Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa
File: 6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa (raw, json)
Hash identifier: TuEDPLOZHzrwGKuGu5WkL6I1wv3+goqCPl2BGjRQIWw=
Subject key identifier: E9:F5:A7:BD:63:D0:27:ED:69:4B:A3:52:C2:84:47:B9:4C:24:06:2F
Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial: 0194236A2AE53FB8134CD823F3B50F27C8B7
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 87.236.96.0/21 maxlen: 21
91.199.58.0/24 maxlen: 24
185.145.60.0/22 maxlen: 22
195.93.238.0/23 maxlen: 23
2a02:cc8::/32 maxlen: 32
2a02:cc9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:e5:3f:b8:13:4c:d8:23:f3:b5:0f:27:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9f5a7bd63d027ed694ba352c28447b94c24062f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:cc:14:e6:d8:cf:05:14:10:b8:ac:a1:b1:
40:31:58:bd:37:e5:3c:0e:4e:90:9c:a9:b3:86:b9:
84:c7:fc:50:ca:fe:f9:fa:9b:df:22:1f:38:37:87:
18:76:cc:96:3a:ff:70:f0:9e:9c:33:c2:a2:47:5b:
2b:bb:a5:b1:7c:ff:5f:2e:1a:44:74:98:a7:ca:c8:
3f:87:75:1a:f3:73:a5:57:68:ff:a2:73:25:5a:69:
b9:d3:be:b7:e6:84:50:23:29:cb:a3:2d:d6:2a:5c:
87:6e:f3:7e:b9:2a:98:82:b1:b8:03:82:51:17:3a:
0f:f9:15:5b:c5:e8:4b:dd:19:5c:4b:2f:4e:44:e0:
27:7c:11:97:89:50:4d:ad:6a:01:a3:c0:7d:0c:4a:
f0:f5:3a:ec:a6:f9:6b:d3:5b:b2:c1:65:8f:1f:de:
f9:ce:00:d5:ce:e1:8d:38:28:1d:1c:93:88:22:0d:
8b:94:09:8f:c5:89:8a:36:ef:21:8a:9f:e3:8a:1c:
d7:55:27:b7:da:73:f2:0a:cd:9b:43:e7:63:b6:bf:
a7:7e:3d:7c:4b:71:cc:2d:37:10:4b:c7:de:44:83:
e5:24:89:e3:96:d4:42:0e:ba:38:26:42:b0:81:20:
b1:0e:6b:d4:55:11:49:c4:21:53:23:14:25:5c:8c:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:A7:BD:63:D0:27:ED:69:4B:A3:52:C2:84:47:B9:4C:24:06:2F
X509v3 Authority Key Identifier:
keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.96.0/21
91.199.58.0/24
185.145.60.0/22
195.93.238.0/23
IPv6:
2a02:cc8::/31
Signature Algorithm: sha256WithRSAEncryption
8b:f5:c4:48:7e:a9:68:25:6a:be:0f:69:88:b2:6e:d2:d2:f9:
50:7f:a9:be:ee:35:a2:2b:6c:53:d5:5a:8a:52:77:15:71:85:
dd:86:70:54:09:63:5d:e1:24:8b:25:84:c4:53:6f:39:64:4e:
d8:f0:67:42:3b:39:61:09:04:7b:3a:e7:4a:55:5d:86:33:0f:
e0:72:1f:c5:32:68:a1:cb:8e:06:98:9a:8c:f9:82:a1:9b:b5:
a3:bf:e7:d1:bc:ed:70:7e:5e:68:74:45:64:75:1d:83:c3:8a:
a6:3f:7f:17:da:31:7c:cf:7d:a6:89:8b:84:cc:e0:54:ff:b4:
e7:69:8c:e6:68:54:f6:f6:41:10:0f:b5:dc:7b:47:f4:af:aa:
03:ae:2b:00:8a:be:5d:be:27:88:20:3c:87:f9:9f:7e:1c:82:
1a:f7:d6:f6:dd:0f:7f:a9:6f:8d:22:42:20:5a:6c:d9:71:72:
82:fa:27:69:01:30:b7:94:dd:ba:e7:a1:42:59:f6:04:9f:f7:
02:b5:ed:10:76:5d:7d:29:08:bd:6b:09:80:a1:d4:f2:51:93:
03:e5:2b:7e:5f:db:b3:e2:8c:c5:ec:e1:30:ff:d2:8e:b3:df:
20:c6:1f:3d:0a:f4:21:0d:5a:13:8d:76:c3:cb:32:00:22:ce:
88:45:96:74
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQjairlP7gTTNgj87UPJ8i3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3
Y2EyOGUwHhcNMjUwMTAxMTk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWY1YTdiZDYzZDAyN2VkNjk0YmEzNTJjMjg0NDdiOTRjMjQwNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p7MFObYzwUUELisobFAMVi9N+U8
Dk6QnKmzhrmEx/xQyv75+pvfIh84N4cYdsyWOv9w8J6cM8KiR1sru6WxfP9fLhpE
dJinysg/h3Ua83OlV2j/onMlWmm507635oRQIynLoy3WKlyHbvN+uSqYgrG4A4JR
FzoP+RVbxehL3RlcSy9OROAnfBGXiVBNrWoBo8B9DErw9Trspvlr01uywWWPH975
zgDVzuGNOCgdHJOIIg2LlAmPxYmKNu8hip/jihzXVSe32nPyCs2bQ+djtr+nfj18
S3HMLTcQS8feRIPlJInjltRCDro4JkKwgSCxDmvUVRFJxCFTIxQlXIyWJQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFOn1p71j0CftaUujUsKER7lMJAYvMB8GA1UdIwQY
MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm
LTJiNGEzNTM4YzVlMy8xLzZmV252V1BRSi0xcFM2TlN3b1JIdVV3a0JpOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVl
My8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANX7GAD
BABbxzoDBAK5kTwDBAHDXe4wDQQCAAIwBwMFASoCDMgwDQYJKoZIhvcNAQELBQAD
ggEBAIv1xEh+qWglar4PaYiybtLS+VB/qb7uNaIrbFPVWopSdxVxhd2GcFQJY13h
JIslhMRTbzlkTtjwZ0I7OWEJBHs650pVXYYzD+ByH8UyaKHLjgaYmoz5gqGbtaO/
59G87XB+Xmh0RWR1HYPDiqY/fxfaMXzPfaaJi4TM4FT/tOdpjOZoVPb2QRAPtdx7
R/SvqgOuKwCKvl2+J4ggPIf5n34cghr31vbdD3+pb40iQiBabNlxcoL6J2kBMLeU
3brnoUJZ9gSf9wK17RB2XX0pCL1rCYCh1PJRkwPlK35f27PijMXs4TD/0o6z3yDG
Hz0K9CENWhONdsPLMgAizohFlnQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:35 2025 by rpki-client