Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bO__0J56_104i79H5XZkcN7ZAm8.roa
File: bO__0J56_104i79H5XZkcN7ZAm8.roa (raw, json)
Hash identifier: 8n+zMnBg6RkPBi3DAfMHSZeKwmAymGJaCnUxKIQu++k=
Subject key identifier: 6C:EF:FF:D0:9E:7A:FF:5D:38:8B:BF:47:E5:76:64:70:DE:D9:02:6F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01971244992E890FC1C0B5F98C3DA6AC9095
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bO__0J56_104i79H5XZkcN7ZAm8.roa
Signing time: Tue 27 May 2025 15:02:54 +0000
ROA not before: Tue 27 May 2025 15:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45054
IP address blocks: 31.184.228.0/23 maxlen: 24
37.9.51.0/24 maxlen: 24
45.159.200.0/22 maxlen: 22
46.161.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:44:99:2e:89:0f:c1:c0:b5:f9:8c:3d:a6:ac:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 27 15:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cefffd09e7aff5d388bbf47e5766470ded9026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:46:18:5f:f8:01:28:21:7b:04:83:d6:97:
69:f5:96:44:f1:eb:46:49:6f:c6:20:08:42:d1:5b:
9c:90:4e:6f:cb:9e:8a:d8:4c:f8:bc:0b:90:63:e0:
86:e6:ef:1d:7e:ef:1f:e2:cd:cc:ae:0d:a5:7b:43:
0e:b3:c8:b0:81:78:3c:19:e0:6d:ff:4e:09:d8:a9:
ff:92:2f:2e:2c:1e:27:06:51:65:b3:0a:43:d8:43:
71:7d:f1:46:e5:85:b4:6c:2a:1c:ae:21:32:84:72:
83:b7:d8:04:16:ae:6d:d9:b3:08:2c:16:34:95:de:
10:b2:eb:40:1f:6d:5b:50:36:fa:52:5e:fc:73:d2:
1f:7d:85:64:99:6e:73:a3:4f:da:eb:77:c1:0c:e6:
43:c3:30:2a:03:e8:80:ad:29:60:17:0a:c2:f4:ba:
00:64:d8:13:8c:0e:75:ec:b2:33:20:c3:19:b1:19:
d4:0e:cd:d8:fa:91:73:eb:d8:15:2b:a3:24:23:65:
a3:94:70:5e:1e:31:34:2f:60:61:52:83:07:9f:e9:
57:b8:ab:0c:9a:48:1e:82:8c:35:ef:0a:57:d4:54:
62:e6:fa:2d:2e:e8:03:c5:90:93:08:64:9f:e6:ba:
e1:a2:58:89:53:ed:d7:07:d1:52:31:10:5b:e0:16:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:FF:D0:9E:7A:FF:5D:38:8B:BF:47:E5:76:64:70:DE:D9:02:6F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bO__0J56_104i79H5XZkcN7ZAm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.228.0/23
37.9.51.0/24
45.159.200.0/22
46.161.42.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ff:b6:b4:dc:25:b7:a5:15:78:92:08:65:f1:8b:84:2b:8d:
79:c4:1a:4b:54:70:ba:50:36:64:81:22:ca:ba:aa:3f:a3:28:
bd:9e:8b:76:de:87:65:05:22:02:44:7a:78:e1:72:a3:a4:17:
5b:1e:18:02:3e:a6:54:6b:69:7a:a0:a6:ef:cc:8c:d6:74:5a:
44:7d:0b:4f:7d:90:6d:36:4d:87:4a:e7:c1:fe:f0:c6:37:e7:
77:d5:c2:41:9e:b8:fb:76:40:f6:c8:26:48:0a:b1:c4:23:3f:
d4:5c:e9:2a:4d:9f:dc:3a:18:61:19:f4:71:83:0c:21:61:ee:
c3:9a:e0:58:69:a5:13:b8:73:c5:ed:d0:b6:82:6f:f2:63:29:
41:28:76:a2:11:97:ec:b7:94:d4:06:46:47:5a:8b:ef:f1:64:
72:74:5c:26:66:06:1f:3f:ae:88:e2:06:ee:e5:e5:41:94:e2:
5e:9c:af:87:ce:b1:77:3b:1c:89:5f:04:82:62:a9:60:cf:37:
f4:f0:5b:b6:00:42:0e:fb:b7:0c:27:14:b2:87:64:7d:92:d1:
e3:78:39:d2:6d:be:6b:52:99:e5:2f:f9:ff:8b:1e:1b:e6:aa:
f8:48:ee:b6:20:62:37:a4:36:8c:d2:e5:59:44:79:ae:77:e1:
1c:0d:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:11 2025 by rpki-client