DQEBCwUAA4IBAQB9kN0S6z0Zc+K5Tm/jRBVA
fe6C8RYFHth0xaMF3gBSPHe2BVF/Bvwkz5egeTaClrfNPz2WBT04Ia4Z+X6rWjxa
l79jt7nwYNF9RHfU9cQBNxYDU2mShTwuwKUrh17sHvCSYQY/aoVyxH+mfrjoslhS
nhaqxPinljGGGtag7uz6PlkVma7WML0G9Yj0cxUxUmTAVf0d+AH/RmisaZlB6QIo
25zLgCIjtNW1+XiRwoNqS8QXwzA+Hck61Uoo5J6Q01uQm5OkU5ImJnBBoordeZOl
Z8xPET84vJR70B+zYBlp3/ubgKZUeehVdWprqgx341f809cKi2K2jh9paWW9OxMl
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:17 2025 by rpki-client