Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/wq6Oybyru5PjGYeKDTrdRRIxOok.roa
File: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (raw, json)
Hash identifier: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=
Subject key identifier: C2:AE:8E:C9:BC:AB:BB:93:E3:19:87:8A:0D:3A:DD:45:12:31:3A:89
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B535135D15869948387D3F7E051FB0
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/wq6Oybyru5PjGYeKDTrdRRIxOok.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61079
IP address blocks: 46.102.64.0/19 maxlen: 24
89.46.12.0/22 maxlen: 24
93.113.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:35:13:5d:15:86:99:48:38:7d:3f:7e:05:1f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ae8ec9bcabbb93e319878a0d3add4512313a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:e1:f6:76:f8:6e:be:f5:ce:db:39:b5:6b:
96:ee:65:0a:f7:42:6a:4e:09:5c:49:01:ab:cc:87:
88:43:17:f7:96:c1:24:4e:bf:dc:64:1d:33:99:9e:
f8:b8:ee:c0:c2:0b:c2:1f:da:b1:a2:38:78:c3:30:
bc:a4:da:a5:43:7a:81:96:65:94:20:65:cf:f4:60:
6a:3d:e2:18:19:31:3a:9a:d0:79:06:15:7b:79:66:
fe:fe:e4:25:9a:70:8e:e7:3d:69:71:34:36:e3:b3:
49:07:60:76:e2:48:9d:a2:b0:4d:c6:06:79:63:2f:
78:15:47:e3:88:d2:90:31:44:94:93:c9:e9:94:70:
3c:58:b1:a8:2c:2b:9d:8d:92:e4:54:71:82:db:2e:
d6:91:0b:90:2a:6f:63:2d:e5:c5:8c:94:78:42:a3:
8f:9e:9b:64:00:7a:d4:d7:ad:51:fa:5f:aa:17:d7:
a7:fa:ba:8e:32:aa:57:e7:3c:fc:5c:d1:b7:ae:09:
4e:e6:48:a6:e4:b4:23:3c:82:db:1c:9b:4f:66:2b:
fb:bd:dc:0b:c6:01:71:a8:69:22:52:fb:a2:5a:9d:
2a:83:98:c5:c1:71:e4:fa:0c:5a:d5:72:79:73:4f:
56:55:7d:9d:62:ed:88:0f:03:2c:9b:a4:e1:9f:fe:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:8E:C9:BC:AB:BB:93:E3:19:87:8A:0D:3A:DD:45:12:31:3A:89
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/wq6Oybyru5PjGYeKDTrdRRIxOok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.64.0/19
89.46.12.0/22
93.113.40.0/22
Signature Algorithm: sha256WithRSAEncryption
13:3a:f9:6e:0a:f3:57:af:b7:5d:aa:55:ce:a3:88:9e:07:d3:
0a:6f:c3:11:81:e7:66:0a:36:9a:67:5f:c2:4f:9d:b1:a2:59:
c5:90:3c:12:ff:ee:91:e0:bc:18:45:66:03:ae:e4:e4:b6:b6:
bf:3b:d5:dc:28:8d:4a:94:90:52:c5:3d:a9:ed:c1:ab:a5:be:
6b:77:07:96:0a:74:8d:0b:e9:f0:ec:65:59:38:4d:a4:8b:be:
4c:52:9f:8f:12:fb:d6:d4:f0:13:e2:9f:39:87:58:d9:cd:f7:
96:17:19:19:d2:77:b0:3f:97:30:09:74:d6:5c:6f:03:5d:dd:
d1:13:08:19:dc:f4:5e:7f:03:d8:ad:4a:bc:51:41:a7:be:c2:
67:9a:05:6c:9a:5f:f4:08:3f:63:6f:15:e9:59:a5:21:d0:ef:
38:d8:56:d0:0f:77:7a:7e:2c:91:e4:19:4d:9d:2d:02:44:9d:
d0:1e:40:54:11:08:48:bc:9c:99:23:fa:81:59:72:61:a0:87:
6a:05:25:de:cf:78:da:ee:9e:18:f3:e0:85:77:90:43:bb:54:
35:12:ac:3c:5a:31:75:70:45:93:3e:33:f8:03:ca:b4:42:84:
83:76:a4:74:3c:c2:46:c5:25:9c:5c:fa:52:cc:6d:f9:cb:18:
cf:21:de:77
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQntTUTXRWGmUg4fT9+BR+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjUwMTAyMTU0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmFlOGVjOWJjYWJiYjkzZTMxOTg3OGEwZDNhZGQ0NTEyMzEzYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPh9nb4br71zts5tWuW7mUK90Jq
TglcSQGrzIeIQxf3lsEkTr/cZB0zmZ74uO7AwgvCH9qxojh4wzC8pNqlQ3qBlmWU
IGXP9GBqPeIYGTE6mtB5BhV7eWb+/uQlmnCO5z1pcTQ247NJB2B24kidorBNxgZ5
Yy94FUfjiNKQMUSUk8nplHA8WLGoLCudjZLkVHGC2y7WkQuQKm9jLeXFjJR4QqOP
nptkAHrU161R+l+qF9en+rqOMqpX5zz8XNG3rglO5kim5LQjPILbHJtPZiv7vdwL
xgFxqGkiUvuiWp0qg5jFwXHk+gxa1XJ5c09WVX2dYu2IDwMsm6Thn/6JOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMKujsm8q7uT4xmHig063UUSMTqJMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvd3E2T3lieXJ1NVBqR1llS0RUcmRSUkl4T29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFLmZAAwQC
WS4MAwQCXXEoMA0GCSqGSIb3DQEBCwUAA4IBAQATOvluCvNXr7ddqlXOo4ieB9MK
b8MRgedmCjaaZ1/CT52xolnFkDwS/+6R4LwYRWYDruTktra/O9XcKI1KlJBSxT2p
7cGrpb5rdweWCnSNC+nw7GVZOE2ki75MUp+PEvvW1PAT4p85h1jZzfeWFxkZ0new
P5cwCXTWXG8DXd3REwgZ3PRefwPYrUq8UUGnvsJnmgVsml/0CD9jbxXpWaUh0O84
2FbQD3d6fiyR5BlNnS0CRJ3QHkBUEQhIvJyZI/qBWXJhoIdqBSXez3ja7p4Y8+CF
d5BDu1Q1Eqw8WjF1cEWTPjP4A8q0QoSDdqR0PMJGxSWcXPpSzG35yxjPId53
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:27:03 2025 by rpki-client