Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa
File: 6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa (raw, json)
Hash identifier: n2UlT2v5ne1WHXzI3nHhngksH2y/h3ykBECiQHVHKNo=
Subject key identifier: EA:4F:9D:E3:EC:F3:D4:18:B4:64:1D:F4:35:1F:57:88:12:5D:6C:92
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019426D9814EF8D7D34694CCEB58E729D97C
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12297
IP address blocks: 46.70.0.0/15 maxlen: 24
87.241.128.0/18 maxlen: 24
178.160.192.0/18 maxlen: 24
178.160.245.0/24 maxlen: 24
178.160.248.0/22 maxlen: 24
178.160.251.0/24 maxlen: 24
178.160.252.0/22 maxlen: 24
212.73.64.0/19 maxlen: 24
2a00:f38::/29 maxlen: 48
2a00:f38::/32 maxlen: 48
2a00:f38:0:101d::/64 maxlen: 64
2a00:f38:0:111c::/64 maxlen: 64
2a00:f38:0:111d::/64 maxlen: 64
2a00:f38:0:111e::/64 maxlen: 64
2a00:f38:0:111f::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:81:4e:f8:d7:d3:46:94:cc:eb:58:e7:29:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea4f9de3ecf3d418b4641df4351f5788125d6c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:4e:1a:db:ad:85:11:06:48:05:e9:89:70:
d5:f8:d6:72:b4:38:ec:a0:02:19:1e:6e:0f:77:b7:
53:24:31:23:8f:3e:e2:e1:7d:67:c5:1a:54:d7:c9:
e7:e9:94:19:93:f8:d2:69:f0:43:7a:bd:80:8d:7a:
0b:bf:f3:f5:d5:18:47:fe:1b:57:4b:82:4c:ef:16:
55:9b:c3:56:94:09:09:ac:76:34:c9:f9:4f:2a:c7:
78:e8:ff:ed:6b:8d:9f:7f:1c:95:cc:3c:5a:32:5e:
4f:71:83:4b:c2:d4:6f:fb:05:26:d6:33:62:ab:ec:
7c:5f:58:74:3a:02:d1:a9:a9:a7:88:7e:07:75:7b:
17:d2:1f:78:9a:c7:e2:6b:b9:16:f3:dc:1f:01:42:
55:6d:80:f1:79:59:17:75:fc:9b:1a:5e:a8:1c:a3:
75:1a:97:92:24:d0:78:6b:ae:60:ff:ef:ba:c1:48:
67:90:cb:56:32:58:37:cc:91:d1:bd:e6:16:f8:b6:
df:11:19:d2:61:56:4d:51:e8:c9:61:97:0c:94:85:
11:fb:9f:37:4a:45:84:75:dc:a9:6d:bf:55:b7:d5:
89:c3:be:c8:98:ff:39:c5:77:a2:a7:9c:a3:fa:70:
76:1c:0b:9d:ed:82:a7:70:1e:03:fc:10:67:f5:d3:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:9D:E3:EC:F3:D4:18:B4:64:1D:F4:35:1F:57:88:12:5D:6C:92
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.0.0/15
87.241.128.0/18
178.160.192.0/18
212.73.64.0/19
IPv6:
2a00:f38::/29
Signature Algorithm: sha256WithRSAEncryption
a0:35:0f:b6:cd:6e:01:de:68:0d:ab:2f:40:4a:b4:e9:aa:3c:
d6:e6:b0:aa:f8:e0:0a:ae:3d:21:41:47:31:35:e4:f5:2c:8a:
da:d7:04:38:24:5f:48:7d:77:cf:0a:05:f6:5a:e5:9b:a8:77:
67:8a:b1:82:9a:ae:cf:7b:9a:ed:dd:94:c1:5c:56:ee:24:ee:
2b:e4:56:35:67:ed:ac:88:8f:da:cb:66:c7:cc:c7:ab:5b:84:
a9:cf:fd:7e:ed:29:30:82:df:9e:66:d4:ad:75:ca:e9:cc:40:
1e:1f:c2:bf:31:03:c2:3a:0c:98:ed:40:8c:93:d6:88:7e:9c:
6a:e4:83:27:79:39:53:3b:35:1a:ff:43:34:f3:1e:90:ee:1d:
af:63:bf:04:7b:33:42:ca:69:e6:c2:99:98:2a:df:c4:0c:87:
75:4c:3f:3f:f8:7b:87:5d:36:5e:6f:14:72:e3:1e:88:00:b2:
fb:b2:9e:ff:5c:e7:82:61:cc:4f:51:00:49:5d:38:d3:8c:84:
bb:40:ac:76:d3:3d:f3:a5:b5:68:fe:26:2c:fd:47:33:06:83:
80:53:ed:fa:40:98:a2:bd:de:2f:73:74:9c:2d:73:41:a5:5b:
d8:df:ab:12:e0:52:50:81:07:bf:cb:21:c5:62:4e:bb:f8:85:
36:0b:e4:65
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQm2YFO+NfTRpTM61jnKdl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjUwMTAyMTE0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTRmOWRlM2VjZjNkNDE4YjQ2NDFkZjQzNTFmNTc4ODEyNWQ2YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpROGtuthREGSAXpiXDV+NZytDjs
oAIZHm4Pd7dTJDEjjz7i4X1nxRpU18nn6ZQZk/jSafBDer2AjXoLv/P11RhH/htX
S4JM7xZVm8NWlAkJrHY0yflPKsd46P/ta42ffxyVzDxaMl5PcYNLwtRv+wUm1jNi
q+x8X1h0OgLRqamniH4HdXsX0h94msfia7kW89wfAUJVbYDxeVkXdfybGl6oHKN1
GpeSJNB4a65g/++6wUhnkMtWMlg3zJHRveYW+LbfERnSYVZNUejJYZcMlIUR+583
SkWEddypbb9Vt9WJw77ImP85xXeip5yj+nB2HAud7YKncB4D/BBn9dO7DQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOpPnePs89QYtGQd9DUfV4gSXWySMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvNmstZDQtenoxQmkwWkIzME5SOVhpQkpkYkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBLkYDBAZX
8YADBAayoMADBAXUSUAwDQQCAAIwBwMFAyoADzgwDQYJKoZIhvcNAQELBQADggEB
AKA1D7bNbgHeaA2rL0BKtOmqPNbmsKr44AquPSFBRzE15PUsitrXBDgkX0h9d88K
BfZa5Zuod2eKsYKars97mu3dlMFcVu4k7ivkVjVn7ayIj9rLZsfMx6tbhKnP/X7t
KTCC355m1K11yunMQB4fwr8xA8I6DJjtQIyT1oh+nGrkgyd5OVM7NRr/QzTzHpDu
Ha9jvwR7M0LKaebCmZgq38QMh3VMPz/4e4ddNl5vFHLjHogAsvuynv9c54JhzE9R
AEldONOMhLtArHbTPfOltWj+Jiz9RzMGg4BT7fpAmKK93i9zdJwtc0GlW9jfqxLg
UlCBB7/LIcViTrv4hTYL5GU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:38 2025 by rpki-client